2426 matches found
Client-Side Protection is Key to Web Application Security
The Open Web Application Security Project OWASP Foundation defines script attacks as a "type of injection in which malicious scripts are injected into otherwise benign and trusted websites."1 From the perspective of the user, malicious code is coming from trusted websites. Recently popularized by...
Catch Me if You Can—JavaScript Obfuscation
While conducting threat research on phishing evasion techniques, Akamai came across threat actors using obfuscation and encryption, making the malicious page harder to detect. The criminals were using JavaScript to pull this off...
Time for a Haircut
Like many people around the world, my hair has grown profusely in the past few months and bears little resemblance to the photo in my profile. Without the required care and attention, my hair is getting dangerously close to the bad hairstyles I adopted in the 1980s. I could of course attempt to f...
Akamai Mitigates Sophisticated 1.44 Tbps and 385 Mpps DDoS Attack
always surprises me how easily a community can adapt to a new situation or reality. What was once considered an outlier or even an unimaginable situation can quickly become our new normal. For those of us focused on protecting enterprises from threats, that also couldn't be more accurate...
What's the Best Approach to SSO and Consumer Session Management for Your Businesses?
If you want to see an argument break out among identity professionals, mention single sign-on SSO and consumer session management. As fast as this technology's evolved is as fast as it's become one of the most contentiously debated topics in the field. As a senior customer identity and access...
Edge DNS: Zone Apex Mapping & DNSSEC
Along with its DDoS resilience and impressive global footprint, Akamai Edge DNS offers zone administrators additional technical flexibility and implementation options to improve performance and simplify DNS operations. One example is zone apex mapping ZAM, a feature that enables top level hostnam...
Meet the teen who won Technovation 2017
This summer Akamai hosted Girls Who Code for its fourth year in a row. Girls Who Code is a nonprofit organization that aims to support and increase the number of women in computer science. This is a spotlight article on one of the Girls Who Code participants, Aruzhan Koshkarova. Aruzhan, along wi...
Time to Eliminate Traditional VPNs
It is time to stop trusting your endpoints implicitly and reduce the complexity and risk associated with traditional VPN access and flat networks. Varied digital ecosystems, cloud migration, and workforce mobility have created a climate where the network perimeter no longer exists. This is eviden...
New State of Online Retail Performance Report Available
It's springtime, and the only people with the holidays on their minds are in the retail business. This holiday season was a record-breaking one, with combined revenue for Black Friday and Cyber Monday alone exceeding $11.5 billion. To build on that momentum, smart retailers will take a closer loo...
Measure What Matters: Your Competitive Advantage May Lie in Your Understanding (or Lack of Understanding) of What Users Are Really Experiencing
Attracting and retaining customers lies in your ability to offer an exceptional digital experience. Now that digital channels are increasingly preferred over channels of the past, the climate is increasingly competitive -- and businesses are fighting to maintain loyalty and keep users engaged...
Zero Trust and the Slowly Boiled Frog
Disclaimer: No actual frogs were harmed in the writing of the blog post. We wouldn't do that. We like frogs. What is Zero Trust Networking? The Zero Trust security model was proposed by John Kindervag of Forrester Research back in 2010. The concept is that the traditional trust model of "trust, b...
Smart DNS Resolution for a Better Safer Internet
By Arlen Frew Top-level Domain TLD operators are focused on making the Internet a better and safer place, enabling name registrations, and maintaining the DNS namespace in support of their stakeholders. The entire Internet ecosystem, including TLDs, is always looking for ways to improve security...
The Botconf Experience
By Yohai Einav, Amir Asiaee, Ali Fakiri-Tabrizi and Alexey Sarychev Originally Posted on January 4, 2018 Earlier this month we took our show on the road, presenting some of our team's work at the Botconf conference in beautiful Montpellier, France. We could talk here for hours about the food, win...
The Nansh0u Campaign – Hackers Arsenal Grows Stronger
In the beginning of April, three attacks detected in the Guardicore Global Sensor Network GGSN caught our attention. All three had source IP addresses originating in South-Africa and hosted by VolumeDrive ISP see IoCs...
MSL5 General Availability and MSL4 Product Retirement
Akamai Media Services Live 4 will be discontinued on December 31, 2026. The upgraded Akamai Media Services Live 5 is currently in general availability...
DigiEver Fix That IoT Thing!
...
Support Telecom Providers on the Journey from Telco to Techco
...
A QUIC Shutdown: DoS Vulnerability in Windows Servers Running SMB over QUIC
...
DDoS Attacks Surge Against Vulnerable Assets: Are You Prepared?
...
Ransomware on the Move: Evolving Exploitation Techniques and the Active Pursuit of Zero-Days
...
Defeating Triple Extortion Ransomware: The Potent Combo of Ransomware and DDoS Attacks
Protect your organization from triple extortion ransomware – the devastating combination of ransomware and a DDoS attack – with these four steps...
dhpcd: The Cryptominer That Hid for Four Years
Akamai Researchers have uncovered a long-running attack campaign attack targeting Linux SSH servers that has been running a monero cryptominer...
6 Key Insights from Akamai India Leadership Industry Summits
What does the future look like for consumer-to-internet and OTT media services in India? Here are six thought-provoking insights from CXOs...
Demystify Supply Chain Emissions with Akamai’s New Carbon Calculator
Oftentimes, organizations view supply chains as an extension of their own business and require suppliers to adhere to codes of conduct, efficiency standards, and more. Today, this has expanded to environmental sustainability goals as well. Companies understand that the environmental impact of the...
