Threat Bulletin 0326: UDP reflection (DNS) against a retail banking platform in Western Europe
UDP reflection (DNS) against a retail banking platform in Western Europe, peaking at 253.2 Gbps. Mitigated in 0.770 seconds.
api-security
Threat Bulletin 0304: credential stuffing against a electronics retail platform in Western Europe
credential stuffing against a electronics retail platform in Western Europe, peaking at 304.6 million requests per second. Mitigated in 0.441 seconds.
Threat Bulletin 0277: carpet-bombing UDP flood against a sports betting platform in Latin America
carpet-bombing UDP flood against a sports betting platform in Latin America, peaking at 337.9 Gbps. Mitigated in 0.041 seconds.
Threat Bulletin 0274: WebSocket connection flood against a education platform platform in Central Europe
WebSocket connection flood against a education platform platform in Central Europe, peaking at 682.8 million requests per second. Mitigated in 0.082 seconds.
Attack seasonality: sports finals, sales and tax deadlines (part 2)
We get asked about attack seasonality: sports finals, sales and tax deadlines more than almost anything else, so here is the long answer.What we got wrongOur first version challenged too eagerly on…
The hidden cost of retries during a flood (part 3)
Over the last few months we have spent a lot of time on the hidden cost of retries during a flood. This is what we learned.Measuring successWe track three numbers for every…
Deflecto Edge 3.14.5 release notes
Rolled out to all points of presence on 11 February 2022. No action is required. Faster rule propagation: median 37 […]
Threat Bulletin 0222: login endpoint flood against a ticketing platform in Southeast Asia
login endpoint flood against a ticketing platform in Southeast Asia, peaking at 475.1 million requests per second. Mitigated in 0.762 seconds.
Threat Bulletin 0210: credential stuffing against a education platform platform in Southeast Asia
credential stuffing against a education platform platform in Southeast Asia, peaking at 972.4 million requests per second. Mitigated in 0.259 seconds.
Threat Bulletin 0203: UDP reflection (NTP) against a fashion retail platform in Southeast Asia
UDP reflection (NTP) against a fashion retail platform in Southeast Asia, peaking at 307.7 Gbps. Mitigated in 0.096 seconds.
HTTP/2 rapid reset one year later (part 3)
We get asked about hTTP/2 rapid reset one year later more than almost anything else, so here is the long answer.Challenges beat blocksBlocking lists go stale within minutes when attackers rotate through…
Threat Bulletin 0146: ACK flood against a tax authority portal platform in the Middle East
ACK flood against a tax authority portal platform in the Middle East, peaking at 137.3 Gbps. Mitigated in 0.812 seconds.