2436 matches found
Meet the teen who won Technovation 2017
This summer Akamai hosted Girls Who Code for its fourth year in a row. Girls Who Code is a nonprofit organization that aims to support and increase the number of women in computer science. This is a spotlight article on one of the Girls Who Code participants, Aruzhan Koshkarova. Aruzhan, along wi...
Ensure Highly Reliable First Mile Connectivity with Akamai Direct Connect
As linear OTT video services become mainstream, many broadcasters and online video distributors are increasingly looking for new ways to enhance service reliability. Many who manage their own origin infrastructures within a datacenter environment are seeking added assurance for ingest of their...
Summer SOTI - DDoS by the numbers
Time for a Change The State of the Internet / Security report has been the home for Akamai's research on DDoS, attack traffic and Internet threats for over three years. While the report has evolved and expanded its scope considerably over that time, the content and how it's presented have only se...
New State of Online Retail Performance Report Available
It's springtime, and the only people with the holidays on their minds are in the retail business. This holiday season was a record-breaking one, with combined revenue for Black Friday and Cyber Monday alone exceeding $11.5 billion. To build on that momentum, smart retailers will take a closer loo...
How smart is my smart TV?
Some weeks ago, my friend asked me the headlining question while we were having a random argument about electronics. I found it to be an interesting one, particularly because it underlines the current mindset towards security of electronic devices communicable over computer networks. We are...
Zero Trust and the Slowly Boiled Frog
Disclaimer: No actual frogs were harmed in the writing of the blog post. We wouldn't do that. We like frogs. What is Zero Trust Networking? The Zero Trust security model was proposed by John Kindervag of Forrester Research back in 2010. The concept is that the traditional trust model of "trust, b...
Smart DNS Resolution for a Better Safer Internet
By Arlen Frew Top-level Domain TLD operators are focused on making the Internet a better and safer place, enabling name registrations, and maintaining the DNS namespace in support of their stakeholders. The entire Internet ecosystem, including TLDs, is always looking for ways to improve security...
The Botconf Experience
By Yohai Einav, Amir Asiaee, Ali Fakiri-Tabrizi and Alexey Sarychev Originally Posted on January 4, 2018 Earlier this month we took our show on the road, presenting some of our team's work at the Botconf conference in beautiful Montpellier, France. We could talk here for hours about the food, win...
API Security for Government Services: Protecting Citizen-Facing Applications
...
Learning from the LockBit Takedown
...
The Web Scraping Problem, Part 3: Protecting Against Botnets
...
Akamai EdgeWorkers for SaaS: Balancing Customization and Security
...
Support Telecom Providers on the Journey from Telco to Techco
...
Virtually Patch Vulnerabilities with Microsegmentation and Akamai Hunt
...
Expert Cybersecurity Awareness: Test Your Attack Knowledge
Hey, security experts: Can you recognize an attack from the code alone? Test your attack knowledge skills with this quick quiz...
Akamai Defends Against the OWASP Top 10 API Security Risks
...
Defeating Triple Extortion Ransomware: The Potent Combo of Ransomware and DDoS Attacks
Protect your organization from triple extortion ransomware – the devastating combination of ransomware and a DDoS attack – with these four steps...
Expanding API Security Awareness at API World
API security should be a primary concern for organizations. Learn about the three principles of APIs to help protect against attacks...
Greenwashing or Legit?
I think we can all agree that sustainability is one of the most important topics that we will discuss this year. It's driving consumer habits, business practices, and investment decisions. And it’s a discussion that’s happening at every level of the business; from procurement all the way up to th...
A Definitive Guide to the Remote Procedure Call (RPC) Filter
...
Universal Plug and Play (UPnP): What You Need to Know
Universal Plug and Play UPnP is a widely used protocol with a decade-long history of flawed implementations across a wide range of consumer devices. In this paper, we will cover how these aws are still present on devices, how these vulnerabilities are actively being abused, and how a...
Retail Data Needs Better Security in a Contextual World
Do you remember the first time you made an online purchase? Me neither. I’ve made so many online purchases over the years, and I’ve probably made more in the past 18 months than in the past 5 years combined...
Fighting Video Piracy Is Strengthened by Collaboration
Here’s what I know: My personal email has been “pwned” or stolen at least 18 times. Here’s what I don’t know: if any of the times I have been unable to log in to one of my OTT subscription services was due to my kids sharing our credentials or because of an account takeover — that kill chain that...
Coming Together to Tackle Phishing — For the Greater Good
Every day, Akamai’s Threat Research team tracks and mitigates phishing attack campaigns to help keep our customers — and their reputations — protected. Recently, they tracked an orchestrated attack campaign comprising more than 9,000 domains and subdomains, mainly targeting victims located in...
Jest Mocks—Unit Testing for EdgeWorkers
In case you haven’t already been working with EdgeWorkers, it allows you to run JavaScript code across more than 4,200 locations for proximity to users and fast application response times. With more and more application functionality moving to the edge, it’s increasingly important to ensure that...
HTTP/2 Request Smuggling
HTTP Request Smuggling also known as an HTTP Desync Attack has experienced a resurgence in security research recently, thanks in large part to the outstanding work by security researcher James Kettle. His 2019 Blackhat presentation on HTTP Desync attacks exposed vulnerabilities with different...
Streaming Numbers Jump for European Football Tournament Delivered by Akamai
The video streaming traffic that Akamai delivered for more than 30 rights-holding customers during the July 11 Italy-England football soccer final as part of the delayed-to-2021European soccer tournament peaked at 34.9 Tbps on the Akamai edge platform. The traffic peak during the final match was...
