Lucene search
+L
AkamaiblogMost viewed

2397 matches found

Akamai Blog
Akamai Blog
added 2019/10/11 8:0 p.m.134 views

Real-Time Phishing Protections

In my previous blogs, I wrote about how phishing is no longer just an email problem, how the industrialization of phishing is being driven by the easy availability and low cost of phishing toolkits, and how current phishing defenses are being bypassed by attackers. In this post, I'm going to...

0.2AI score
Exploits0
Akamai Blog
Akamai Blog
added 2021/09/15 7:0 a.m.133 views

Confluence Server Webwork OGNL Injection (CVE-2021-26084): How Akamai Helps You Protect Against Zero-Day Attacks

Recently Atlassian has disclosed a critical RCE Remote Code Execution vulnerability in its Confluence server and Data Center products CVE-2021-26084, which might allow unauthenticated users to execute arbitrary code on vulnerable servers...

9.8CVSS6.1AI score0.99999EPSS
Exploits45
Akamai Blog
Akamai Blog
added 2018/11/05 3:30 p.m.133 views

Enhancing Network Performance with Packet Pacing

Introduction Akamai's Smooth Delivery is a network performance enhancement initiative spearheaded by the Protocol Optimization team. It consists of two parts - each focused on reducing congestion while enhancing network performance. 1. TCP Pacing - The topic of this post 2. Rate Limiting -...

0.7AI score
Exploits0
Akamai Blog
Akamai Blog
added 2017/07/14 6:50 p.m.133 views

Girls Who Code Summer Immersion Program - Week One

Written by Lisa Adams The Girls Who Code Summer Immersion program at Akamai Technologies is off to a great start! During Week 1 we welcomed the class of 20 girls and the teaching team of three instructors from Girls Who Code. The girls began learning how to program in the Scratch language, and...

6.9AI score
Exploits0
Akamai Blog
Akamai Blog
added 2021/12/27 7:30 p.m.131 views

Our Journey to Detect Log4j-Vulnerable Machines

Log4Shell CVE-2021-44228 is a remote code execution RCE vulnerability in the Apache-foundation open-source logging library Log4j. It was published on December 9, 2021, and then all hell broke loose. As Log4j is a common logging library for Java applications, it is highly widespread...

10CVSS2.4AI score0.99999EPSS
Exploits355
Akamai Blog
Akamai Blog
added 2019/03/04 11:0 a.m.130 views

Automated API Protection with WAP

For those who use Web Application Protector from Akamai: "Your APIs just got an extra layer of protection". For everyone else, learn how easy a WAF can be. You protect your web applications, that's awesome, but what about all your APIs? Do you know how many you have, who accesses them and what...

0.4AI score
Exploits0
Akamai Blog
Akamai Blog
added 2018/01/09 11:57 a.m.129 views

A Death Match of Domain Generation Algorithms

By Hongliang Liu and Yuriy Yuzifovich Originally posted on December 29, 2017 Today's post is all about DGA's Domain Generation Algorithms: what they are, why they came into existence, what are some use cases where they are used, and, most importantly - how to detect and block them. As we will...

7.1AI score
Exploits0
Akamai Blog
Akamai Blog
added 2019/10/11 8:0 p.m.128 views

Introducing Serverless Computing at the Edge with Akamai EdgeWorkers

For the first time, Akamai is introducing an all-new serverless compute capability to help you customize web traffic, expanding the possibilities of personalized engagement with your customers while putting the flexibility and control in the hands of your developers. Developers can now manipulate...

0.1AI score
Exploits0
Akamai Blog
Akamai Blog
added 2019/10/11 8:0 p.m.128 views

Walk/Don't Walk: Secure, Intelligent Application Access with Enhanced Security Signals

Digital business transformation has meant a continued shift in the way organizations think about secure access. The focus on security has moved away from data centers and toward users. Workforce productivity, flexibility, and application performance are driving the demand to give users...

0.7AI score
Exploits0
Akamai Blog
Akamai Blog
added 2020/11/23 2:0 p.m.127 views

Using LL-HLS with byte-range addressing to achieve interoperability in low latency streaming

Introduction HTTP Adaptive Segmented HAS streaming began to be used at scale from 2008 to 2012, with the advent of Move Networks, Microsoft Smooth Streaming, Apple HLS, Adobe HDS, and MPEG DASH. With the typical 10s segment durations of the day, livestream latencies measuring latency as the time...

