REvil Resurgence? Or a Copycat?

Has REvil returned? In this new post by Akamai's SIRT, see a DDoS incident by a threat actor claiming to be REvil...

Meet Mike Schiessl: Senior Technical Marketing Engineer

Meet Mike Schiessl to learn more about his career path, how companies can support a DevOps to DevSecOps transition, and the future of security and business...

4 Steps to Prepare for Open Enrollment: Ready for Takeoff?

Preparing for open enrollment is a key part of running efficient healthcare organizations, but it's difficult to know where to start. Learn which steps to take...

Detecting Malicious JavaScript with Secure Internet Access Enterprise Secure Web Gateway

JavaScript is everywhere, and when malicious can be hugely detrimental. In this blog, learn about the types of malicious JavaScript and how Akamai's SWG product helps keep you more secure from it...

How to Cover 6 Core Areas of PCI Compliance with Armis and Akamai

The joint security solution from Akamai Guardicore Segmentation and Armis supports PCI compliance requirements to protect consumer data across entire networks...

RPC Runtime, Take Two: Discovering a New Vulnerability

Patching and bug hunting is a cyclical process. See part two of our Patch Tuesday RPC Runtime research, updated for May 2022...

Protecting Your Healthcare Organization During Uncertain Times

Explore three ways healthcare organizations can boost cybersecurity, critical infrastructure, and ransomware protection to prepare for potential cyberthreats...

Phishing Is Still a Security Challenge

Phishing is not a new security problem. In fact, it’s been around since the earliest days of email when most users received numerous emails from African kings or other high-ranking officials who promised them great riches if they simply provided their bank account details. Things have changed a l...

Meet Limor Sinay: Director of Solutions Engineering

When companies are open to innovation and ongoing growth, technology is able to thrive. As the director of solutions engineering, Limor Sinay provides us with deeper insight into Akamai?s ever-evolving efforts to implement change and prioritize progressive thinking ? a goal that enables its...

An Attack Surface Workout for Web Application and API Attacks

WAF Attacks have been increasing dramatically over the last 9 months. These attacks cut across industries, geos and customers. Growth has largely been driven by Local File Inclusion lfi attacks, which took the lead from SQL Injection attacks in early 2021 before just taking off in the fall...

Zero Trust and the Fallacy of Secure Networks

Talking about secure networks is like talking about safe pools. A pool is just a body of water, and if it has enough water to swim in, then it has more than enough water to drown in. A pool is inherently unsafe. We, therefore, take care in how we use a pool: We don’t swim alone; we don’t run arou...

Multicloud, Multi-CDNs (Content Delivery Networks) Architecture – A Deceptive Future of the Internet

The last two years stood witness to multiple internet outages that caused massive disruptions across the globe. One prevalent theory is that multicloud, multi-CDNs content delivery networks are the inevitable future of the internet. This article conducts a litmus test on this theory and tries to...

Platform Update: Build the Future on Akamai

Today, technology is infused into nearly everything we do. The data behind personalized recommendations, connected devices, and wearables has changed how we engage with the world around us — whether we’re driving to a new destination, purchasing from a new retailer, or monitoring our health...

Reaching the Convergence of Security and Productivity

It’s all too common that IT security tools and practices come at the cost of productivity. Even physical security has this trade-off. There would be no rush to arrive at the airport an hour early if it weren’t for the extensive security measures that flying entails. As a result of this trade-off,...

Protecting the Digital Experience

...

What’s New for Developers: April 2022

We have big news this month. You may have already heard that we acquired Linode, creating the world’s most distributed compute platform. In addition, we have release announcements and new developer content to share with you!...

Australia Experiences Massive Spike in WAF Multi-Vector, DDoS Attacks

With web applications under increased attacks, Akamai has analyzed data points for web application firewall WAF multi-vector and DDoS attacks between April 2021 and March 2022 to determine the severity of the situation in Australia...

World-Class Live Streaming From the Royal Opera House

Based in Covent Garden, London, the Royal Opera House brings together the world’s most extraordinary artists to share live, streamed, and broadcast events and performances. We’re delighted that this iconic British institution has chosen to work with Akamai to bring its fantastic productions to th...

Making the Edge Work for You

For many people, “building at the edge” may conjure fantastical images of nearly sci-fi–like computational power embedded on devices all around us, crunching massive volumes of data. We’re getting there. Today’s reality is that more workloads are moving to the edge to take advantage of the...

