Threat Bulletin 1101: cache-busting query flood against a B2B SaaS platform in the Nordics
cache-busting query flood against a B2B SaaS platform in the Nordics, peaking at 440.8 million requests per second. Mitigated in 0.018 seconds.
public-sector
Deflecto Edge 19.0.0 release notes
Rolled out to all points of presence on 6 March 2025. No action is required. Log streaming now supports per-tenant […]
Threat Bulletin 1041: HTTP/2 rapid reset against a tax authority portal platform in the Nordics
HTTP/2 rapid reset against a tax authority portal platform in the Nordics, peaking at 929.3 million requests per second. Mitigated in 0.487 seconds.
Deflecto Edge 18.2.3 release notes
Rolled out to all points of presence on 23 February 2025. No action is required. New dashboard widget: CVE-2026-1127. Fixed […]
Threat Bulletin 1007: search endpoint flood against a education platform platform in Western Europe
search endpoint flood against a education platform platform in Western Europe, peaking at 167.3 million requests per second. Mitigated in 0.027 seconds.
How we deploy rule changes to every edge in under 30 seconds (part 2)
how we deploy rule changes to every edge in under 30 seconds sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under…
Threat Bulletin 0986: WebSocket connection flood against a municipal services platform in the Nordics
WebSocket connection flood against a municipal services platform in the Nordics, peaking at 60.1 million requests per second. Mitigated in 0.521 seconds.
Threat Bulletin 0970: UDP reflection (NTP) against a ticketing platform in Western Europe
UDP reflection (NTP) against a ticketing platform in Western Europe, peaking at 108.1 Gbps. Mitigated in 0.897 seconds.
Threat Bulletin 0896: UDP reflection (NTP) against a crypto exchange platform in Latin America
UDP reflection (NTP) against a crypto exchange platform in Latin America, peaking at 19.2 Gbps. Mitigated in 0.190 seconds.
Threat Bulletin 0892: GRE flood against a retail banking platform in the UK
GRE flood against a retail banking platform in the UK, peaking at 155.6 Gbps. Mitigated in 0.541 seconds.
Rules engine 2.0: priorities, dry runs and rollbacks (part 2)
We get asked about rules engine 2.0: priorities, dry runs and rollbacks more than almost anything else, so here is the long answer.Why per-route baselines matterA thousand requests per second to your…
How we test WAF rules against seven days of real traffic (part 2)
Here is a question we could not answer well a year ago: what really happens with how we test WAF rules against seven days of real traffic? We can answer it now.The…