Threat Bulletin 1092: WebSocket connection flood against a news publisher platform in the Nordics
WebSocket connection flood against a news publisher platform in the Nordics, peaking at 792.5 million requests per second. Mitigated in 0.865 seconds.
Threat Bulletin 1091: HTTP POST flood against a healthcare portal platform in the UK
HTTP POST flood against a healthcare portal platform in the UK, peaking at 581.9 million requests per second. Mitigated in 0.680 seconds.
Writing your first custom WAF rule (part 3)
This post is about writing your first custom WAF rule. It started, as most of our posts do, with an incident that did not go the way we expected.Latency budgetOur budget for…
Threat Bulletin 1090: UDP reflection (DNS) against a electronics retail platform in the Nordics
UDP reflection (DNS) against a electronics retail platform in the Nordics, peaking at 374.1 Gbps. Mitigated in 0.655 seconds.
Threat Bulletin 1089: credential stuffing against a crypto exchange platform in Central Europe
credential stuffing against a crypto exchange platform in Central Europe, peaking at 320.5 million requests per second. Mitigated in 0.898 seconds.
Deflecto Edge 19.1.0 release notes
Rolled out to all points of presence on 28 April 2025. No action is required. Proof-of-work challenge payload reduced by […]
Threat Bulletin 1088: carpet-bombing UDP flood against a ticketing platform in Iberia
carpet-bombing UDP flood against a ticketing platform in Iberia, peaking at 135.2 Gbps. Mitigated in 0.563 seconds.
Threat Bulletin 1087: HTTP GET flood against a retail banking platform in North America
HTTP GET flood against a retail banking platform in North America, peaking at 84.6 million requests per second. Mitigated in 0.717 seconds.
Threat Bulletin 1086: login endpoint flood against a online payments platform in Central Europe
login endpoint flood against a online payments platform in Central Europe, peaking at 197.5 million requests per second. Mitigated in 0.547 seconds.
Why most layer 7 attacks last less than ten minutes (part 2)
We get asked about why most layer 7 attacks last less than ten minutes more than almost anything else, so here is the long answer.Lessons for your own runbookKnow who can change…
Threat Bulletin 1085: Slowloris against a news publisher platform in the Nordics
Slowloris against a news publisher platform in the Nordics, peaking at 638.9 million requests per second. Mitigated in 0.291 seconds.
Threat Bulletin 1084: GRE flood against a crypto exchange platform in the Benelux
GRE flood against a crypto exchange platform in the Benelux, peaking at 293.1 Gbps. Mitigated in 0.275 seconds.