Threat Bulletin 0994: Slowloris against a sports betting platform in Southeast Asia
Slowloris against a sports betting platform in Southeast Asia, peaking at 372.5 million requests per second. Mitigated in 0.769 seconds.
quic
Threat Bulletin 0993: GRE flood against a sports betting platform in Central Europe
GRE flood against a sports betting platform in Central Europe, peaking at 47.2 Gbps. Mitigated in 0.441 seconds.
The economics of DDoS-for-hire in 2026
We get asked about the economics of DDoS-for-hire in 2026 more than almost anything else, so here is the long answer.Observability firstEvery mitigation decision is logged with its reasons, and every log…
Threat Bulletin 0984: SYN flood against a online payments platform in North America
SYN flood against a online payments platform in North America, peaking at 202.1 Gbps. Mitigated in 0.103 seconds.
Deflecto Edge 17.3.1 release notes
Rolled out to all points of presence on 31 October 2024. No action is required. Security: updated TLS library to […]
Writing your first custom WAF rule
Over the last few months we have spent a lot of time on writing your first custom WAF rule. This is what we learned.Protecting the originNone of this matters if the attacker…
Threat Bulletin 0926: login endpoint flood against a fashion retail platform in the UK
login endpoint flood against a fashion retail platform in the UK, peaking at 101.4 million requests per second. Mitigated in 0.876 seconds.
Threat Bulletin 0924: credential stuffing against a sports betting platform in Central Europe
credential stuffing against a sports betting platform in Central Europe, peaking at 643.8 million requests per second. Mitigated in 0.590 seconds.
Data residency for public-sector customers (part 3)
Here is a question we could not answer well a year ago: what really happens with data residency for public-sector customers? We can answer it now.Compliance is a side effectRegulators increasingly ask…
Threat Bulletin 0869: ACK flood against a healthcare portal platform in the Nordics
ACK flood against a healthcare portal platform in the Nordics, peaking at 352.8 Gbps. Mitigated in 0.354 seconds.
Scraper bots are getting better at pretending to be Chrome (part 3)
We get asked about scraper bots are getting better at pretending to be Chrome more than almost anything else, so here is the long answer.Observability firstEvery mitigation decision is logged with its…
Threat Bulletin 0843: login endpoint flood against a online payments platform in Latin America
login endpoint flood against a online payments platform in Latin America, peaking at 759.7 million requests per second. Mitigated in 0.503 seconds.