Digital Transformation Usain Bolt-Style: Health Care's Sprint to Modernization
Instead of picking up their phone to schedule a doctor's visit, ring an insurance provider, or call the pharmacy, a patient's first step to getting care is now often the use of an app on their smartphone. There are new ways to order prescriptions, conduct appointments, seek care, and share health...
Akamai Focused on "What's Next" Following New Traffic Milestone
Akamai hit a new milestone last week when web traffic delivered across our edge network peaked at 200 terabits per second Tbps. To be blunt - that's a whole lot of data traveling the world in a very short amount of time. We believe we can make a good case that it's more than the entire reported...
Is MFA a Security Illusion?
A recent Akamai Security blog post, Massive Campaign Targeting UK Banks Bypassing 2FA, written by my colleague Or Katz, is a great insight into how attackers used very simple techniques to bypass two-factor 2FA authentication security to obtain access to U.K. consumers' bank accounts. The attack...
Client-Side Protection is Key to Web Application Security
The Open Web Application Security Project OWASP Foundation defines script attacks as a "type of injection in which malicious scripts are injected into otherwise benign and trusted websites."1 From the perspective of the user, malicious code is coming from trusted websites. Recently popularized by...
Catch Me if You Can—JavaScript Obfuscation
While conducting threat research on phishing evasion techniques, Akamai came across threat actors using obfuscation and encryption, making the malicious page harder to detect. The criminals were using JavaScript to pull this off...
Akamai, CISA, and CIS Join Forces to Improve SLTT Cyber Defenses
Cybercriminals continue to target U.S. state, local, tribal, and territorial SLTT government organizations. In 2019, there were more than 100 ransomware attacks -- including an attack on Baltimore's IT systems that locked out thousands of computers and disrupted nearly every city service. This...
Akamai Mitigates Sophisticated 1.44 Tbps and 385 Mpps DDoS Attack
always surprises me how easily a community can adapt to a new situation or reality. What was once considered an outlier or even an unimaginable situation can quickly become our new normal. For those of us focused on protecting enterprises from threats, that also couldn't be more accurate...
DNS as Code
Infrastructure as Code IaC and Continuous Delivery methods have become increasingly popular amongst development and operations teams as a means of maintaining high-performing websites. Code repositories, build servers, and configuration management systems are now industry standards, as these tool...
What's the Best Approach to SSO and Consumer Session Management for Your Businesses?
If you want to see an argument break out among identity professionals, mention single sign-on SSO and consumer session management. As fast as this technology's evolved is as fast as it's become one of the most contentiously debated topics in the field. As a senior customer identity and access...
Zero Trust Access: Santa Claus Wasn't the Only One Working Christmas Eve
The days from Christmas Eve to New Year's Day are filled with celebrations. Many companies shut down and encourage their employees to take vacations. However, a sample of data comparing an average work week around the holiday, shows the idea of "downtime" isn't exactly accurate. In fact, many use...
Time to Eliminate Traditional VPNs
It is time to stop trusting your endpoints implicitly and reduce the complexity and risk associated with traditional VPN access and flat networks. Varied digital ecosystems, cloud migration, and workforce mobility have created a climate where the network perimeter no longer exists. This is eviden...
Fortnite Sets Game Traffic Record on Akamai
Akamai Technologies set a new record on Thursday, July 12th, 2018, for the peak level of traffic delivered for a single video game on its network, at more than 37 Tbps peak across all platforms. This massive influx of traffic was driven by the launch of Epic Games' cultural phenomenon: Fortnite,...
What You Need To Know - Summer 2018 State of the Internet / Security: Web Attack Report
It's that time of year - the Summer 2018 State of the Internet / Security: Web Attack report is now live. This new naming schema is just one of the many changes you'll notice if you're a returning reader of quarterly report, and there are more changes coming as we work to bring you insights and...
Girls Who Code Week 2: Let the Coding Begin!!
The Akamai-sponsored Girls Who Code program is well under way! Week 2 featured lots of activity in the Girls Who Code classroom at Akamai's Cambridge, MA headquarters. The girls learned to use Scratch, a visual programming language that was developed at MIT to help people learn to code. They used...
Supply Chain Security: Akamai from a Customer's Risk Perspective
Managing risk is a key aspect of any business. This becomes more complicated when additional parties, such as vendors are brought into the mix. One of the strongest pieces of guidance on managing vendors that customers have brought to Akamai comes from the US Office of the Comptroller of the...
Media Acceleration Enhances Online Experiences for OTT Video, Games and Software Downloads
Online audiences are growing and so are their expectations for the quality of experience. You know exactly what I mean if you've ever been frustrated with the rate at which a game is downloading or if your video stalls at the most inopportune time. Online streaming is no longer novel, it's the...
The Nansh0u Campaign – Hackers Arsenal Grows Stronger
In the beginning of April, three attacks detected in the Guardicore Global Sensor Network GGSN caught our attention. All three had source IP addresses originating in South-Africa and hosted by VolumeDrive ISP see IoCs...
DigiEver Fix That IoT Thing!
...
Deep Analysis of Hospitality Phishing Campaign Shows Global Threat
...
A QUIC Shutdown: DoS Vulnerability in Windows Servers Running SMB over QUIC
...
DDoS Attacks Surge Against Vulnerable Assets: Are You Prepared?
...