Threat Bulletin 1010: Slowloris against a online payments platform in Iberia
Slowloris against a online payments platform in Iberia, peaking at 306.7 million requests per second. Mitigated in 0.566 seconds.
proof-of-work
Deflecto Edge 17.5.0 release notes
Rolled out to all points of presence on 21 November 2024. No action is required. Reduced p99 filtering latency by […]
Threat Bulletin 0968: TLS handshake exhaustion against a retail banking platform in Western Europe
TLS handshake exhaustion against a retail banking platform in Western Europe, peaking at 597.8 million requests per second. Mitigated in 0.314 seconds.
Deflecto Edge 17.4.0 release notes
Rolled out to all points of presence on 9 November 2024. No action is required. Security: updated TLS library to […]
Per-tenant rate limits for SaaS platforms (part 3)
Over the last few months we have spent a lot of time on per-tenant rate limits for SaaS platforms. This is what we learned.Observability firstEvery mitigation decision is logged with its reasons,…
Threat Bulletin 0943: UDP reflection (DNS) against a tax authority portal platform in the UK
UDP reflection (DNS) against a tax authority portal platform in the UK, peaking at 313.5 Gbps. Mitigated in 0.027 seconds.
Threat Bulletin 0939: CLDAP reflection against a tax authority portal platform in Central Europe
CLDAP reflection against a tax authority portal platform in Central Europe, peaking at 251.4 Gbps. Mitigated in 0.404 seconds.
How to hide your origin IP properly (part 2)
how to hide your origin IP properly sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Protecting the originNone of this…
Deflecto Edge 17.0.1 release notes
Rolled out to all points of presence on 25 August 2024. No action is required. Fixed a race in origin […]
Threat Bulletin 0898: TLS handshake exhaustion against a video streaming platform in Latin America
TLS handshake exhaustion against a video streaming platform in Latin America, peaking at 314.2 million requests per second. Mitigated in 0.346 seconds.
Positive security for APIs from your OpenAPI spec
Over the last few months we have spent a lot of time on positive security for APIs from your OpenAPI spec. This is what we learned.Observability firstEvery mitigation decision is logged with…
Threat Bulletin 0861: credential stuffing against a online payments platform in North America
credential stuffing against a online payments platform in North America, peaking at 12.4 million requests per second. Mitigated in 0.928 seconds.