Get In Touch
In this week's Akamai Security Podcast, I talk to Larry Cashdollar, a senior security response engineer on our CSIRT team. Larry discusses the mechanics of his job and the particular threats he and the team have been tracking and defending against. Listen here.
Most of the readers of this blog already know Akamai and our connection to e-Commerce. We've been helping IR 500 companies accelerate traffic for 15 years. Today 96 of the Top 100 retailers (as measured by Internet Retailer) take advantage of the Akamai Intelligent Platform to optimize content and deliver traffic. What many of you may not know is that in addition to delivering performance, Akamai also protects etailers
A researcher at Cisco Systems published a blog post yesterday that Akamai customers and the larger security community should be aware of. The subject: "watering-hole" attacks. It's something Cisco researchers -- and Akamai's CSIRT team -- have been tracking for some time. In May, Threat Research Engineer Jaeson Schultz wrote about the increasing popularity of the attack technique. He wrote at the time, "Watering-hole attacks, as evidenced by the recent attack
A few days ago I told you about all the security awesomeness planned for the Akamai Edge customer conference. Today, I'm delving deeper into the agenda for a look at the more technical talks. For the overview, see the post "Security Front and Center at Akamai Edge 2013." Now for that deeper dive... Wednesday, Oct. 9: Noon-1:30 p.m.: Financial Services Roundtable Lunch: Security Information Sharing - Lessons Learned from Financial
A couple weeks ago, Akamai's CSIRT team warned that chaotic actors could use the anniversary of 9-11 and news of potential military action in Syria as an excuse to unleash a fresh wave of DDoS attacks. Fortunately, the week turned out to be pretty quiet.The Syrian Electronic Army (SEA), a pro-Assad hacking group, mostly held its fire, and those wanting to exploit the 9-11 anniversary were nowhere to be found. I asked Mike Kun
I recently spoke with Meg Grady-Troia about her role in Akamai InfoSec, particularly the security training she does for new hires. In addition to training, Meg works to inform and educate Akamai sales staff and customers about platform security at Akamai. She also develops white papers, short documents and other materials, as needed, to support Akamai's development as a security company.She also explains how she shifted from a career in restaurant
At this year's Akamai Edge Conference, taking place Oct. 7-11 in Washington DC, security will be a central part of the agenda. One of the three tracks this year is a Web Security Symposium, tailored to meet the needs of security professionals looking to protect their organization from unwanted network or application layer attacks, while improving the exchange of information between employees, customers and business partners on any device, anywhere.
The following is a guest post from Senior Enterprise Architect David Senecal and Sr. Solutions Architect Aseem Ahmed Recent years have been very dramatic in security landscape with emerging threats; the application layer is now a more prominent target. The new (and deadly) Layer 7 attacks called slow HTTP Denial of Service (DoS) attacks are on the rise. Although they are not as new as they might sound, anything that
Microsoft released it's monthly patch load this week. To help identify and deploy the security fixes, here's a table showing the different bulletins, the severity of the flaws, and the products impacted.Bulletin IDBulletin Title and Executive SummaryMaximum Severity Rating and Vulnerability ImpactRestart RequirementAffected SoftwareMS13-067Vulnerabilities in Microsoft SharePoint Server Could Allow Remote Code Execution (2834052) This security update resolves one publicly disclosed vulnerability and nine privately reported vulnerabilities in Microsoft Office