Get In Touch
Recently in Web Security Category
Today is Cyber Monday, which is historically the day when many retailers encourage online holiday shopping. Online retailers may see large spikes in traffic to their sites. It is possible that some may interpret these spikes as a DDoS, but in reality it may be what we refer to as a "flash mob".
A flash mob is a large amount of legitimate traffic being sent to a specific site. One way we can often differentiate between a flash mob and a DDoS is by the number of requests per client. A DDoS can have a high or low number of clients with a very high number of requests each client. A flash mob will have a very high number of clients but a relatively low number of requests per client. This is because in the flash mob, the client requests are being sent from a human and not an automated script.
The remediation of a flash mob is cache offloading, so as much content as possible can be served from the edge and leave the origin servers for tasks that only they can do.
If you are an Akamai customer who feels they are being attacked with DDoS traffic, please follow the usual incident protocols and contact your Customer Care representative, but Akamai's SIRT is also available to assist and to investigate deeper into the traffic.
By Clark Shishido, Akamai SIRT Security Response Engineer
Applications written in Java commonly use a call-in function from a widely deployed library to decode data passed between computers. The call is java.io.ObjectInputStream.readObject from Apache commons-collection.
An attacker can append arbitrary data to a base64 encoded serial data stream, which will then be deserialized when the data is read into a Java application. By appending malicious payloads to the stream, the attacker can execute arbitrary commands on a vulnerable server.
By Meg Grady-Troia and Bill Brenner
As we move toward 2016, browser developers have moved to retire the SHA-1 cryptographic hash algorithm in favor of SHA-2. Browsers are beginning to show warnings or errors for HTTPS connections made to servers presenting certificate chains signed using SHA-1.
Companies like Google, Mozilla, Microsoft and the CAB/Browser Forum have released their own descriptions of how they're managing the process. This post describes the Akamai-compatible workflow to help you manage the change process for your properties easily, regardless of the signatory Certificate Authority (CA) on your certificate.
By Bill Brenner, Akamai SIRT Senior Tech Writer
Akamai's Security Intelligence Research Team (SIRT) released a new whitepaper this morning about the rising risks medical organizations face as they become increasingly dependent on digitized record keeping.
The use of Electronic Medical Records (EMRs) and a more digitally integrated medical records system is no longer science fiction, and the task of securing sensitive medical data is a daunting challenge. The threat landscape continues to shift rapidly, and business responses need to keep up.
The whitepaper, written by Security Response Engineer Benjamin Brown, examines the risks, and outlines steps organizations can take to keep attackers at bay.