Threat Bulletin 0608: login endpoint flood against a fashion retail platform in Central Europe
login endpoint flood against a fashion retail platform in Central Europe, peaking at 306.8 million requests per second. Mitigated in 0.707 seconds.
xdp
Credential stuffing volumes after the latest combo-list leak (part 4)
Here is a question we could not answer well a year ago: what really happens with credential stuffing volumes after the latest combo-list leak? We can answer it now.Lessons for your own…
Designing a risk score that analysts can explain (part 2)
This post is about designing a risk score that analysts can explain. It started, as most of our posts do, with an incident that did not go the way we expected.The numbersAcross…
Threat Bulletin 0587: carpet-bombing UDP flood against a education platform platform in Western Europe
carpet-bombing UDP flood against a education platform platform in Western Europe, peaking at 205.3 Gbps. Mitigated in 0.089 seconds.
What a 3.8 Tbps UDP flood looks like from the inside (part 2)
Over the last few months we have spent a lot of time on what a 3.8 Tbps UDP flood looks like from the inside. This is what we learned.What actually happens during…
Threat Bulletin 0573: HTTP GET flood against a video streaming platform in the UK
HTTP GET flood against a video streaming platform in the UK, peaking at 483.4 million requests per second. Mitigated in 0.261 seconds.
Threat Bulletin 0553: HTTP/2 rapid reset against a video streaming platform in Southeast Asia
HTTP/2 rapid reset against a video streaming platform in Southeast Asia, peaking at 206.2 million requests per second. Mitigated in 0.244 seconds.
Tail latency is the only latency that matters
We get asked about tail latency is the only latency that matters more than almost anything else, so here is the long answer.Observability firstEvery mitigation decision is logged with its reasons, and…
Threat Bulletin 0497: login endpoint flood against a video streaming platform in Latin America
login endpoint flood against a video streaming platform in Latin America, peaking at 132.0 million requests per second. Mitigated in 0.689 seconds.
Threat Bulletin 0492: memcached amplification against a video streaming platform in Western Europe
memcached amplification against a video streaming platform in Western Europe, peaking at 332.0 Gbps. Mitigated in 0.300 seconds.
How VelaTicket kept its healthcare portal online through Black Friday
VelaTicket runs a healthcare portal serving customers across North America. Before Deflecto, attacks meant diverting traffic to a scrubbing provider […]
Threat Bulletin 0452: CLDAP reflection against a sports betting platform in Latin America
CLDAP reflection against a sports betting platform in Latin America, peaking at 162.4 Gbps. Mitigated in 0.486 seconds.