Threat Bulletin 0652: ACK flood against a education platform platform in the Middle East
ACK flood against a education platform platform in the Middle East, peaking at 91.4 Gbps. Mitigated in 0.906 seconds.
slowloris
Threat Bulletin 0645: UDP reflection (DNS) against a tax authority portal platform in Western Europe
UDP reflection (DNS) against a tax authority portal platform in Western Europe, peaking at 234.2 Gbps. Mitigated in 0.429 seconds.
Threat Bulletin 0636: HTTP/2 rapid reset against a education platform platform in Latin America
HTTP/2 rapid reset against a education platform platform in Latin America, peaking at 782.7 million requests per second. Mitigated in 0.178 seconds.
Threat Bulletin 0627: SYN flood against a B2B SaaS platform in the UK
SYN flood against a B2B SaaS platform in the UK, peaking at 192.7 Gbps. Mitigated in 0.174 seconds.
Threat Bulletin 0619: WebSocket connection flood against a healthcare portal platform in Western Europe
WebSocket connection flood against a healthcare portal platform in Western Europe, peaking at 696.0 million requests per second. Mitigated in 0.658 seconds.
Threat Bulletin 0615: HTTP/2 rapid reset against a crypto exchange platform in the Nordics
HTTP/2 rapid reset against a crypto exchange platform in the Nordics, peaking at 896.1 million requests per second. Mitigated in 0.602 seconds.
Threat Bulletin 0610: WebSocket connection flood against a sports betting platform in the Middle East
WebSocket connection flood against a sports betting platform in the Middle East, peaking at 974.6 million requests per second. Mitigated in 0.708 seconds.
Carpet bombing: spreading an attack across a whole /22 (part 3)
Over the last few months we have spent a lot of time on carpet bombing: spreading an attack across a whole /22. This is what we learned.Latency budgetOur budget for the whole…
Threat Bulletin 0547: memcached amplification against a retail banking platform in Iberia
memcached amplification against a retail banking platform in Iberia, peaking at 85.3 Gbps. Mitigated in 0.445 seconds.
Threat Bulletin 0544: cache-busting query flood against a crypto exchange platform in North America
cache-busting query flood against a crypto exchange platform in North America, peaking at 593.7 million requests per second. Mitigated in 0.404 seconds.
Writing your first custom WAF rule (part 2)
This post is about writing your first custom WAF rule. It started, as most of our posts do, with an incident that did not go the way we expected.Compliance is a side…
Threat Bulletin 0521: WebSocket connection flood against a online casino platform in the UK
WebSocket connection flood against a online casino platform in the UK, peaking at 329.6 million requests per second. Mitigated in 0.229 seconds.