Vercel’s Post

https://lnkd.in/exMc9zkV " It was not long however, before they started to reach record breaking sizes — and eventually peaked just above 201 million requests per second. This was nearly 3x bigger than our previous biggest attack on record. Concerning is the fact that the attacker was able to generate such an attack with a botnet of merely 20,000 machines. There are botnets today that are made up of hundreds of thousands or millions of machines. Given that the entire web typically sees only between 1–3 billion requests per second, it's not inconceivable that using this method could focus an entire web’s worth of requests on a small number of targets."

It's hard to believe that people design DNS protocol extensions (and implementations of the same) that allow for arbitrarily large computational costs for processing a simple query. But here we are. Suicide by DDOS. The first DNS resolver had a countdown for every query processed to guard against this or code errors that might create infinite loops.

HTTP/3 is revolutionizing the Internet! Last year, this new version of the HyperText Transfer Protocol was standardized, and its adoption has skyrocketed since. Thanks to its foundation on the QUIC protocol, HTTP/3 offers enhanced security, privacy, and performance. Large companies like Google and Meta are already leveraging its benefits, meaning a significant portion of today's Internet traffic runs on HTTP/3. Dive into the details of why this protocol is becoming the new norm and how it's set to make our online experiences smoother and safer! 🚀 #HTTP3 #InternetEvolution https://lnkd.in/d7zCzq3y

Web Shells Gain Sophistication for Stealth, PersistenceA favorite post-exploitation tool continues to gain sophistication, with one recent example adding disguised log-in pages, credential stealing, and information gathering via services such as VirusTotal.

Simply changing your HTTP User Agent is not enough, did you know about TLS/SSL fingerprinting? what about Sec-UA headers added by Chrome since version 89? read on! https://lnkd.in/evVG4s6g

AI-driven threats are on the rise. How can you protect your business? 1. Implement security controls to detect and block AI-powered attacks. 2. Develop incident response plans. 3. Stay up to date on the latest AI-driven threats. #Cybersecurity #AI

AI-driven threats are on the rise. How can you protect your business? 1. Implement security controls to detect and block AI-powered attacks. 2. Develop incident response plans. 3. Stay up to date on the latest AI-driven threats. #Cybersecurity #AI

This is brilliant. And also super scary. Without proper monitoring you might not even spot that something is wrong for a very long time. Same (or maybe especially) goes for container based applications. https://lnkd.in/drH2yWpT

AI-driven threats are on the rise. How can you protect your business? 1. Implement security controls to detect and block AI-powered attacks. 2. Develop incident response plans. 3. Stay up to date on the latest AI-driven threats. #Cybersecurity #AI