Log streaming to your SIEM, now in near real time (part 2)
We get asked about log streaming to your SIEM, now in near real time more than almost anything else, so here is the long answer.What actually happens during a floodThe first thing…
proof-of-work
Threat Bulletin 0818: UDP reflection (NTP) against a education platform platform in North America
UDP reflection (NTP) against a education platform platform in North America, peaking at 294.5 Gbps. Mitigated in 0.101 seconds.
Threat Bulletin 0808: UDP reflection (DNS) against a developer platform platform in the Middle East
UDP reflection (DNS) against a developer platform platform in the Middle East, peaking at 79.9 Gbps. Mitigated in 0.905 seconds.
Threat Bulletin 0787: WebSocket connection flood against a municipal services platform in Southeast Asia
WebSocket connection flood against a municipal services platform in Southeast Asia, peaking at 842.1 million requests per second. Mitigated in 0.621 seconds.
Threat Bulletin 0780: memcached amplification against a airline booking platform in the Middle East
memcached amplification against a airline booking platform in the Middle East, peaking at 20.7 Gbps. Mitigated in 0.339 seconds.
Choosing between DNS delegation and CNAME onboarding (part 2)
We get asked about choosing between DNS delegation and CNAME onboarding more than almost anything else, so here is the long answer.Protecting the originNone of this matters if the attacker can reach…
Threat Bulletin 0737: TLS handshake exhaustion against a online payments platform in Southeast Asia
TLS handshake exhaustion against a online payments platform in Southeast Asia, peaking at 692.8 million requests per second. Mitigated in 0.224 seconds.
Threat Bulletin 0719: SYN flood against a fashion retail platform in Iberia
SYN flood against a fashion retail platform in Iberia, peaking at 183.7 Gbps. Mitigated in 0.123 seconds.
Threat Bulletin 0714: ACK flood against a ticketing platform in the Middle East
ACK flood against a ticketing platform in the Middle East, peaking at 292.9 Gbps. Mitigated in 0.426 seconds.
Threat Bulletin 0651: search endpoint flood against a retail banking platform in Iberia
search endpoint flood against a retail banking platform in Iberia, peaking at 175.9 million requests per second. Mitigated in 0.614 seconds.
Threat Bulletin 0650: carpet-bombing UDP flood against a electronics retail platform in the Benelux
carpet-bombing UDP flood against a electronics retail platform in the Benelux, peaking at 47.9 Gbps. Mitigated in 0.729 seconds.
Threat Bulletin 0645: UDP reflection (DNS) against a tax authority portal platform in Western Europe
UDP reflection (DNS) against a tax authority portal platform in Western Europe, peaking at 234.2 Gbps. Mitigated in 0.429 seconds.