Threat Bulletin 0323: SYN flood against a airline booking platform in North America
SYN flood against a airline booking platform in North America, peaking at 101.8 Gbps. Mitigated in 0.351 seconds.
black-friday
Threat Bulletin 0318: HTTP POST flood against a B2B SaaS platform in Southeast Asia
HTTP POST flood against a B2B SaaS platform in Southeast Asia, peaking at 205.1 million requests per second. Mitigated in 0.754 seconds.
How we deploy rule changes to every edge in under 30 seconds
Over the last few months we have spent a lot of time on how we deploy rule changes to every edge in under 30 seconds. This is what we learned.Observability firstEvery mitigation…
Threat Bulletin 0291: Slowloris against a tax authority portal platform in the UK
Slowloris against a tax authority portal platform in the UK, peaking at 13.0 million requests per second. Mitigated in 0.060 seconds.
Threat Bulletin 0287: ACK flood against a gaming community platform in the Middle East
ACK flood against a gaming community platform in the Middle East, peaking at 258.2 Gbps. Mitigated in 0.670 seconds.
Threat Bulletin 0265: HTTP/2 rapid reset against a airline booking platform in Iberia
HTTP/2 rapid reset against a airline booking platform in Iberia, peaking at 238.5 million requests per second. Mitigated in 0.572 seconds.
Threat Bulletin 0247: UDP reflection (NTP) against a video streaming platform in Latin America
UDP reflection (NTP) against a video streaming platform in Latin America, peaking at 329.0 Gbps. Mitigated in 0.646 seconds.
Threat Bulletin 0243: carpet-bombing UDP flood against a online casino platform in Western Europe
carpet-bombing UDP flood against a online casino platform in Western Europe, peaking at 235.1 Gbps. Mitigated in 0.836 seconds.
Threat Bulletin 0232: UDP reflection (NTP) against a gaming community platform in the Benelux
UDP reflection (NTP) against a gaming community platform in the Benelux, peaking at 142.0 Gbps. Mitigated in 0.585 seconds.
Attack seasonality: sports finals, sales and tax deadlines
Over the last few months we have spent a lot of time on attack seasonality: sports finals, sales and tax deadlines. This is what we learned.Latency budgetOur budget for the whole filtering…
Credential stuffing volumes after the latest combo-list leak (part 3)
This post is about credential stuffing volumes after the latest combo-list leak. It started, as most of our posts do, with an incident that did not go the way we expected.Observability firstEvery…
The new incident timeline, explained (part 3)
Over the last few months we have spent a lot of time on the new incident timeline, explained. This is what we learned.Lessons for your own runbookKnow who can change DNS at…