Threat Bulletin 0985: credential stuffing against a online payments platform in Iberia
credential stuffing against a online payments platform in Iberia, peaking at 406.9 million requests per second. Mitigated in 0.671 seconds.
mirai
Threat Bulletin 0951: credential stuffing against a video streaming platform in Southeast Asia
credential stuffing against a video streaming platform in Southeast Asia, peaking at 139.2 million requests per second. Mitigated in 0.343 seconds.
Threat Bulletin 0950: HTTP POST flood against a retail banking platform in Southeast Asia
HTTP POST flood against a retail banking platform in Southeast Asia, peaking at 526.5 million requests per second. Mitigated in 0.320 seconds.
Threat Bulletin 0928: GRE flood against a tax authority portal platform in Latin America
GRE flood against a tax authority portal platform in Latin America, peaking at 57.0 Gbps. Mitigated in 0.624 seconds.
Threat Bulletin 0919: HTTP/2 rapid reset against a B2B SaaS platform in North America
HTTP/2 rapid reset against a B2B SaaS platform in North America, peaking at 384.2 million requests per second. Mitigated in 0.921 seconds.
Threat Bulletin 0906: GRE flood against a education platform platform in the Benelux
GRE flood against a education platform platform in the Benelux, peaking at 225.6 Gbps. Mitigated in 0.660 seconds.
Positive security for APIs from your OpenAPI spec
Over the last few months we have spent a lot of time on positive security for APIs from your OpenAPI spec. This is what we learned.Observability firstEvery mitigation decision is logged with…
Threat Bulletin 0885: ACK flood against a sports betting platform in Latin America
ACK flood against a sports betting platform in Latin America, peaking at 63.7 Gbps. Mitigated in 0.483 seconds.
Threat Bulletin 0878: TLS handshake exhaustion against a education platform platform in Latin America
TLS handshake exhaustion against a education platform platform in Latin America, peaking at 152.7 million requests per second. Mitigated in 0.300 seconds.
Data residency for public-sector customers (part 3)
Here is a question we could not answer well a year ago: what really happens with data residency for public-sector customers? We can answer it now.Compliance is a side effectRegulators increasingly ask…
Threat Bulletin 0862: GRE flood against a healthcare portal platform in Iberia
GRE flood against a healthcare portal platform in Iberia, peaking at 274.4 Gbps. Mitigated in 0.301 seconds.
Threat Bulletin 0857: SYN flood against a news publisher platform in the Benelux
SYN flood against a news publisher platform in the Benelux, peaking at 27.9 Gbps. Mitigated in 0.836 seconds.