Threat Bulletin 0418: login endpoint flood against a developer platform platform in the UK
login endpoint flood against a developer platform platform in the UK, peaking at 233.6 million requests per second. Mitigated in 0.600 seconds.
extortion
Threat Bulletin 0407: login endpoint flood against a municipal services platform in the Benelux
login endpoint flood against a municipal services platform in the Benelux, peaking at 372.6 million requests per second. Mitigated in 0.319 seconds.
Threat Bulletin 0379: TLS handshake exhaustion against a municipal services platform in North America
TLS handshake exhaustion against a municipal services platform in North America, peaking at 439.4 million requests per second. Mitigated in 0.529 seconds.
What to put in your DDoS runbook
We get asked about what to put in your DDoS runbook more than almost anything else, so here is the long answer.Observability firstEvery mitigation decision is logged with its reasons, and every…
Threat Bulletin 0370: UDP reflection (NTP) against a healthcare portal platform in the Benelux
UDP reflection (NTP) against a healthcare portal platform in the Benelux, peaking at 336.0 Gbps. Mitigated in 0.107 seconds.
Threat Bulletin 0331: WebSocket connection flood against a electronics retail platform in North America
WebSocket connection flood against a electronics retail platform in North America, peaking at 585.6 million requests per second. Mitigated in 0.375 seconds.
Measuring the real cost of a TLS handshake under attack (part 4)
measuring the real cost of a TLS handshake under attack sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Challenges beat…
Deflecto Edge 5.0.0 release notes
Rolled out to all points of presence on 21 March 2022. No action is required. Managed WAF: 8 new signatures […]
Threat Bulletin 0263: carpet-bombing UDP flood against a ticketing platform in Southeast Asia
carpet-bombing UDP flood against a ticketing platform in Southeast Asia, peaking at 250.0 Gbps. Mitigated in 0.701 seconds.
Preparing evidence for an ISO 27001 audit after an incident (part 3)
This post is about preparing evidence for an ISO 27001 audit after an incident. It started, as most of our posts do, with an incident that did not go the way we…
Threat Bulletin 0196: CLDAP reflection against a electronics retail platform in Southeast Asia
CLDAP reflection against a electronics retail platform in Southeast Asia, peaking at 379.9 Gbps. Mitigated in 0.464 seconds.
Attack seasonality: sports finals, sales and tax deadlines
Over the last few months we have spent a lot of time on attack seasonality: sports finals, sales and tax deadlines. This is what we learned.Latency budgetOur budget for the whole filtering…