2442 matches found
Digital Transformation Usain Bolt-Style: Health Care's Sprint to Modernization
Instead of picking up their phone to schedule a doctor's visit, ring an insurance provider, or call the pharmacy, a patient's first step to getting care is now often the use of an app on their smartphone. There are new ways to order prescriptions, conduct appointments, seek care, and share health...
Is MFA a Security Illusion?
A recent Akamai Security blog post, Massive Campaign Targeting UK Banks Bypassing 2FA, written by my colleague Or Katz, is a great insight into how attackers used very simple techniques to bypass two-factor 2FA authentication security to obtain access to U.K. consumers' bank accounts. The attack...
Client-Side Protection is Key to Web Application Security
The Open Web Application Security Project OWASP Foundation defines script attacks as a "type of injection in which malicious scripts are injected into otherwise benign and trusted websites."1 From the perspective of the user, malicious code is coming from trusted websites. Recently popularized by...
Catch Me if You Can—JavaScript Obfuscation
While conducting threat research on phishing evasion techniques, Akamai came across threat actors using obfuscation and encryption, making the malicious page harder to detect. The criminals were using JavaScript to pull this off...
Akamai Mitigates Sophisticated 1.44 Tbps and 385 Mpps DDoS Attack
always surprises me how easily a community can adapt to a new situation or reality. What was once considered an outlier or even an unimaginable situation can quickly become our new normal. For those of us focused on protecting enterprises from threats, that also couldn't be more accurate...
DNS as Code
Infrastructure as Code IaC and Continuous Delivery methods have become increasingly popular amongst development and operations teams as a means of maintaining high-performing websites. Code repositories, build servers, and configuration management systems are now industry standards, as these tool...
What's the Best Approach to SSO and Consumer Session Management for Your Businesses?
If you want to see an argument break out among identity professionals, mention single sign-on SSO and consumer session management. As fast as this technology's evolved is as fast as it's become one of the most contentiously debated topics in the field. As a senior customer identity and access...
Zero Trust Access: Santa Claus Wasn't the Only One Working Christmas Eve
The days from Christmas Eve to New Year's Day are filled with celebrations. Many companies shut down and encourage their employees to take vacations. However, a sample of data comparing an average work week around the holiday, shows the idea of "downtime" isn't exactly accurate. In fact, many use...
Protecting your Domain Names: Taking the First Steps
Everyone and everything on the Internet depends on the Domain Name System DNS being functional. The DNS has been a common vector for attacks in recent years, and 2019 seems to be no different. Many of these attacks have goals far more sinister than simply taking a company offline or defacing a...
Time to Eliminate Traditional VPNs
It is time to stop trusting your endpoints implicitly and reduce the complexity and risk associated with traditional VPN access and flat networks. Varied digital ecosystems, cloud migration, and workforce mobility have created a climate where the network perimeter no longer exists. This is eviden...
Gone Phishing For The Holidays
Written by Or Katz and Amiram Cohen Overview: While our team, Akamai's Enterprise Threat Protector Security Research Team, monitored internet traffic throughout the 2017 holiday season, we spotted a wide-spread phishing campaign targeting users through an advertising tactic. During the six week...
Do you believe in Serendipity?
In December 2016, after a month of mountain bike racing and touring in Nepal, I commenced the Executive Program in General Management at MIT. The first term was at Sloan School of Management in Cambridge and for the first time in my life, I finally could relate to studying. In fact, I was even...
Girls Who Code Week 2: Let the Coding Begin!!
The Akamai-sponsored Girls Who Code program is well under way! Week 2 featured lots of activity in the Girls Who Code classroom at Akamai's Cambridge, MA headquarters. The girls learned to use Scratch, a visual programming language that was developed at MIT to help people learn to code. They used...
Supply Chain Security: Akamai from a Customer's Risk Perspective
Managing risk is a key aspect of any business. This becomes more complicated when additional parties, such as vendors are brought into the mix. One of the strongest pieces of guidance on managing vendors that customers have brought to Akamai comes from the US Office of the Comptroller of the...
How to Report Your Performance Test Results Like a Pro
Performance tests try to reduce the risks of downtime or outages on multi-user systems by conducting experiments that use load to reveal limitations and errors in the system. Testing usually involves assessing the performance and capacity of systems that were expensive and time-consuming to build...
The Nansh0u Campaign – Hackers Arsenal Grows Stronger
In the beginning of April, three attacks detected in the Guardicore Global Sensor Network GGSN caught our attention. All three had source IP addresses originating in South-Africa and hosted by VolumeDrive ISP see IoCs...
Agentic Disconnect: The Latency Crisis Facing Modern AI Architecture
...
How Akamai Defended an Indian Bank Against Record-Breaking DDoS Attacks
Learn how Akamai successfully neutralized one of the largest DDoS attacks ever recorded in the Indian banking sector before a single customer was impacted...
The AI-Powered Reboot: Rethinking Defense for Web Apps and APIs
...
Celebrating a Year of Innovation with Akamai Brand Protector
...
Beyond Vulnerabilities: Why API Abuse Is a Critical Challenge
...
Deep Analysis of Hospitality Phishing Campaign Shows Global Threat
...
A QUIC Shutdown: DoS Vulnerability in Windows Servers Running SMB over QUIC
...
DDoS Attacks Surge Against Vulnerable Assets: Are You Prepared?
...
Akamai World Tour 2023: Let’s Connect on Security and Cloud Innovation
...
Ransomware on the Move: Evolving Exploitation Techniques and the Active Pursuit of Zero-Days
...
