Collaborate Disseminate
Imperva releases The State of Security Within eCommerce 2022 report, a 12-month analysis by Imperva Threat Research of cybersecurity threats targeting the retail industry. Retail industry cybersecurity threats A range of automated threats – from … Continue reading API abuses and attacks create new challenges for retailers
As a general rule, security through obscurity is very bad and security and obscurity is still bad. This is because cypher = AES(plaintext) is already very secure. There is no need to add a custom layer on top of this, and more code means m… Continue reading Security and obscurity, anti-bot edition
By Waqas
Bot attacks rose by 41% in H1 2021, with the financial services and media industries facing the highest proportion…
This is a post from HackRead.com Read the original post: Rising Bot Attacks – Why is Your Organization Struggling to Deal… Continue reading Rising Bot Attacks – Why is Your Organization Struggling to Deal with Them?
For the past 2 weeks, I have observed 4-5 spikes in 5xx responses. After looking into the logs, I found a series of:
> 51.159.150.125 – – [16/Sep/2022:06:37:55 +0200] "GET /some-legitimate-page-path/?bb=uNiX:AAAAA…AAAAAAAAAAAAAAA… Continue reading Suspicious looking requests to my NGINX server
In this Help Net Security video, André Ferraz, CEO at Incognia, talks about the impact of location-based fraud, which is more prevalent than one would imagine, and it impacts different industries in many different ways. Fraudsters simply don’t wa… Continue reading The impact of location-based fraud
API or Application Programming Interface is a de facto building block for modern-day applications, necessary for both building and connecting applications and websites. But APIs are poorly protected and have become one of the prime targets for attacks,… Continue reading Bad bots are coming at APIs! How to beat the API bot attacks?
Imperva releases data showing that 25% of all gambling sites were hit with DDoS attacks executed by botnets in June. As the Wimbledon tennis tournament began at the end of June, DDoS attacks increased and impacted 10% of gambling sites. This continues … Continue reading Cybercriminals are using bots to deploy DDoS attacks on gambling sites
Netacea released its report into how businesses are dealing with bot attacks. It reveals one key area where businesses are failing to tackle bot attacks — bots are going undiscovered for an average of 16 weeks, up two weeks from last year’s findings. T… Continue reading Businesses are leaving bot attacks unchallenged for almost four months
Ransom acts of kindness are top of our mind, as we also explore how bad bots are hogging more and more of the internet’s activity, and look at how deepfakes could be a good thing after all.
All this and much more is discussed in the latest edition o… Continue reading Smashing Security podcast #277: Bad bots, cheeky ransoms, and good deepfakes
Group-IB unveils its guide to the evolution of threat number one “Ransomware Uncovered 2021/2022”. The findings of the second edition of the report indicate that the ransomware empire kept its winning streak going with the average ransom demand growing… Continue reading Ransomware still winning: Average ransom demand jumped by 45%