CloudFlare – Page 2 – Network Securitas

October 27, 2016

Are the Days of “Booter” Services Numbered?

This post was originally published on this siteIt may soon become easier for Internet service providers to anticipate and block certain types of online assaults launched by Web-based attack-for-hire services known as “booter” or “stresser” services, new research released today suggests. The findings come from researchers in Germany who’ve been studying patterns that emerge when miscreants attempt to mass-scan the entire Internet looking for systems useful for launching these digital sieges — known as “distributed denial-of-service” or DDoS attacks. To understand the significance of their research, it may help to briefly examine how DDoS attacks have evolved. Not long ago, if one […]

August 27, 2017

Is Your Mobile Carrier Your Weakest Link?

This post was originally published on this siteMore online services than ever now offer two-step authentication — requiring customers to complete a login using their phone or other mobile device after supplying a username and password. But with so many services relying on your mobile for that second factor, there has never been more riding on the security of your mobile account. Below are some tips to ensure your mobile device (or, more specifically, your mobile carrier) isn’t the weakest link in your security chain. For reasons explored more in The Value of a Hacked Email Account, many people become so preoccupied with securing […]

August 2, 2019

What We Can Learn from the Capital One Hack

This post was originally published on this siteOn Monday, a former Amazon employee was arrested and charged with stealing more than 100 million consumer applications for credit from Capital One. Since then, many have speculated the breach was perhaps the result of a previously unknown “zero-day” flaw, or an “insider” attack in which the accused took advantage of access surreptitiously obtained from her former employer. But new information indicates the methods she deployed have been well understood for years. What follows is based on interviews with almost a dozen security experts, including one who is privy to details about the ongoing breach investigation. […]

September 10, 2021

KrebsOnSecurity Hit By Huge New IoT Botnet “Meris”

This post was originally published on this siteOn Thursday evening, KrebsOnSecurity was the subject of a rather massive (and mercifully brief) distributed denial-of-service (DDoS) attack. The assault came from “Meris,” the same new “Internet of Things” (IoT) botnet behind record-shattering attacks against Russian search giant Yandex this week and internet infrastructure firm Cloudflare earlier this summer. Cloudflare recently wrote about its attack, which clocked in at 17.2 million bogus requests-per-second. To put that in perspective, Cloudflare serves over 25 million HTTP requests per second on average. In its Aug. 19 writeup, Cloudflare neglected to assign a name to the botnet […]