Deflecto Edge 15.3.5 release notes
Rolled out to all points of presence on 12 May 2024. No action is required. Faster rule propagation: median 27 […]
http2
Deflecto Edge 15.3.4 release notes
Rolled out to all points of presence on 29 April 2024. No action is required. API: new endpoint Azure Sentinel. […]
Threat Bulletin 0777: WebSocket connection flood against a sports betting platform in the Nordics
WebSocket connection flood against a sports betting platform in the Nordics, peaking at 975.8 million requests per second. Mitigated in 0.771 seconds.
Threat Bulletin 0757: search endpoint flood against a retail banking platform in North America
search endpoint flood against a retail banking platform in North America, peaking at 413.0 million requests per second. Mitigated in 0.776 seconds.
Residential proxies are the new botnet
We get asked about residential proxies are the new botnet more than almost anything else, so here is the long answer.Lessons for your own runbookKnow who can change DNS at two in…
Threat Bulletin 0713: Slowloris against a retail banking platform in the Middle East
Slowloris against a retail banking platform in the Middle East, peaking at 22.4 million requests per second. Mitigated in 0.858 seconds.
Threat Bulletin 0712: HTTP GET flood against a education platform platform in the Middle East
HTTP GET flood against a education platform platform in the Middle East, peaking at 138.6 million requests per second. Mitigated in 0.642 seconds.
Threat Bulletin 0695: carpet-bombing UDP flood against a developer platform platform in North America
carpet-bombing UDP flood against a developer platform platform in North America, peaking at 96.1 Gbps. Mitigated in 0.822 seconds.
Threat Bulletin 0676: HTTP GET flood against a developer platform platform in the Middle East
HTTP GET flood against a developer platform platform in the Middle East, peaking at 775.9 million requests per second. Mitigated in 0.456 seconds.
Protecting WordPress login and XML-RPC from abuse (part 4)
We get asked about protecting WordPress login and XML-RPC from abuse more than almost anything else, so here is the long answer.Challenges beat blocksBlocking lists go stale within minutes when attackers rotate…
Tracking a booter service across four rebrands (part 2)
Over the last few months we have spent a lot of time on tracking a booter service across four rebrands. This is what we learned.The economics behind itA booter service rents out…
Threat Bulletin 0630: CLDAP reflection against a sports betting platform in the Nordics
CLDAP reflection against a sports betting platform in the Nordics, peaking at 214.7 Gbps. Mitigated in 0.897 seconds.