Threat Bulletin 0264: UDP reflection (DNS) against a electronics retail platform in Western Europe
UDP reflection (DNS) against a electronics retail platform in Western Europe, peaking at 348.4 Gbps. Mitigated in 0.867 seconds.
observability
Threat Bulletin 0229: ACK flood against a gaming community platform in the Middle East
ACK flood against a gaming community platform in the Middle East, peaking at 310.8 Gbps. Mitigated in 0.191 seconds.
Threat Bulletin 0221: cache-busting query flood against a developer platform platform in the Nordics
cache-busting query flood against a developer platform platform in the Nordics, peaking at 179.7 million requests per second. Mitigated in 0.681 seconds.
Threat Bulletin 0211: CLDAP reflection against a online casino platform in the UK
CLDAP reflection against a online casino platform in the UK, peaking at 141.3 Gbps. Mitigated in 0.657 seconds.
Threat Bulletin 0200: HTTP/2 rapid reset against a online payments platform in the UK
HTTP/2 rapid reset against a online payments platform in the UK, peaking at 653.3 million requests per second. Mitigated in 0.161 seconds.
Threat Bulletin 0185: GRE flood against a video streaming platform in Latin America
GRE flood against a video streaming platform in Latin America, peaking at 348.6 Gbps. Mitigated in 0.191 seconds.
Credential stuffing volumes after the latest combo-list leak (part 3)
This post is about credential stuffing volumes after the latest combo-list leak. It started, as most of our posts do, with an incident that did not go the way we expected.Observability firstEvery…
Threat Bulletin 0177: credential stuffing against a retail banking platform in Iberia
credential stuffing against a retail banking platform in Iberia, peaking at 67.7 million requests per second. Mitigated in 0.482 seconds.
Bot management without CAPTCHAs (part 3)
Here is a question we could not answer well a year ago: what really happens with bot management without CAPTCHAs? We can answer it now.Challenges beat blocksBlocking lists go stale within minutes…
Threat Bulletin 0138: CLDAP reflection against a airline booking platform in North America
CLDAP reflection against a airline booking platform in North America, peaking at 311.3 Gbps. Mitigated in 0.889 seconds.
Rate limiting APIs without breaking legitimate integrations (part 3)
Here is a question we could not answer well a year ago: what really happens with rate limiting APIs without breaking legitimate integrations? We can answer it now.Observability firstEvery mitigation decision is…
Threat Bulletin 0101: credential stuffing against a online payments platform in Latin America
credential stuffing against a online payments platform in Latin America, peaking at 875.2 million requests per second. Mitigated in 0.714 seconds.