What Proposed New Changes in the OWASP API Security Top 10 Mean for You
The new OWASP Top 10 for API Security release candidate is a fantastic step in an API-specific direction, emphasizing the distinct nature of API threats...
Normalizing Women in Tech with Intentionality
Vice President Simone Stewart kicks off our Akamai “Women In Tech” blog series and discusses how intentionality can cultivate a more inclusive environment...
An Overview of MS-RPC and Its Security Mechanisms
MS-RPC is a widely used protocol, but not much security research is done on it. In this blog, see an overview of MS-RPC and their security mechanisms...
Akamai Mitigates Hop-by-Hop Header Abuse Leading to Request Smuggling
Security researchers identified and disclosed a new technique of hop-by-hop header attacks, leading to request smuggling, which Akamai successfully mitigated...
6 Key Insights from Akamai India Leadership Industry Summits
What does the future look like for consumer-to-internet and OTT media services in India? Here are six thought-provoking insights from CXOs...
Akamai Named a 2022 Gartner� Magic Quadrant Leader for Cloud Web Application and API Protection
Akamai was named a Leader in the 2022 Gartner� Magic Quadrant for Cloud Web Application and API Protection WAAP report, and was positioned highest for Ability to Execute and furthest for Completeness of Vision...
Zero Trust and the Fallacy of Secure Networks
Talking about secure networks is like talking about safe pools. A pool is just a body of water, and if it has enough water to swim in, then it has more than enough water to drown in. A pool is inherently unsafe. We, therefore, take care in how we use a pool: We don’t swim alone; we don’t run arou...
TCP Middlebox Reflection: Coming to a DDoS Near You
Over the past week, Akamai Security Researchers have detected and analyzed a series of TCP reflection attacks, peaking at 11 Gbps at 1.5 Mpps, that were leveled against Akamai customers. The attack, amplified with a technique called TCP Middlebox Reflection, abuses vulnerable firewalls and conten...
Meet Mike Elissen: Founder of Our Akamai Developer Champions Program
Our longest-standing Developer Advocate, Mike Elissen, noticed an opportunity to make Akamai’s developer relations even stronger. He co-created Developer Champions, an advocacy program that helps Akamai employees better meet customer needs...
Taking Action This Earth Month
By: Akamai Earth Month Guest Blog by Kenda Carlson, Senior Manager, WeSpire There's a fascinating human phenomenon often studied in the behavioral science field called the intention-action gap. It's when you have every intention of doing something, but it just doesn't happen. It's when you say yo...
Optimizing For Performance, One Hire at a Time: Part 3
Having previously decided we need to make a new hire onto our team, part 1 of this series examined how to meet the needs of our team going into the future, instead of just adding surface visible technical skills...
Preparing for Holiday Traffic During COVID-19
We are headed into an unprecedented holiday season as COVID-19 continues to impact the world. For many, this means changing traditions and celebrating without family nearby. For Akamai, it means preparing to support our customers in a holiday commerce season of opportunities and challenges like...
Smart DNS for the New Network Edge
People depend on the internet for just about everything: interacting, learning, transacting, traveling, working, and more. At the same time, the wireless evolution to 4G -- and soon 5G and Wi-Fi everywhere -- has given birth to an era of connected cars, smart sensors, and a multitude of other...
The Changing Face of Loyalty Programs Amid and Post-COVID-19
COVID-19 has undoubtedly prompted the Hospitality and Travel industry into a new era of customer loyalty. Currently, "shelter in place" or similar nonessential travel bans are instituted by many countries and companies across the world. Once travel restrictions are lifted, there will be a...
Out of the Grace Period: Trust and Communication Rises in a Post-CCPA World
Six months ago, the California Consumer Privacy Act CCPA was put into effect, granting California residents increased rights over how their personal data is gathered and shared by the companies they interact with. Leading up to its launch, organizations expressed concern over whether they were...
Stealthworker: Golang-based Brute Force Malware Still an Active Threat
By: Larry Cashdollar Malware that can target Windows and Linux systems was recently installed on my honeypot. After some investigation, I determined it to be similar to the malware discovered in February of 2019 by Malwarebytes, and later examined by...
Business Continuity and Security in an Uncertain Global Environment
The need for companies to quickly enable remote access to business-critical applications was highlighted in a recent Akamai blog -- Enabling Business Continuity in an Uncertain Global Environment. However, despite the current environment, what is already evident is that once businesses have...
Akamai Edge Security - Intelligent protection coming to a city near you!
Having knowledge and visibility is just as important as products and technology when it comes to detecting and combating the latest attacks on the Internet. At Akamai, we protect customers from many of the largest and most sophisticated attacks in the world, and we are launching a series of Akama...
Take a Tour of New Routed Dashboard
As a product manager, there are few things more rewarding than finally putting your product into the hands of your customer for the first time. We've been working on the new Routed Dashboard for some time, and I've personally spoken to many of you in terms of what would make our new interface mor...
The Pitfalls of Guest Wi-Fi
Do you remember the days before mobile broadband was commonplace and connection speeds on 2G wireless were barely usable? How often did you seek out a specific location such as a coffee shop or a hotel that offered a free or more likely purchasable Wi-Fi connection? Times have changed. Now, we...
Strengthening Network Access Security with Multi-Factor Authentication
As technology continues to develop, more and more applications become not just convenient, but necessary. It was less than a decade ago that it was inconceivable we would 'need' to carry a consumer device to access the internet in our pockets. Today, it is essential. The same is true with the...
CVE-2026-31979: The Symlink Trap — Root Privilege Escalation in Himmelblau
...