Threat Bulletin 1162: CLDAP reflection against a gaming community platform in the Nordics
CLDAP reflection against a gaming community platform in the Nordics, peaking at 310.1 Gbps. Mitigated in 0.277 seconds.
waf
NIS2 and availability: a plain-language summary (part 3)
We get asked about nIS2 and availability: a plain-language summary more than almost anything else, so here is the long answer.Protecting the originNone of this matters if the attacker can reach your…
Threat Bulletin 1141: TLS handshake exhaustion against a municipal services platform in North America
TLS handshake exhaustion against a municipal services platform in North America, peaking at 272.8 million requests per second. Mitigated in 0.423 seconds.
Threat Bulletin 1132: Slowloris against a crypto exchange platform in Latin America
Slowloris against a crypto exchange platform in Latin America, peaking at 110.8 million requests per second. Mitigated in 0.045 seconds.
Threat Bulletin 1088: carpet-bombing UDP flood against a ticketing platform in Iberia
carpet-bombing UDP flood against a ticketing platform in Iberia, peaking at 135.2 Gbps. Mitigated in 0.563 seconds.
Threat Bulletin 1077: HTTP/2 rapid reset against a ticketing platform in Western Europe
HTTP/2 rapid reset against a ticketing platform in Western Europe, peaking at 265.3 million requests per second. Mitigated in 0.923 seconds.
Threat Bulletin 1039: credential stuffing against a crypto exchange platform in Latin America
credential stuffing against a crypto exchange platform in Latin America, peaking at 632.0 million requests per second. Mitigated in 0.712 seconds.
Preparing evidence for an ISO 27001 audit after an incident
Over the last few months we have spent a lot of time on preparing evidence for an ISO 27001 audit after an incident. This is what we learned.Latency budgetOur budget for the…
Threat Bulletin 0979: search endpoint flood against a gaming community platform in Central Europe
search endpoint flood against a gaming community platform in Central Europe, peaking at 288.3 million requests per second. Mitigated in 0.703 seconds.
Introducing adaptive proof-of-work difficulty (part 2)
Over the last few months we have spent a lot of time on introducing adaptive proof-of-work difficulty. This is what we learned.What we got wrongOur first version challenged too eagerly on mobile…
Rules engine 2.0: priorities, dry runs and rollbacks (part 2)
We get asked about rules engine 2.0: priorities, dry runs and rollbacks more than almost anything else, so here is the long answer.Why per-route baselines matterA thousand requests per second to your…
Threat Bulletin 0884: ACK flood against a video streaming platform in North America
ACK flood against a video streaming platform in North America, peaking at 326.2 Gbps. Mitigated in 0.920 seconds.