Demystify Supply Chain Emissions with Akamai’s New Carbon Calculator

Oftentimes, organizations view supply chains as an extension of their own business and require suppliers to adhere to codes of conduct, efficiency standards, and more. Today, this has expanded to environmental sustainability goals as well. Companies understand that the environmental impact of the...

Undetected Attacks on Anti-Malware Agents Using DNS Spoofing

Although we’ve made significant progress as a community in this regard, there are still instances in which the outcome of DNS spoofing attacks can go undetected. In this article, we describe a DNS spoofing attack that goes unnoticed by users...

Picture-Perfect Gaming Experience for WorldMatch

WorldMatch, a games and content provider for global markets, collaborates with some of the biggest international casinos. Headquartered in Italy and in operation since 2003, the gaming provider boasts a portfolio of more than 200 games, 160 slot machines with 70 game engines, 30 table games, and...

Critical Remote Code Execution Vulnerabilities in Windows RPC Runtime

Microsoft’s April 2022 Patch Tuesday introduced patches to more than a hundred new vulnerabilities in various components. Three critical vulnerabilities were found and patched in Windows RPC Remote Procedure Call runtime: CVE-2022-24492 and CVE-2022-24528 discovered by Yuki Chen with Cyber KunLun...

Akamai Is a Leader in Bot Management — What That Means for You

Obviously we’re proud to be a leader. Bot management is a contact sport, where being great is a requirement if you want to stop the persistent adversarial bots. So it’s rewarding to be recognized for the work we’re doing keeping the bad bots away from our customers’ digital businesses...

Markdown Menace: Discovering an LFI Vulnerability on a Blogging Platform

Protecting sensitive information is a recurring and widely known concern in the security community. As researchers, we know all too well how information can be used maliciously I mean, come on … it’s our job. Considering the size of the threat vector that is LFI, it’s something that developers an...

Why Linode+Akamai Is Transformational for How Developers Use the Cloud

Just three weeks have gone by since Akamai officially welcomed Linode into our fold, and I’m encouraged by the excitement that so many have expressed about the combination of our two companies since we announced the acquisition in February. In conversations with us, industry analysts use the word...

Conti?s Hacker Manuals ? Read, Reviewed & Analyzed

Conti is a notorious ransomware group that targets high-revenue organizations. They were first detected in 2020, and appear to be based in Russia. It is believed that the group is the successor to Ryuk ransomware group. According to Chainalysis, The ransomware group was the highest grossing of al...

Conti?s Hacker Manuals ? Read, Reviewed & Analyzed

Conti is a notorious ransomware group that targets high-revenue organizations. They were first detected in 2020, and appear to be based in Russia. It is believed that the group is the successor to Ryuk ransomware group. According to Chainalysis, The ransomware group was the highest grossing of al...

Conti’s Hacker Manuals — Read, Reviewed & Analyzed

Conti is a notorious ransomware group that targets high-revenue organizations. They were first detected in 2020, and appear to be based in Russia. It is believed that the group is the successor to Ryuk ransomware group. According to Chainalysis, The ransomware group was the highest grossing of al...

Spring Cloud Function SpEL Injection (CVE-2022-22963) Exploited in the Wild

Although Spring Cloud Functions are not as widespread as the Log4j library, and should provide a good separation from the hosting server, some draw the line between the two, due to the ease of exploitation over HTTP/s. This new vulnerability will definitely result in many threat actors launching...

Mitigating Spring Core “Spring4Shell” Zero-Day

When Spring, the Java-based application, fell victim to cyberattacks, Akamai's Adaptive Security Engine detected zero-day attacks and protected customers against them...

Welcome to Edge Diagnostics

After more than a year of dedication and hard work, we are delighted to officially announce the launch of our new Edge Diagnostics application on March 30, 2022. Diagnosing network and content issues quickly and effectively is critical to your success! Therefore the aim is to make the existing...

Meet Anthony Hogg: Senior Enterprise Architect and Lifelong Learner

At Akamai and across the tech industry at large, best practices and tools are constantly evolving. To keep up with these changes, a passion for learning is key, especially among those who support and enable others. One Senior Enterprise Architect on Akamai’s Advanced Solutions team, Anthony Hogg,...

A Fast and Seamless Gaming Experience for Gameloft

Gameloft is a leading gaming provider with more than 20 years of history. The company, created in 2000, has a passion for games and a desire to distribute them to even more players around the world. By bringing the wonders of games to mobile devices and, now, to all digital platforms, Gameloft ha...