6.5AI score
Exploits0
Akamai Blog
Akamai Blog
added 2020/11/18 2:0 p.m.126 views

It's universal: We all love to exchange gifts. Singles' Day and Diwali are two more reasons to do so.

There is scientific evidence that humans secrete "feel good" chemicals in their brain, such as serotonin, dopamine, and oxytocin, while giving. So it's no wonder that many of us look forward to the holidays. Online mobile shopping trends for Singles' Day and Diwali certainly confirm that. Sadly,...

Exploits0
Akamai Blog
Akamai Blog
added 2021/06/14 2:0 p.m.124 views

The Adaptive Security Engine -- A Quantum Leap Forward for Application and API Protection

At Akamai, our mission is to make application and API security highly effective and easy. As part of that effort, we are excited to announce the Adaptive Security Engine -- a new core technology powering Akamai's application and API protection offerings, designed to enable a hands-off approach to...

7AI score
Exploits0
Akamai Blog
Akamai Blog
added 2019/10/11 8:0 p.m.124 views

October 2019 - What's New in Security?

The October 2019 Release includes enhancements to Akamai security products with many new and updated capabilities. Highlights and capabilities that our customers have been particularly excited about include: The Bot Intelligence Console provides greater visibility into the bot landscape, allowing...

6.9AI score
Exploits0
Akamai Blog
Akamai Blog
added 2019/10/11 8:0 p.m.124 views

October 2019 - What's New in Media?

Today, Akamai announced the October 2019 Release, which introduces new capabilities to our Media product line with a focus on helping customers accelerate their cloud transformation using the power of the edge. Within Media, the new enhancements are highlighted by: Scalable forensic watermarking...

1.4AI score
Exploits0
Akamai Blog
Akamai Blog
added 2019/05/06 4:0 p.m.124 views

Fast DNS Secondary Implementation: Order or Operations for NS Zone & Registrar Records

Akamai's Fast DNS service provides cloud-based, authoritative domain services to thousands of organizations. Fast DNS is the most widely deployed cloud DNS service pushed to the edge of the Internet. Every organization must protect their domain name. Akamai's built Fast DNS to focus on domain nam...

0.1AI score
Exploits0
Akamai Blog
Akamai Blog
added 2021/12/17 7:30 p.m.123 views

Threat Intelligence on Log4j CVE: Key Findings and Their Implications

Continuing with our research into CVE-2021-44228, Akamai has previously written about what the vulnerability is and given recommendations on how to go beyond patching for extra protection. Across the Akamai network, we see traffic from 1.3 billion unique devices daily, with record traffic of 182...

10CVSS1.9AI score0.99999EPSS
Exploits355
Akamai Blog
Akamai Blog
added 2019/05/08 4:0 p.m.123 views

When "Customers" Attack DNS

Be real. A Communications Service Provider's CSP's customer will not use their home to attack the Domain Name System DNS. They might as well unplug from the Internet. Yet, customers get infected, CPEs get violated, and miscreants all over the Internet reflect attacks off CSP customers to attack...

6.6AI score
Exploits0
Akamai Blog
Akamai Blog
added 2020/03/17 8:12 p.m.122 views

How To Protect Your Systems Against Critical SMB Vulnerabilities (CVE-2020-0796)

Discover how to protect your systems against SMB vulnerabilities and the latest critical Microsoft vulnerabilities released...

10CVSS2.6AI score0.9981EPSS
Exploits125
Akamai Blog
Akamai Blog
added 2019/06/05 4:30 p.m.122 views

GSS at Edge World

It's a busy time for my team as we prepare for next week's customer conference, Edge World, in Las Vegas. I'm excited for another productive week of interacting and innovating with our customers. There's still time for you to join us; register here. I wanted to highlight the great work that the...

