Akamai Diversity

The Akamai Blog

Akamai

Akamai

December 3, 2015 11:16 AM

Web Security Lacking at Hospitals

While hospitals are ramping up security efforts to protect information, a large percentage of them are vulnerable to attacks on their web sites. Less than two-thirds of hospitals participating in a recent survey reported having on-premise web application firewalls in place, and fewer than half reported having defenses in place to thwart distributed denial of service (DDoS) attacks. Read more here.

Or Katz

Or Katz

December 2, 2015 1:36 PM

Last of OWASP's Top 10 Still a Potent Threat

Open redirection is the last item on the OWASP Top 10, and it is considered a Web application functionality that can be used by attackers to redirect users from trusted domains to untrusted domains. But it is a potent problem, as Akamai's Threat Research Team discovered in their research on an unusual malicious SEO attack campaign that abused Web applications' open redirect functionality.

Larry Cashdollar

Larry Cashdollar

December 2, 2015 9:24 AM

Developing a PoC Step by Step

I've received numerous questions about how I found so many Wordpress plugin vulnerabilities and how to write the exploits that were essential to the research.  I'll be honest, it's not hard if you have some experience in php programming and basic knowledge of secure programming.  To simplify things, we will narrow down certain traits of what plugins to examine.

Akamai

Akamai

November 30, 2015 10:38 AM

Cyber Monday: DDoS vs. Flash Mob

Today is Cyber Monday, which is historically the day when many retailers encourage online holiday shopping. Online retailers may see large spikes in traffic to their sites. It is possible that some may interpret these spikes as a DDoS, but in reality it may be what we refer to as a "flash mob". A flash mob is a large amount of legitimate traffic being sent to a specific site. One

Akamai

Akamai

November 24, 2015 11:05 AM

2015 Holiday Shopping Predictions for Retailers

We're gearing up for some of the busiest days of the holiday season and that means we're starting to make some predictions around consumer shopping behavior and what retailers can expect to see this year. Last year around this same time, we saw an early start to the shopping season, evidenced by an uptick in activity starting as early as Nov. 2. The latest American Express Spending & Saving Tracker supports

Akamai

Akamai

November 20, 2015 11:30 AM

Web security and #HolidayReadiness: Prepare for the ...

Being truly 'ready' for the holidays means different things to different people and organizations. For consumers, it is getting your house decorated, shopping done and enjoying time with both family and friends. For online retailers, it is finalizing deals, ensuring your website can handle the substantial increase in inbound traffic and of course, the elephant in the metaphorical room, web security and its importance in maintaining a positive brand reputation.

Viktoriya Reyzelman

Viktoriya Reyzelman

November 18, 2015 11:30 AM

Protect Your Site From Hacking and Fraud During the ...

"The threat posed by distributed DoS [DDoS] and web application attacks continues to grow each quarter," said John Summers, vice president for Akamai's cloud security business sector. Malicious actors are continually changing the game by switching tactics, seeking out new vulnerabilities and even bringing back old techniques that were considered outdated.The traffic on the Internet increased during the 2014 holiday season, so did the number of all types of attack

Akamai SIRT Alerts

Akamai SIRT Alerts

November 18, 2015 6:00 AM

Java Deserialization CVE-2015-4852 on Akamai

By Clark Shishido, Akamai SIRT Security Response EngineerApplications written in Java commonly use a call-in function from a widely deployed library to decode data passed between computers. The call is java.io.ObjectInputStream.readObject from Apache commons-collection. An attacker can append arbitrary data to a base64 encoded serial data stream, which will then be deserialized when the data is read into a Java application. By appending malicious payloads to the stream, the attacker can

Akamai

Akamai

November 17, 2015 5:01 PM

Surviving The Switch from SHA-1 to SHA-2

By Meg Grady-Troia and Bill BrennerAs we move toward 2016, browser developers have moved to retire the SHA-1 cryptographic hash algorithm in favor of SHA-2. Browsers are beginning to show warnings or errors for HTTPS connections made to servers presenting certificate chains signed using SHA-1.Companies like Google, Mozilla, Microsoft and the CAB/Browser Forum have released their own descriptions of how they're managing the process. This post describes the Akamai-compatible workflow