2397 matches found
Real-Time Phishing Protections
In my previous blogs, I wrote about how phishing is no longer just an email problem, how the industrialization of phishing is being driven by the easy availability and low cost of phishing toolkits, and how current phishing defenses are being bypassed by attackers. In this post, I'm going to...
Confluence Server Webwork OGNL Injection (CVE-2021-26084): How Akamai Helps You Protect Against Zero-Day Attacks
Recently Atlassian has disclosed a critical RCE Remote Code Execution vulnerability in its Confluence server and Data Center products CVE-2021-26084, which might allow unauthenticated users to execute arbitrary code on vulnerable servers...
Enhancing Network Performance with Packet Pacing
Introduction Akamai's Smooth Delivery is a network performance enhancement initiative spearheaded by the Protocol Optimization team. It consists of two parts - each focused on reducing congestion while enhancing network performance. 1. TCP Pacing - The topic of this post 2. Rate Limiting -...
Girls Who Code Summer Immersion Program - Week One
Written by Lisa Adams The Girls Who Code Summer Immersion program at Akamai Technologies is off to a great start! During Week 1 we welcomed the class of 20 girls and the teaching team of three instructors from Girls Who Code. The girls began learning how to program in the Scratch language, and...
Our Journey to Detect Log4j-Vulnerable Machines
Log4Shell CVE-2021-44228 is a remote code execution RCE vulnerability in the Apache-foundation open-source logging library Log4j. It was published on December 9, 2021, and then all hell broke loose. As Log4j is a common logging library for Java applications, it is highly widespread...
Automated API Protection with WAP
For those who use Web Application Protector from Akamai: "Your APIs just got an extra layer of protection". For everyone else, learn how easy a WAF can be. You protect your web applications, that's awesome, but what about all your APIs? Do you know how many you have, who accesses them and what...
A Death Match of Domain Generation Algorithms
By Hongliang Liu and Yuriy Yuzifovich Originally posted on December 29, 2017 Today's post is all about DGA's Domain Generation Algorithms: what they are, why they came into existence, what are some use cases where they are used, and, most importantly - how to detect and block them. As we will...
Introducing Serverless Computing at the Edge with Akamai EdgeWorkers
For the first time, Akamai is introducing an all-new serverless compute capability to help you customize web traffic, expanding the possibilities of personalized engagement with your customers while putting the flexibility and control in the hands of your developers. Developers can now manipulate...
Walk/Don't Walk: Secure, Intelligent Application Access with Enhanced Security Signals
Digital business transformation has meant a continued shift in the way organizations think about secure access. The focus on security has moved away from data centers and toward users. Workforce productivity, flexibility, and application performance are driving the demand to give users...
Using LL-HLS with byte-range addressing to achieve interoperability in low latency streaming
Introduction HTTP Adaptive Segmented HAS streaming began to be used at scale from 2008 to 2012, with the advent of Move Networks, Microsoft Smooth Streaming, Apple HLS, Adobe HDS, and MPEG DASH. With the typical 10s segment durations of the day, livestream latencies measuring latency as the time...
It's universal: We all love to exchange gifts. Singles' Day and Diwali are two more reasons to do so.
There is scientific evidence that humans secrete "feel good" chemicals in their brain, such as serotonin, dopamine, and oxytocin, while giving. So it's no wonder that many of us look forward to the holidays. Online mobile shopping trends for Singles' Day and Diwali certainly confirm that. Sadly,...
The Adaptive Security Engine -- A Quantum Leap Forward for Application and API Protection
At Akamai, our mission is to make application and API security highly effective and easy. As part of that effort, we are excited to announce the Adaptive Security Engine -- a new core technology powering Akamai's application and API protection offerings, designed to enable a hands-off approach to...
October 2019 - What's New in Security?
The October 2019 Release includes enhancements to Akamai security products with many new and updated capabilities. Highlights and capabilities that our customers have been particularly excited about include: The Bot Intelligence Console provides greater visibility into the bot landscape, allowing...
October 2019 - What's New in Media?
Today, Akamai announced the October 2019 Release, which introduces new capabilities to our Media product line with a focus on helping customers accelerate their cloud transformation using the power of the edge. Within Media, the new enhancements are highlighted by: Scalable forensic watermarking...
Fast DNS Secondary Implementation: Order or Operations for NS Zone & Registrar Records
Akamai's Fast DNS service provides cloud-based, authoritative domain services to thousands of organizations. Fast DNS is the most widely deployed cloud DNS service pushed to the edge of the Internet. Every organization must protect their domain name. Akamai's built Fast DNS to focus on domain nam...
Threat Intelligence on Log4j CVE: Key Findings and Their Implications
Continuing with our research into CVE-2021-44228, Akamai has previously written about what the vulnerability is and given recommendations on how to go beyond patching for extra protection. Across the Akamai network, we see traffic from 1.3 billion unique devices daily, with record traffic of 182...