7.2AI score
Exploits0
Akamai Blog
Akamai Blog
added 2019/03/04 11:0 a.m.121 views

Securing CDN Delivery with TLS at Massive Scale

The growth of HTTPS on the Internet Amidst ever-growing security concerns, providing protected Internet connections is more important than ever. The movement towards an Internet that places more emphasis on data integrity and confidentiality is taking place swiftly. HTTP connections are giving wa...

0.8AI score
Exploits0
Akamai Blog
Akamai Blog
added 2019/07/02 4:0 p.m.120 views

5 Years of Fighting DDoS with the Power of Akamai

Additional analysis and research provided by Principal Architect, Tom Emmons Earlier this year, Akamai celebrated the fifth anniversary of the Prolexic acquisition. The merger was officially completed in February of 2014, and a lot has happened since then. In this post, we want to spend a moment...

Exploits0
Akamai Blog
Akamai Blog
added 2018/11/16 6:24 p.m.118 views

U.S. Mid-term Elections and Akamai Enterprise Threat Protector

The last few years have witnessed seismic changes in the world's political landscape and the way elections have been conducted. As of yet, there's no conclusive evidence that the results and outcomes of a country's election process have been impacted by the cyber efforts of internal or foreign...

7.3AI score
Exploits0
Akamai Blog
Akamai Blog
added 2019/10/11 8:0 p.m.117 views

How to Scale Addressable Advertising with Low Latency for Live Streaming

Written by: David Springfall, Founder and CTO of Yospace Under David's technical and strategic leadership, Yospace pioneered server-side ad insertion and established itself as the global leader in OTT stream monetisation. The Yospace technology supports full one-to-one personalisation and provide...

0.1AI score
Exploits0
Akamai Blog
Akamai Blog
added 2019/03/04 11:0 a.m.116 views

Bot Manager: Staying Ahead of the Bot Landscape

Akamai launched Bot Manager three years ago. Since then, the bot landscape has continued to evolve and we've introduced a number of improvements to our bot detections to stay ahead of it. These included browser fingerprinting and behavioral anomaly detection, as well constantly refining our core...

0.1AI score
Exploits0
Akamai Blog
Akamai Blog
added 2020/11/13 5:0 a.m.112 views

Akamai Wellness in APJ

Creating the world's best and most secure digital experience demands the very best industry talent. But as a responsible employer, we also understand how important it is to play our part in looking after those brilliant minds...

3.4AI score
Exploits0
Akamai Blog
Akamai Blog
added 2019/02/07 7:19 p.m.111 views

Qualifying Encoders with Akamai

Introduction The encoder qualification program was created to improve the process for vendors that wish to align themselves with Akamai network specific requirements. It is also intended to , mitigate the risk of encoder issues before using in production. A formal process is being introduced to...

0.4AI score
Exploits0
Akamai Blog
Akamai Blog
added 2019/08/19 4:0 p.m.110 views

Fast DNS: Zone Apex Mapping & DNSSEC

Introduction Along with its DDoS resilience and impressive global footprint, Fast DNS affords zone administrators additional technical flexibility and implementation options. One example is Zone Apex Mapping ZAM -- a feature that enables apex domains to be mapped directly to an Akamai edge IP. Th...

6.8AI score
Exploits0
Akamai Blog
Akamai Blog
added 2023/06/08 9:0 a.m.109 views

MOVEit SQLi Zero-Day (CVE-2023-34362) Exploited by CL0P Ransomware Group

Akamai Security Intelligence Group, which has been examining the MOVEit vulnerability and its exploitation, provides recommendations for detection and mitigation...

9.8CVSS7.1AI score0.99934EPSS
Exploits15
Akamai Blog
Akamai Blog
added 2020/12/21 2:0 p.m.109 views

What's the Value of a Key-Value Store?

A database back end for your application is vital, and odds are that your database is a relational database or a "not only SQL" NoSQL database. Relational databases have dominated the software industry for decades, even as other technologies have radically changed around it. A relational database...

6.9AI score
Exploits0
Akamai Blog
Akamai Blog
added 2019/10/14 4:0 p.m.109 views

Phishing Tool Analysis: Modlishka

Additional research and support provided by Danny Wasserman. Overview One of the goals of phishing sites is to lure individuals into providing sensitive data, such as personally identifiable information, banking and credit card details, and passwords, through the use of email, SMS, social media,...

