Threat Bulletin 1254: carpet-bombing UDP flood against a fashion retail platform in the Nordics
carpet-bombing UDP flood against a fashion retail platform in the Nordics, peaking at 224.7 Gbps. Mitigated in 0.531 seconds.
carpet-bombing UDP flood against a fashion retail platform in the Nordics, peaking at 224.7 Gbps. Mitigated in 0.531 seconds.
This post is about why we wrote our proxy data plane in Rust. It started, as most of our posts do, with an incident that did not go the way we expected.Compliance…
Over the last few months we have spent a lot of time on why we are staying independent. This is what we learned.What we changedWe moved the decision from a single threshold…
credential stuffing against a ticketing platform in North America, peaking at 423.1 million requests per second. Mitigated in 0.939 seconds.
search endpoint flood against a developer platform platform in the Middle East, peaking at 727.2 million requests per second. Mitigated in 0.208 seconds.
Rolled out to all points of presence on 17 August 2025. No action is required. API: new endpoint GraphQL depth […]
CLDAP reflection against a gaming community platform in the Nordics, peaking at 310.1 Gbps. Mitigated in 0.277 seconds.
carpet-bombing UDP flood against a video streaming platform in the Middle East, peaking at 194.1 Gbps. Mitigated in 0.381 seconds.
TLS handshake exhaustion against a online casino platform in Iberia, peaking at 78.1 million requests per second. Mitigated in 0.320 seconds.
carpet-bombing UDP flood against a crypto exchange platform in the Nordics, peaking at 146.4 Gbps. Mitigated in 0.103 seconds.
This post is about writing your first custom WAF rule. It started, as most of our posts do, with an incident that did not go the way we expected.Latency budgetOur budget for…
Rolled out to all points of presence on 28 April 2025. No action is required. Proof-of-work challenge payload reduced by […]