Threat Bulletin 1422: CLDAP reflection against a video streaming platform in Latin America
CLDAP reflection against a video streaming platform in Latin America, peaking at 253.3 Gbps. Mitigated in 0.407 seconds.
slowloris
Threat Bulletin 1409: HTTP GET flood against a retail banking platform in Central Europe
HTTP GET flood against a retail banking platform in Central Europe, peaking at 746.4 million requests per second. Mitigated in 0.504 seconds.
Threat Bulletin 1390: SYN flood against a news publisher platform in Iberia
SYN flood against a news publisher platform in Iberia, peaking at 221.9 Gbps. Mitigated in 0.226 seconds.
GDPR and request logs: what we store and why (part 3)
Here is a question we could not answer well a year ago: what really happens with gDPR and request logs: what we store and why? We can answer it now.Observability firstEvery mitigation…
Threat Bulletin 1369: UDP reflection (NTP) against a healthcare portal platform in the UK
UDP reflection (NTP) against a healthcare portal platform in the UK, peaking at 6.6 Gbps. Mitigated in 0.408 seconds.
Threat Bulletin 1351: WebSocket connection flood against a healthcare portal platform in Central Europe
WebSocket connection flood against a healthcare portal platform in Central Europe, peaking at 750.9 million requests per second. Mitigated in 0.481 seconds.
Threat Bulletin 1344: login endpoint flood against a airline booking platform in North America
login endpoint flood against a airline booking platform in North America, peaking at 101.6 million requests per second. Mitigated in 0.344 seconds.
Reading a Deflecto incident report (part 3)
We get asked about reading a Deflecto incident report more than almost anything else, so here is the long answer.Testing in production, safelyEvery rule starts in log mode. We replay the previous…
NIS2 and availability: a plain-language summary (part 2)
Here is a question we could not answer well a year ago: what really happens with nIS2 and availability: a plain-language summary? We can answer it now.Testing in production, safelyEvery rule starts…
Deflecto Edge 20.3.0 release notes
Rolled out to all points of presence on 2 February 2026. No action is required. Managed WAF: 38 new signatures […]
Threat Bulletin 1263: credential stuffing against a municipal services platform in Iberia
credential stuffing against a municipal services platform in Iberia, peaking at 55.9 million requests per second. Mitigated in 0.224 seconds.
Threat Bulletin 1234: HTTP GET flood against a tax authority portal platform in North America
HTTP GET flood against a tax authority portal platform in North America, peaking at 110.4 million requests per second. Mitigated in 0.271 seconds.