When "Customers" Attack DNS
Be real. A Communications Service Provider's CSP's customer will not use their home to attack the Domain Name System DNS. They might as well unplug from the Internet. Yet, customers get infected, CPEs get violated, and miscreants all over the Internet reflect attacks off CSP customers to attack...
How To Protect Your Systems Against Critical SMB Vulnerabilities (CVE-2020-0796)
Discover how to protect your systems against SMB vulnerabilities and the latest critical Microsoft vulnerabilities released...
GSS at Edge World
It's a busy time for my team as we prepare for next week's customer conference, Edge World, in Las Vegas. I'm excited for another productive week of interacting and innovating with our customers. There's still time for you to join us; register here. I wanted to highlight the great work that the...
Securing CDN Delivery with TLS at Massive Scale
The growth of HTTPS on the Internet Amidst ever-growing security concerns, providing protected Internet connections is more important than ever. The movement towards an Internet that places more emphasis on data integrity and confidentiality is taking place swiftly. HTTP connections are giving wa...
5 Years of Fighting DDoS with the Power of Akamai
Additional analysis and research provided by Principal Architect, Tom Emmons Earlier this year, Akamai celebrated the fifth anniversary of the Prolexic acquisition. The merger was officially completed in February of 2014, and a lot has happened since then. In this post, we want to spend a moment...
U.S. Mid-term Elections and Akamai Enterprise Threat Protector
The last few years have witnessed seismic changes in the world's political landscape and the way elections have been conducted. As of yet, there's no conclusive evidence that the results and outcomes of a country's election process have been impacted by the cyber efforts of internal or foreign...
How to Scale Addressable Advertising with Low Latency for Live Streaming
Written by: David Springfall, Founder and CTO of Yospace Under David's technical and strategic leadership, Yospace pioneered server-side ad insertion and established itself as the global leader in OTT stream monetisation. The Yospace technology supports full one-to-one personalisation and provide...
Bot Manager: Staying Ahead of the Bot Landscape
Akamai launched Bot Manager three years ago. Since then, the bot landscape has continued to evolve and we've introduced a number of improvements to our bot detections to stay ahead of it. These included browser fingerprinting and behavioral anomaly detection, as well constantly refining our core...
Akamai Wellness in APJ
Creating the world's best and most secure digital experience demands the very best industry talent. But as a responsible employer, we also understand how important it is to play our part in looking after those brilliant minds...
Qualifying Encoders with Akamai
Introduction The encoder qualification program was created to improve the process for vendors that wish to align themselves with Akamai network specific requirements. It is also intended to , mitigate the risk of encoder issues before using in production. A formal process is being introduced to...
Fast DNS: Zone Apex Mapping & DNSSEC
Introduction Along with its DDoS resilience and impressive global footprint, Fast DNS affords zone administrators additional technical flexibility and implementation options. One example is Zone Apex Mapping ZAM -- a feature that enables apex domains to be mapped directly to an Akamai edge IP. Th...
MOVEit SQLi Zero-Day (CVE-2023-34362) Exploited by CL0P Ransomware Group
Akamai Security Intelligence Group, which has been examining the MOVEit vulnerability and its exploitation, provides recommendations for detection and mitigation...
What's the Value of a Key-Value Store?
A database back end for your application is vital, and odds are that your database is a relational database or a "not only SQL" NoSQL database. Relational databases have dominated the software industry for decades, even as other technologies have radically changed around it. A relational database...
Phishing Tool Analysis: Modlishka
Additional research and support provided by Danny Wasserman. Overview One of the goals of phishing sites is to lure individuals into providing sensitive data, such as personally identifiable information, banking and credit card details, and passwords, through the use of email, SMS, social media,...
Mother's Day Online Shoppers Were Active, and So Were Threat Actors
Mother's Day is a major online shopping event that attracts both shoppers as well as threat actors. Earlier in the year, we reported on the United Kingdom's version, called Mothering Sunday. An eMarketer spending forecast predicted that in the United States, retail gift spending would increase,...
BGP Route Hijacking
Yes, we can minimize the BGP Hijacking Risk Every day we see something new about the global security threat. It is hard to keep track of all the various ways your network can be attacked. But there are some threat-vectors which need particular attention. "Did you know that a threat-actor with 20...
How Page Integrity Manager Detects Real-World Magecart Attacks
Written by Ziv Eli - Engineering Manager, Security and Maor Hod - Senior Product Manager, Security In this blog, we will take a look at and break down a recent Magecart attack detected and mitigated by Page Integrity Manager. The impacted customer operates a large international e-commerce busines...