Exploits0
Akamai Blog
Akamai Blog
added 2019/05/20 4:0 p.m.109 views

Mother's Day Online Shoppers Were Active, and So Were Threat Actors

Mother's Day is a major online shopping event that attracts both shoppers as well as threat actors. Earlier in the year, we reported on the United Kingdom's version, called Mothering Sunday. An eMarketer spending forecast predicted that in the United States, retail gift spending would increase,...

7.3AI score
Exploits0
Akamai Blog
Akamai Blog
added 2018/11/05 3:6 p.m.109 views

BGP Route Hijacking

Yes, we can minimize the BGP Hijacking Risk Every day we see something new about the global security threat. It is hard to keep track of all the various ways your network can be attacked. But there are some threat-vectors which need particular attention. "Did you know that a threat-actor with 20...

7AI score
Exploits0
Akamai Blog
Akamai Blog
added 2021/01/26 2:0 p.m.108 views

How Page Integrity Manager Detects Real-World Magecart Attacks

Written by Ziv Eli - Engineering Manager, Security and Maor Hod - Senior Product Manager, Security In this blog, we will take a look at and break down a recent Magecart attack detected and mitigated by Page Integrity Manager. The impacted customer operates a large international e-commerce busines...

7.4AI score
Exploits0
Akamai Blog
Akamai Blog
added 2018/12/18 1:0 a.m.107 views

Akamai Received Top Scores in Gartner's New Report "Critical Capabilities for Cloud Web Application Firewalls Services"

Are you in the process of selecting a web application firewall WAF or thinking about whether your current solution is adequate? For many organizations selecting the right WAF to protect their business is not an easy task. The threat landscape is changing fast and hackers are very creative in thei...

6.6AI score
Exploits0
Akamai Blog
Akamai Blog
added 2021/12/20 6:30 p.m.106 views

Akamai Reports Another DoS in Log4j2 (CVE-2021-45105): What You Need to Know

The series of vulnerabilities recently discovered in Log4j2 has shocked the internet. As part of our continuing research, on December 17, Hideki Okamoto from Akamai found and responsibly reported an additional denial-of-service DoS vulnerability, which was assigned as CVE-2021-45105...

5.9CVSS1.5AI score0.99999EPSS
Exploits21
Akamai Blog
Akamai Blog
added 2022/11/10 3:0 p.m.105 views

KmsdBot: The Attack and Mine Malware

Akamai security research has observed a new malware: a cryptominer with dreams of DDoS functionality. Read about kmdsbot in this blog...

1.7AI score
Exploits0
Akamai Blog
Akamai Blog
added 2022/06/28 1:0 p.m.105 views

Akamai?s Observations of Confluence Zero Day (CVE-2022-26134)

The Atlassian Confluence vulnerability is here to stay. See Akamai's research into the stats two weeks after the advisory was released...

2.8AI score0.99999EPSS
Exploits76
Akamai Blog
Akamai Blog
added 2020/12/10 2:0 p.m.105 views

Smart DNS: Delivering the Best Subscriber Experience

This is the second in a series of blog posts that discuss how smart DNS resolvers can enhance ongoing network transformation efforts such as the transition to 5G, better integration of Wi-Fi, and new network designs that optimize the edge to improve the subscriber experience, service delivery, an...

0.2AI score
Exploits0
Akamai Blog
Akamai Blog
added 2018/08/23 4:30 p.m.103 views

Apache Struts Vulnerability CVE-2018-11776

On Wednesday, August 22nd, the Apache team patched another vulnerability in the Apache Struts2 framework. Apache Struts is an open-source web application framework for developing Java web applications. The vulnerability exists when these conditions are met: 1. The alwaysSelectFullNamespace flag...

7.6AI score0.99993EPSS
Exploits41
Akamai Blog
Akamai Blog
added 2019/06/24 4:0 p.m.102 views

Sign in with Apple

What's in a Login Button? All you need to know about the new "Sign in with Apple" For Akamai Identity Cloud, we intend to support our clients that wish to implement "Sign in with Apple" just like we do for Facebook, Google, Instagram, Twitter, LinkedIn and about 30 other Identity Providers. If yo...