Universal Plug and Play (UPnP): What You Need to Know
Universal Plug and Play UPnP is a widely used protocol with a decade-long history of flawed implementations across a wide range of consumer devices. In this paper, we will cover how these aws are still present on devices, how these vulnerabilities are actively being abused, and how a...
Taking Action This Earth Month
By: Akamai Earth Month Guest Blog by Kenda Carlson, Senior Manager, WeSpire There's a fascinating human phenomenon often studied in the behavioral science field called the intention-action gap. It's when you have every intention of doing something, but it just doesn't happen. It's when you say yo...
Akamai Focused on "What's Next" Following New Traffic Milestone
Akamai hit a new milestone last week when web traffic delivered across our edge network peaked at 200 terabits per second Tbps. To be blunt - that's a whole lot of data traveling the world in a very short amount of time. We believe we can make a good case that it's more than the entire reported...
Akamai, CISA, and CIS Join Forces to Improve SLTT Cyber Defenses
Cybercriminals continue to target U.S. state, local, tribal, and territorial SLTT government organizations. In 2019, there were more than 100 ransomware attacks -- including an attack on Baltimore's IT systems that locked out thousands of computers and disrupted nearly every city service. This...
The Changing Face of Loyalty Programs Amid and Post-COVID-19
COVID-19 has undoubtedly prompted the Hospitality and Travel industry into a new era of customer loyalty. Currently, "shelter in place" or similar nonessential travel bans are instituted by many countries and companies across the world. Once travel restrictions are lifted, there will be a...
DNS as Code
Infrastructure as Code IaC and Continuous Delivery methods have become increasingly popular amongst development and operations teams as a means of maintaining high-performing websites. Code repositories, build servers, and configuration management systems are now industry standards, as these tool...
Business Continuity and Security in an Uncertain Global Environment
The need for companies to quickly enable remote access to business-critical applications was highlighted in a recent Akamai blog -- Enabling Business Continuity in an Uncertain Global Environment. However, despite the current environment, what is already evident is that once businesses have...
Zero Trust Access: Santa Claus Wasn't the Only One Working Christmas Eve
The days from Christmas Eve to New Year's Day are filled with celebrations. Many companies shut down and encourage their employees to take vacations. However, a sample of data comparing an average work week around the holiday, shows the idea of "downtime" isn't exactly accurate. In fact, many use...
Fortnite Sets Game Traffic Record on Akamai
Akamai Technologies set a new record on Thursday, July 12th, 2018, for the peak level of traffic delivered for a single video game on its network, at more than 37 Tbps peak across all platforms. This massive influx of traffic was driven by the launch of Epic Games' cultural phenomenon: Fortnite,...
What You Need To Know - Summer 2018 State of the Internet / Security: Web Attack Report
It's that time of year - the Summer 2018 State of the Internet / Security: Web Attack report is now live. This new naming schema is just one of the many changes you'll notice if you're a returning reader of quarterly report, and there are more changes coming as we work to bring you insights and...
Summer SOTI - DDoS by the numbers
Time for a Change The State of the Internet / Security report has been the home for Akamai's research on DDoS, attack traffic and Internet threats for over three years. While the report has evolved and expanded its scope considerably over that time, the content and how it's presented have only se...
How smart is my smart TV?
Some weeks ago, my friend asked me the headlining question while we were having a random argument about electronics. I found it to be an interesting one, particularly because it underlines the current mindset towards security of electronic devices communicable over computer networks. We are...
Girls Who Code Week 2: Let the Coding Begin!!
The Akamai-sponsored Girls Who Code program is well under way! Week 2 featured lots of activity in the Girls Who Code classroom at Akamai's Cambridge, MA headquarters. The girls learned to use Scratch, a visual programming language that was developed at MIT to help people learn to code. They used...
Supply Chain Security: Akamai from a Customer's Risk Perspective
Managing risk is a key aspect of any business. This becomes more complicated when additional parties, such as vendors are brought into the mix. One of the strongest pieces of guidance on managing vendors that customers have brought to Akamai comes from the US Office of the Comptroller of the...
API Security for Government Services: Protecting Citizen-Facing Applications
...
Akamai Enables Post-Quantum Cryptography on the Edge
Learn about the latest development in our post-quantum journey: Support for post-quantum cryptography on the Akamai edge...
A DDoS Attack Just Breached Your Defenses — Now What?
...
Beyond Vulnerabilities: Why API Abuse Is a Critical Challenge
...
Deep Analysis of Hospitality Phishing Campaign Shows Global Threat
...
Akamai World Tour 2023: Let’s Connect on Security and Cloud Innovation
...
Identifying a DNS Exfiltration Attack That Wasn’t Real — This Time
A recent red team DNS exfiltration alert confirms that Akamai Secure Internet Access is an effective security tool for this type of detection and analysis...
Normalizing Women in Tech with Intentionality
Vice President Simone Stewart kicks off our Akamai “Women In Tech” blog series and discusses how intentionality can cultivate a more inclusive environment...
An Overview of MS-RPC and Its Security Mechanisms
MS-RPC is a widely used protocol, but not much security research is done on it. In this blog, see an overview of MS-RPC and their security mechanisms...
Akamai Mitigates Hop-by-Hop Header Abuse Leading to Request Smuggling
Security researchers identified and disclosed a new technique of hop-by-hop header attacks, leading to request smuggling, which Akamai successfully mitigated...
A Definitive Guide to the Remote Procedure Call (RPC) Filter
...
Meet Mike Elissen: Founder of Our Akamai Developer Champions Program
Our longest-standing Developer Advocate, Mike Elissen, noticed an opportunity to make Akamai’s developer relations even stronger. He co-created Developer Champions, an advocacy program that helps Akamai employees better meet customer needs...