Threat Bulletin 0288: HTTP/2 rapid reset against a crypto exchange platform in the Middle East
HTTP/2 rapid reset against a crypto exchange platform in the Middle East, peaking at 369.1 million requests per second. Mitigated in 0.675 seconds.
rust
How SableBet kept its electronics retail online through a 40-day extortion campaign
SableBet runs a electronics retail serving customers across the Benelux. Before Deflecto, attacks meant diverting traffic to a scrubbing provider […]
Threat Bulletin 0236: GRE flood against a sports betting platform in North America
GRE flood against a sports betting platform in North America, peaking at 384.1 Gbps. Mitigated in 0.148 seconds.
Threat Bulletin 0222: login endpoint flood against a ticketing platform in Southeast Asia
login endpoint flood against a ticketing platform in Southeast Asia, peaking at 475.1 million requests per second. Mitigated in 0.762 seconds.
Threat Bulletin 0213: Slowloris against a online payments platform in Latin America
Slowloris against a online payments platform in Latin America, peaking at 326.5 million requests per second. Mitigated in 0.938 seconds.
Deflecto Edge 3.12.0 release notes
Rolled out to all points of presence on 2 December 2021. No action is required. Fixed a race in origin […]
Threat Bulletin 0200: HTTP/2 rapid reset against a online payments platform in the UK
HTTP/2 rapid reset against a online payments platform in the UK, peaking at 653.3 million requests per second. Mitigated in 0.161 seconds.
Attack seasonality: sports finals, sales and tax deadlines
Over the last few months we have spent a lot of time on attack seasonality: sports finals, sales and tax deadlines. This is what we learned.Latency budgetOur budget for the whole filtering…
Botnets built from misconfigured IoT cameras, again
Here is a question we could not answer well a year ago: what really happens with botnets built from misconfigured IoT cameras, again? We can answer it now.The economics behind itA booter…
HTTP/2 rapid reset one year later (part 3)
We get asked about hTTP/2 rapid reset one year later more than almost anything else, so here is the long answer.Challenges beat blocksBlocking lists go stale within minutes when attackers rotate through…
Botnets built from misconfigured IoT cameras, again (part 4)
This post is about botnets built from misconfigured IoT cameras, again. It started, as most of our posts do, with an incident that did not go the way we expected.What we changedWe…
HTTP/2 rapid reset one year later
Here is a question we could not answer well a year ago: what really happens with hTTP/2 rapid reset one year later? We can answer it now.Testing in production, safelyEvery rule starts…