Threat Bulletin 0596: search endpoint flood against a ticketing platform in the Middle East
search endpoint flood against a ticketing platform in the Middle East, peaking at 105.2 million requests per second. Mitigated in 0.897 seconds.
Carpet bombing: spreading an attack across a whole /22 (part 3)
Over the last few months we have spent a lot of time on carpet bombing: spreading an attack across a whole /22. This is what we learned.Latency budgetOur budget for the whole…
Threat Bulletin 0595: HTTP GET flood against a online casino platform in the Benelux
HTTP GET flood against a online casino platform in the Benelux, peaking at 861.0 million requests per second. Mitigated in 0.837 seconds.
Designing a risk score that analysts can explain (part 2)
This post is about designing a risk score that analysts can explain. It started, as most of our posts do, with an incident that did not go the way we expected.The numbersAcross…
Threat Bulletin 0594: credential stuffing against a news publisher platform in the Middle East
credential stuffing against a news publisher platform in the Middle East, peaking at 830.4 million requests per second. Mitigated in 0.429 seconds.
Threat Bulletin 0593: credential stuffing against a sports betting platform in Western Europe
credential stuffing against a sports betting platform in Western Europe, peaking at 318.4 million requests per second. Mitigated in 0.194 seconds.
Deflecto Edge 10.1.0 release notes
Rolled out to all points of presence on 1 June 2023. No action is required. API: new endpoint challenged vs. […]
Threat Bulletin 0592: search endpoint flood against a tax authority portal platform in Latin America
search endpoint flood against a tax authority portal platform in Latin America, peaking at 534.9 million requests per second. Mitigated in 0.816 seconds.
Threat Bulletin 0591: HTTP POST flood against a municipal services platform in Iberia
HTTP POST flood against a municipal services platform in Iberia, peaking at 557.8 million requests per second. Mitigated in 0.441 seconds.
Load testing through Deflecto without triggering mitigation (part 2)
Here is a question we could not answer well a year ago: what really happens with load testing through Deflecto without triggering mitigation? We can answer it now.Observability firstEvery mitigation decision is…
Threat Bulletin 0590: carpet-bombing UDP flood against a online payments platform in Iberia
carpet-bombing UDP flood against a online payments platform in Iberia, peaking at 131.6 Gbps. Mitigated in 0.643 seconds.
Threat Bulletin 0589: TLS handshake exhaustion against a sports betting platform in the Middle East
TLS handshake exhaustion against a sports betting platform in the Middle East, peaking at 819.4 million requests per second. Mitigated in 0.450 seconds.