Akamai Received Top Scores in Gartner's New Report "Critical Capabilities for Cloud Web Application Firewalls Services"
Are you in the process of selecting a web application firewall WAF or thinking about whether your current solution is adequate? For many organizations selecting the right WAF to protect their business is not an easy task. The threat landscape is changing fast and hackers are very creative in thei...
Akamai Reports Another DoS in Log4j2 (CVE-2021-45105): What You Need to Know
The series of vulnerabilities recently discovered in Log4j2 has shocked the internet. As part of our continuing research, on December 17, Hideki Okamoto from Akamai found and responsibly reported an additional denial-of-service DoS vulnerability, which was assigned as CVE-2021-45105...
KmsdBot: The Attack and Mine Malware
Akamai security research has observed a new malware: a cryptominer with dreams of DDoS functionality. Read about kmdsbot in this blog...
Akamai?s Observations of Confluence Zero Day (CVE-2022-26134)
The Atlassian Confluence vulnerability is here to stay. See Akamai's research into the stats two weeks after the advisory was released...
Smart DNS: Delivering the Best Subscriber Experience
This is the second in a series of blog posts that discuss how smart DNS resolvers can enhance ongoing network transformation efforts such as the transition to 5G, better integration of Wi-Fi, and new network designs that optimize the edge to improve the subscriber experience, service delivery, an...
Apache Struts Vulnerability CVE-2018-11776
On Wednesday, August 22nd, the Apache team patched another vulnerability in the Apache Struts2 framework. Apache Struts is an open-source web application framework for developing Java web applications. The vulnerability exists when these conditions are met: 1. The alwaysSelectFullNamespace flag...
Sign in with Apple
What's in a Login Button? All you need to know about the new "Sign in with Apple" For Akamai Identity Cloud, we intend to support our clients that wish to implement "Sign in with Apple" just like we do for Facebook, Google, Instagram, Twitter, LinkedIn and about 30 other Identity Providers. If yo...
Inspecting TLS Web Traffic - Part 2
In the first blog post I covered why HTTPS web traffic has grown to unprecedented levels, provided a TLS primer and looked at the basic concept of intercepting and inspecting HTTPS web traffic with Man-In-The-Middle techniques MITM. In the second part, I will dive a bit deeper into how the TLS MI...
memcached, now with extortion!
Over the past week, memcached reflection attacks have taken the DDoS scene by storm. With several attacks hitting organizations across many industries, including a record breaking 1.3Tbps attack against an Akamai customer. Akamai has observed a new trend in extortion attempts using memcached...
Stopping Active Attacks with Penalty Box
A web application firewall WAF is most often used by organizations for external security controls to detect and block individual attack attempts against target web application assets. Open Web Application Security Project OWASP risk rating methodology Unfortunately, today's sophisticated web...
Time to Transfer Risk: Why Security Complexity & VPNs Are No Longer Sustainable
We all heed the gospel of patching, but as recent incidents made clear, even cutting-edge disruptors struggle to patch everything, everywhere, and all the time. Maybe this is associated with the growing volume of common vulnerabilities and exposures CVEs. As they say, there is only one way and...
Exploring botnets in VR
By Asaf Nadler & Lior Lahav Botnets often use domain generation algorithms DGAs to select a domain name, which bots use to establish communication channels with their command and control servers C2. Since Akamai analyzes over 2.2 trillion DNS requests per day, and detects thousands of active...
Deployment Diversity for DNS Resiliency
Consider Addressing Delegation Servers with Varying Network Routes Written by: Jim Gilbert and Barry Greene Don't Forget DNS Similar to diverse workforces performing at a higher level, diverse network service deployments perform at a higher level that is increasingly important as the Internet...
New Video Series: How a Security Operations Command Center Took On the Largest Attacks the Internet Has Ever Seen
For over two decades I've made it my mission to stop "bad guys" on the Internet. Working day in and day out alongside an amazing team of security professionals inside our global Security Operations Command Center SOCC has given me the opportunity to do just that. I'm excited to share with you our...
March Release: Q&A with Ari Weil
Shortly after Akamai announced the March 2019 Release with new features and capabilities across its security, performance and media product lines, Akamai's VP of Product Marketing, Ari Weil, took over Akamai's Twitter account for a live March Release Q&A. For those that missed the live event,...
BadSuccessor: Abusing dMSA to Escalate Privileges in Active Directory
Akamai researchers found a privilege escalation vulnerability in Windows Server 2025 that allows attackers to compromise any user in Active Directory...
Visit Akamai at AWS re:Invent 2018!
On November 26-29, the Las Vegas Strip will be flooded with tens of thousands of developers, engineers, admins, architects and other technologists for trainings, certifications and sessions put on by AWS and its partner community at re:Invent. Akamai is excited to be a Gold sponsor this year, wit...