Collaborate Disseminate
As enterprises rushed to digitize their business processes in response to the COVID-19 pandemic, many businesses — if not most— rapidly pushed forward, only to ask application security questions later. According to a survey released last week, conduct… Continue reading App Security Takes a Back Seat in the Drive to Digital Transformation
Global organizations are struggling to maintain consistent application security across multiple platforms, and they are also losing visibility with the emergence of new architectures and the adoption of APIs, Radware reveals. Working to maintain applic… Continue reading Organizations struggle to maintain application security across platforms
83% of C-level executives expect the changes they made in the areas of people, processes, and applications as a response to the COVID-19 pandemic to become permanent (whether significant or partial), according to Radware. According to the report, pan… Continue reading Shift to remote work and heavy reliance on service providers for security leaves blind spots
The DDoS group sets itself apart by using exploits — but it doesn’t always pan out. Continue reading Inside the Hoaxcalls Botnet: Both Success and Failure
Overall bot activity on the web has soared, with a 26 percent growth rate — attacks on applications, APIs and mobile sites are all on the rise. Continue reading ThreatList: Human-Mimicking Bots Spike, Targeting e-Commerce and Travel
The rapidly evolving Hoaxcalls botnet is exploiting an unpatched vulnerability in the ZyXEL Cloud CNM SecuManager in a bid to widen its spread. Continue reading Fast-Moving DDoS Botnet Exploits Unpatched ZyXel RCE Bug
A vulnerability (CVE-2020-2100) in 12,000+ internet-facing Jenkins servers can be abused to mount and amplify reflective DDoS attacks against internet hosts, Radware researchers have discovered. The vulnerability can also be triggered by a single, spoo… Continue reading 12,000+ Jenkins servers can be exploited to launch, amplify DDoS attacks
More than one in four security managers attribute attacks against their organization to cyberwarfare or nation-state activity, according to Radware. Nation-state intrusions soaring In 2018, 19% of organizations believed they were attacked by a nation-s… Continue reading Companies increasingly reporting attacks attributed to foreign governments
The specific type of TCP attack used in the recent spate of DDoS efforts were TCP SYN-ACK reflection attacks. Continue reading DDoS Attacks Target Amazon, SoftLayer and Telecom Infrastructure
Attacks are targeting international companies in the financial sector, demanding that victims pay ransom in Bitcoin. Continue reading Cybercriminals Impersonate Russian APT ‘Fancy Bear’ to Launch DDoS Attacks