Akamai Accelerator Program: Technological Solutions for India’s Water Crisis

Akamai’s India Corporate Social Responsibility CSR Trust is helping to tackle this major challenge. In accordance with the country’s CSR mandates, the trust allocates 2% of the branch’s revenue to CSR programs. Its flagship initiative is the Akamai Accelerator Program, which supports innovators w...

What’s New for Developers: March 2022

We have some excellent highlights this month. We’re excited to announce new videos, useful articles, an event recap, and much more...

What's Driving Multi-Factor Authentication Adoption?

The need for businesses to deploy MFA for the protection of employee accounts has never been greater — according to the latest Verizon Data Breach report, nearly 80% of data breaches involve the use of stolen or compromised employee credentials and brute force logins...

Akamai and Linode: Giving Developers One Place to Build, Run, and Secure Apps

I am incredibly excited to announce that today we have completed the acquisition of Linode. You may have seen our press release announcing the acquisition, or listened to our earnings call during which our executives discussed why this is the right strategic investment for Akamai. But I wanted to...

Adding Akamai Shared Domains to the Public Suffix List

Akamai plans to submit a number of our shared domains to the “PRIVATE” section of the Public Suffix List PSL at some point on or after March 31, 2022. The PSL contains multi-party domain suffixes and is used by a wide range of client software for example, web browsers to implement policy decision...

Himalaya Exchange Creates a New Digital Financial System

The Himalaya Exchange offers a new cryptocurrency that is designed to be resistant to extreme price volatility. A key aim for the company is to provide a revolutionary financial solution for the new digital age. Akamai is delighted that this hugely innovative company has chosen us to deliver a...

The “PhoneHome” DDoS Attack — Everything You Need to Know

A vulnerability in enterprise collaboration suite MiCollab by telecommunications company Mitel has been abused for distributed denial-of-service DDoS attacks with record-breaking amplification potential...

Akamai Is a Leader in Forrester New Wave: Microsegmentation

We are excited to be named a Leader in The Forrester New Wave™: Microsegmentation, Q1 2022. We were evaluated alongside eight other vendors in the microsegmentation space and ranked in 10 criteria, including product vision, interface and reporting, host agents, agentless aspect, product, and...

Six Key Takeaways from the OMB Memo

In May 2021, following a number of high-profile security incidents, U.S. President Biden issued an executive order that set out a high-level agenda to modernize and improve the government’s cyber resilience. This January, the U.S. Office of Management and Budget OMB issued a memo to the heads of...

DNS Cybersquatting: The Case for Edge DNS Zone Protect

Cybersquatting, also known as domain squatting, is a type of scam that mimics a brand's domain to confuse potential victims and gain their trust. According to Revision Legal, “Cybersquatting is prohibited in the U.S. by federal law under the Anticybersquatting Consumer Protection Act ACPA.” These...

In China and Japan, Malicious Botnets Surge Amidst Holiday Ecommerce Traffic

Akamai data shows that in the days leading up to and including Lunar New Year, the activity of malicious bots increased 15% in China over the previous month. While a similar surge occurs during the high-traffic seen at the end-of-year holidays in EMEA and the U.S. — China and Japan present a...

The Akamai Foundation: Making a Global Impact

In 2021, the impact of the Akamai Foundation’s philanthropic activities continued to expand beyond science, technology, engineering, and mathematics STEM education, deepening our commitment to digital equity and inclusion around the globe and to making a positive impact in the communities we serv...

Greenwashing or Legit?

I think we can all agree that sustainability is one of the most important topics that we will discuss this year. It's driving consumer habits, business practices, and investment decisions. And it’s a discussion that’s happening at every level of the business; from procurement all the way up to th...

CVE-2022-26143: TP240PhoneHome Reflection/Amplification DDoS Attack Vector

A new reflection/amplification distributed denial of service DDoS vector with a record-breaking potential amplification ratio of 4,294,967,296:1 has been abused by attackers in the wild to launch multiple high-impact DDoS attacks...

How We’re Conserving Energy While Energizing Online Experiences

I’ve always loved building things. At Akamai, I get to be part of a team that builds amazing things — things that power and protect online experiences and make life better for billions of people, billions of times a day. But delivering those online experiences comes with a catch...

What Does Fishing for Rebar Have to Do with Building a More Sustainable Internet?

Danny Lewin Community Care Days DLCCDs are a celebration of our late co-founder Danny Lewin’s generous spirit and his tenacious appetites for collaboration, innovation, and especially giving back to our global community. DLCCDs bring to life our values and empower all Akamai employees to voluntee...