Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The Rise of DDoS Attacks and How to Stop Them

netspi.com | blog | #cloud | #aws | #cloudflare | #mitigation | #ddos | #isp | #nexusguard

Summary

US DDoS attacks rose 278% year over year in Q1 2020 as remote work surged; a look at application-layer versus network-layer attacks, ISP mitigation, and lessons from AWS, Akamai, and Cloudflare.
Published
Collected

original ↗

Related coverage

blog · blog.viettelcybersecurity.com
DNS in DDoS attacks and how to protect agains it
A Viettel Cyber Security overview of how DNS is leveraged in DDoS attacks and the protective measures organizations can take.
blog · blog.viettelcybersecurity.com
Một số kiểu tấn công vào hạ tầng mạng ISP và giải pháp phòng chống tấn công
An overview of attacks targeting ISP infrastructure, covering DDoS, IP spoofing, route leaking and BGP hijacking, illustrated by the 2016 Mirai attack on Liberia's national internet.
vulnerability · projectdiscovery.io
How ConnectWise streamlined vulnerability detection with ProjectDiscovery
ConnectWise moved vulnerability scanning for 20,000+ AWS instances from Tenable Cloud to ProjectDiscovery, cutting scan time for 10,000 assets from two days to 15 minutes and retiring custom scripts.
vulnerability · projectzero.google
[CVE-2020-16250] Enter the Vault: Authentication Issues in HashiCorp Vault
In this blog post I'll discuss two vulnerabilities in HashiCorp Vault and its integration with Amazon Web Services (AWS) and Google Cloud Platform (GCP). These issues can lead to an authentication bypass in configurations that use the aws and gcp auth methods, and demonstrate the type of issues you can find in modern “cloud-native” software. Both vulnerabilities (CVE-2020-16250/16251) were addressed by HashiCorp and are fixed in Vault versions 1.2.5, 1.3.8, 1.4.4 and 1.5.1 released in August.
blog · netspi.com
Stay Ahead of Cloud Threats: Introducing Azure and AWS Security Reviews
Discover how NetSPI's Azure & AWS Configuration Reviews provide continuous visibility, risk identification, and actionable insights to secure your cloud environments.
blog · netspi.com
NetSPI Celebrates Our 2025 Partners of the Year
Congratulations to NetSPI's 2025 Partner of the Year Recipients Stratascale, Defy Security, VLCM, BlackLake Security, Consortium, Softcat, CDW UK, ConnexIT, and AWS.
back