Botnets built from misconfigured IoT cameras, again (part 3)
This post is about botnets built from misconfigured IoT cameras, again. It started, as most of our posts do, with an incident that did not go the way we expected.Measuring successWe track…
rust
Deflecto Edge 20.3.0 release notes
Rolled out to all points of presence on 2 February 2026. No action is required. Managed WAF: 38 new signatures […]
Threat Bulletin 1278: HTTP POST flood against a retail banking platform in North America
HTTP POST flood against a retail banking platform in North America, peaking at 375.1 million requests per second. Mitigated in 0.943 seconds.
Threat Bulletin 1247: ACK flood against a sports betting platform in North America
ACK flood against a sports betting platform in North America, peaking at 15.6 Gbps. Mitigated in 0.381 seconds.
Threat Bulletin 1204: TLS handshake exhaustion against a video streaming platform in Iberia
TLS handshake exhaustion against a video streaming platform in Iberia, peaking at 618.4 million requests per second. Mitigated in 0.052 seconds.
Threat Bulletin 1202: login endpoint flood against a tax authority portal platform in the Nordics
login endpoint flood against a tax authority portal platform in the Nordics, peaking at 373.5 million requests per second. Mitigated in 0.106 seconds.
What to put in your DDoS runbook (part 3)
We get asked about what to put in your DDoS runbook more than almost anything else, so here is the long answer.What we changedWe moved the decision from a single threshold to…
What we learned from our first hundred customers
This post is about what we learned from our first hundred customers. It started, as most of our posts do, with an incident that did not go the way we expected.Lessons for…
How we deploy rule changes to every edge in under 30 seconds (part 4)
This post is about how we deploy rule changes to every edge in under 30 seconds. It started, as most of our posts do, with an incident that did not go the…
Threat Bulletin 1024: HTTP POST flood against a municipal services platform in Iberia
HTTP POST flood against a municipal services platform in Iberia, peaking at 88.1 million requests per second. Mitigated in 0.560 seconds.
Threat Bulletin 0992: cache-busting query flood against a gaming community platform in Central Europe
cache-busting query flood against a gaming community platform in Central Europe, peaking at 22.1 million requests per second. Mitigated in 0.430 seconds.
Threat Bulletin 0980: UDP reflection (DNS) against a developer platform platform in Western Europe
UDP reflection (DNS) against a developer platform platform in Western Europe, peaking at 174.9 Gbps. Mitigated in 0.389 seconds.