Threat Bulletin 1448: ACK flood against a crypto exchange platform in the UK
ACK flood against a crypto exchange platform in the UK, peaking at 94.4 Gbps. Mitigated in 0.766 seconds.
udp-amplification
What DORA means for your DDoS resilience (part 2)
This post is about what DORA means for your DDoS resilience. It started, as most of our posts do, with an incident that did not go the way we expected.What we changedWe…
Threat Bulletin 1410: HTTP POST flood against a video streaming platform in the UK
HTTP POST flood against a video streaming platform in the UK, peaking at 136.9 million requests per second. Mitigated in 0.395 seconds.
Deflecto Edge 22.1.5 release notes
Rolled out to all points of presence on 12 July 2026. No action is required. Managed WAF: 27 new signatures […]
GDPR and request logs: what we store and why (part 3)
Here is a question we could not answer well a year ago: what really happens with gDPR and request logs: what we store and why? We can answer it now.Observability firstEvery mitigation…
Threat Bulletin 1366: HTTP POST flood against a ticketing platform in the Middle East
HTTP POST flood against a ticketing platform in the Middle East, peaking at 784.1 million requests per second. Mitigated in 0.642 seconds.
Threat Bulletin 1350: SYN flood against a sports betting platform in Southeast Asia
SYN flood against a sports betting platform in Southeast Asia, peaking at 278.7 Gbps. Mitigated in 0.300 seconds.
Threat Bulletin 1347: cache-busting query flood against a municipal services platform in the Middle East
cache-busting query flood against a municipal services platform in the Middle East, peaking at 486.3 million requests per second. Mitigated in 0.693 seconds.
Why attackers love login endpoints (part 2)
Here is a question we could not answer well a year ago: what really happens with why attackers love login endpoints? We can answer it now.What we changedWe moved the decision from…
Tuning challenge thresholds for mobile traffic behind CGNAT (part 2)
This post is about tuning challenge thresholds for mobile traffic behind CGNAT. It started, as most of our posts do, with an incident that did not go the way we expected.The economics…
Preparing evidence for an ISO 27001 audit after an incident (part 4)
This post is about preparing evidence for an ISO 27001 audit after an incident. It started, as most of our posts do, with an incident that did not go the way we…
Threat Bulletin 1328: memcached amplification against a education platform platform in the Middle East
memcached amplification against a education platform platform in the Middle East, peaking at 307.1 Gbps. Mitigated in 0.119 seconds.