Threat Bulletin 0318: HTTP POST flood against a B2B SaaS platform in Southeast Asia
HTTP POST flood against a B2B SaaS platform in Southeast Asia, peaking at 205.1 million requests per second. Mitigated in 0.754 seconds.
dns
Positive security for APIs from your OpenAPI spec (part 2)
We get asked about positive security for APIs from your OpenAPI spec more than almost anything else, so here is the long answer.Measuring successWe track three numbers for every incident: time to…
Threat Bulletin 0293: UDP reflection (NTP) against a online casino platform in the Middle East
UDP reflection (NTP) against a online casino platform in the Middle East, peaking at 179.7 Gbps. Mitigated in 0.259 seconds.
Threat Bulletin 0244: ACK flood against a video streaming platform in the UK
ACK flood against a video streaming platform in the UK, peaking at 214.8 Gbps. Mitigated in 0.317 seconds.
Bot management without CAPTCHAs (part 2)
bot management without CAPTCHAs sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Compliance is a side effectRegulators increasingly ask for…
Threat Bulletin 0175: WebSocket connection flood against a airline booking platform in the Middle East
WebSocket connection flood against a airline booking platform in the Middle East, peaking at 674.8 million requests per second. Mitigated in 0.264 seconds.
Threat Bulletin 0146: ACK flood against a tax authority portal platform in the Middle East
ACK flood against a tax authority portal platform in the Middle East, peaking at 137.3 Gbps. Mitigated in 0.812 seconds.
Threat Bulletin 0098: HTTP POST flood against a news publisher platform in North America
HTTP POST flood against a news publisher platform in North America, peaking at 935.8 million requests per second. Mitigated in 0.430 seconds.
Attack seasonality: sports finals, sales and tax deadlines (part 3)
attack seasonality: sports finals, sales and tax deadlines sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Lessons for your own…
Threat Bulletin 0091: HTTP GET flood against a crypto exchange platform in Southeast Asia
HTTP GET flood against a crypto exchange platform in Southeast Asia, peaking at 369.5 million requests per second. Mitigated in 0.110 seconds.
Inside a Mirai variant that learned to speak HTTP/2 (part 2)
We get asked about inside a Mirai variant that learned to speak HTTP/2 more than almost anything else, so here is the long answer.The economics behind itA booter service rents out a…
NIS2 and availability: a plain-language summary (part 4)
This post is about nIS2 and availability: a plain-language summary. It started, as most of our posts do, with an incident that did not go the way we expected.Testing in production, safelyEvery…