Spectre-Inspired Attacks Can Steal Data from Intel SGX Enclaves

Researchers have developed new techniques inspired by the recent Spectre CPU vulnerability to completely compromise the confidentiality of hardware-based secure enclaves created with Intel’s Software Guard eXtensions (SGX). SGX is a feature prese… Continue reading Spectre-Inspired Attacks Can Steal Data from Intel SGX Enclaves

Massive DDoS attack washes over GitHub

We take a look at the colossal DDoS attack on GitHub, the largest-ever on record. How did threat actors do it, and what can companies do to protect against it?
Categories:

Criminals
Threat analysis

Tags: ddosDDos attackGitHubmemcachedmemcrashe… Continue reading Massive DDoS attack washes over GitHub

Biggest-Ever DDoS Attack (1.35 Tbs) Hits Github Website

On Wednesday, February 28, 2018, GitHub’s code hosting website hit with the largest-ever distributed denial of service (DDoS) attack that peaked at record 1.35 Tbps.

Interestingly, attackers did not use any botnet network, instead weaponized misconfig… Continue reading Biggest-Ever DDoS Attack (1.35 Tbs) Hits Github Website

GitHub Hit by Record DDoS Attack Through Exposed Memcached Servers

In what might be the largest ever recorded distributed denial-of-service (DDoS) attack, GitHub was hit this week with more than 1TB of malicious traffic per second generated by hijacked Memcached servers. DDoS mitigation providers had warned recently t… Continue reading GitHub Hit by Record DDoS Attack Through Exposed Memcached Servers

Some SSO Systems Vulnerable to Authentication Bypass

Some single sign-on (SSO) systems that use SAML are vulnerable to a newly discovered attack that can allow hackers to authenticate as other users without knowing their passwords. SSO systems allow users to authenticate to various services using a singl… Continue reading Some SSO Systems Vulnerable to Authentication Bypass

Surge in memcached-based reflected DDoS attacks is due to misconfigured servers

Massive memcached-based reflection DDoS attacks with an unprecedented amplification factor have been ongoing for the last few days, by taking advantage of memcached servers exposed to the Internet. What is memcached? Memcached is a distributed memory c… Continue reading Surge in memcached-based reflected DDoS attacks is due to misconfigured servers

Memcached Servers Abused for Massive Amplification DDoS Attacks

Cybercriminals have figured out a way to abuse widely-used Memcached servers to launch over 51,000 times powerful DDoS attacks than their original strength, which could result in knocking down of major websites and Internet infrastructure.

In recent d… Continue reading Memcached Servers Abused for Massive Amplification DDoS Attacks