Threat Bulletin 0596: search endpoint flood against a ticketing platform in the Middle East
search endpoint flood against a ticketing platform in the Middle East, peaking at 105.2 million requests per second. Mitigated in 0.897 seconds.
elections
Designing a risk score that analysts can explain (part 2)
This post is about designing a risk score that analysts can explain. It started, as most of our posts do, with an incident that did not go the way we expected.The numbersAcross…
Load testing through Deflecto without triggering mitigation (part 2)
Here is a question we could not answer well a year ago: what really happens with load testing through Deflecto without triggering mitigation? We can answer it now.Observability firstEvery mitigation decision is…
Threat Bulletin 0589: TLS handshake exhaustion against a sports betting platform in the Middle East
TLS handshake exhaustion against a sports betting platform in the Middle East, peaking at 819.4 million requests per second. Mitigated in 0.450 seconds.
What a 3.8 Tbps UDP flood looks like from the inside (part 2)
Over the last few months we have spent a lot of time on what a 3.8 Tbps UDP flood looks like from the inside. This is what we learned.What actually happens during…
Threat Bulletin 0578: WebSocket connection flood against a airline booking platform in the Middle East
WebSocket connection flood against a airline booking platform in the Middle East, peaking at 87.7 million requests per second. Mitigated in 0.906 seconds.
Deflecto Edge 10.0.0 release notes
Rolled out to all points of presence on 28 April 2023. No action is required. Proof-of-work challenge payload reduced by […]
Deflecto Edge 9.0.1 release notes
Rolled out to all points of presence on 19 April 2023. No action is required. Security: updated TLS library to […]
Threat Bulletin 0516: TLS handshake exhaustion against a ticketing platform in Latin America
TLS handshake exhaustion against a ticketing platform in Latin America, peaking at 216.6 million requests per second. Mitigated in 0.605 seconds.
Threat Bulletin 0508: ACK flood against a online payments platform in the Benelux
ACK flood against a online payments platform in the Benelux, peaking at 145.6 Gbps. Mitigated in 0.649 seconds.
Threat Bulletin 0503: credential stuffing against a municipal services platform in Central Europe
credential stuffing against a municipal services platform in Central Europe, peaking at 704.4 million requests per second. Mitigated in 0.425 seconds.
Threat Bulletin 0495: search endpoint flood against a retail banking platform in Southeast Asia
search endpoint flood against a retail banking platform in Southeast Asia, peaking at 415.7 million requests per second. Mitigated in 0.403 seconds.