6.9AI score
Exploits0
Akamai Blog
Akamai Blog
added 2019/12/19 8:30 p.m.101 views

Inspecting TLS Web Traffic - Part 2

In the first blog post I covered why HTTPS web traffic has grown to unprecedented levels, provided a TLS primer and looked at the basic concept of intercepting and inspecting HTTPS web traffic with Man-In-The-Middle techniques MITM. In the second part, I will dive a bit deeper into how the TLS MI...

0.3AI score
Exploits0
Akamai Blog
Akamai Blog
added 2018/03/02 10:0 p.m.101 views

memcached, now with extortion!

Over the past week, memcached reflection attacks have taken the DDoS scene by storm. With several attacks hitting organizations across many industries, including a record breaking 1.3Tbps attack against an Akamai customer. Akamai has observed a new trend in extortion attempts using memcached...

6.7AI score
Exploits0
Akamai Blog
Akamai Blog
added 2020/12/15 2:0 p.m.98 views

Stopping Active Attacks with Penalty Box

A web application firewall WAF is most often used by organizations for external security controls to detect and block individual attack attempts against target web application assets. Open Web Application Security Project OWASP risk rating methodology Unfortunately, today's sophisticated web...

7.7AI score
Exploits0
Akamai Blog
Akamai Blog
added 2019/07/30 4:0 p.m.97 views

Time to Transfer Risk: Why Security Complexity & VPNs Are No Longer Sustainable

We all heed the gospel of patching, but as recent incidents made clear, even cutting-edge disruptors struggle to patch everything, everywhere, and all the time. Maybe this is associated with the growing volume of common vulnerabilities and exposures CVEs. As they say, there is only one way and...

6.8AI score
Exploits0
Akamai Blog
Akamai Blog
added 2019/05/13 12:13 p.m.97 views

Exploring botnets in VR

By Asaf Nadler & Lior Lahav Botnets often use domain generation algorithms DGAs to select a domain name, which bots use to establish communication channels with their command and control servers C2. Since Akamai analyzes over 2.2 trillion DNS requests per day, and detects thousands of active...

Exploits0
Akamai Blog
Akamai Blog
added 2019/05/08 7:8 p.m.97 views

Deployment Diversity for DNS Resiliency

Consider Addressing Delegation Servers with Varying Network Routes Written by: Jim Gilbert and Barry Greene Don't Forget DNS Similar to diverse workforces performing at a higher level, diverse network service deployments perform at a higher level that is increasingly important as the Internet...

6.5AI score
Exploits0
Akamai Blog
Akamai Blog
added 2019/02/21 3:30 p.m.97 views

New Video Series: How a Security Operations Command Center Took On the Largest Attacks the Internet Has Ever Seen

For over two decades I've made it my mission to stop "bad guys" on the Internet. Working day in and day out alongside an amazing team of security professionals inside our global Security Operations Command Center SOCC has given me the opportunity to do just that. I'm excited to share with you our...

0.1AI score
Exploits0
Akamai Blog
Akamai Blog
added 2019/03/25 4:0 p.m.96 views

March Release: Q&A with Ari Weil

Shortly after Akamai announced the March 2019 Release with new features and capabilities across its security, performance and media product lines, Akamai's VP of Product Marketing, Ari Weil, took over Akamai's Twitter account for a live March Release Q&A. For those that missed the live event,...

6.7AI score
Exploits0
Akamai Blog
Akamai Blog
added 2025/05/21 2:0 p.m.93 views

BadSuccessor: Abusing dMSA to Escalate Privileges in Active Directory

Akamai researchers found a privilege escalation vulnerability in Windows Server 2025 that allows attackers to compromise any user in Active Directory...

7.5AI score
Exploits0
Akamai Blog
Akamai Blog
added 2018/11/06 5:54 p.m.93 views

Visit Akamai at AWS re:Invent 2018!

On November 26-29, the Las Vegas Strip will be flooded with tens of thousands of developers, engineers, admins, architects and other technologists for trainings, certifications and sessions put on by AWS and its partner community at re:Invent. Akamai is excited to be a Gold sponsor this year, wit...

7.3AI score
Exploits0
Total number of security vulnerabilities2397