2407 matches found
The Countdown Has Started - The Move Toward Zero Trust and MFA
In early May 2021, the President of the United States issued an executive order on cybersecurity, and though it will take some time for executive branch agencies to develop formal rules, the order itself includes a lot of what I consider to be best practice in cybersecurity, including the use of...
Embracing Mobile-First for a Secure Office Anywhere
Shortly after the onset of the pandemic, Asavie -- now part of Akamai -- announced a partnership with Nokia's Nuage Networks to enable the Finnish company to resell what is now Akamai Security and Personalization Services SPS, a product designed to enable private network access for mobile devices...
SMB Worm Indexsinas
New details in the Indexsinas SMB worm, also dubbed NSABuffMiner...
The Threat That Never Went Away Is Back (with a Vengeance)
What is your recollection of May 2017? Emmanuel Macron won the French election. The Ringling Bros. and Barnum & Bailey Circus gave its final performance after a 146-year run. The U.S. FCC voted to overturn net neutrality rules. And the National Health Service in the United Kingdom was crippled by...
The Threat That Never Went Away Is Back (with a Vengeance)
What is your recollection of May 2017? Emmanuel Macron won the French election. The Ringling Bros. and Barnum & Bailey Circus gave its final performance after a 146-year run. The U.S. FCC voted to overturn net neutrality rules. And the National Health Service in the United Kingdom was crippled by...
How to Perform a Zero Trust AWS Assessment with Infection Monkey and ScoutSuite
Take action on issues highlighted in the report to ensure your AWS cloud defenses are protected in a data breach, minimizing impact and data loss...
Targeted Cache Control
Content delivery networks CDNs have been around and have evolved over a long time in internet years. They all speak HTTP and you can safely rely on them to work with just about anything else that speaks HTTP. This is the beauty of standards -- HTTP in this case. What you cannot count on is there...
SOTI Research: Gaming In A Pandemic
Welcome to the second edition of SOTI Research. In this edition, we look at the attacks and trends in the gaming industry during 2020. SOTI Research is a condensed, shorter version of our traditional State of the Internet / Security reports, offering focused data points and contextual awareness...
Targeted Cache Control
Content delivery networks CDNs have been around and have evolved over a long time in internet years. They all speak HTTP and you can safely rely on them to work with just about anything else that speaks HTTP...
World-Class OTT Streaming from MwareTV with Akamai
Since the onset of the pandemic, home entertainment has never been more important. Millions of users across the globe have turned to over-the-top OTT streaming and live TV to bring much-needed diversion and exciting content into their lives...
Crypto Threats Surge by 500%, and It's All About the Money
Previously reserved for early adopters and tech-savvy consumers, cryptocurrencies have gone mainstream -- with tech entrepreneurs and prominent financial institutions leading the charge. In the past year, rapidly increasing cryptocurrency rates, the introduction of new currencies, and the officia...
Crypto Threats Surge by 500%, and It's All About the Money
Previously reserved for early adopters and tech-savvy consumers, cryptocurrencies have gone mainstream -- with tech entrepreneurs and prominent financial institutions leading the charge...
NorthSec CTF 2021 Write Up: 'Impurity Assessment Form'
This is a write up of a NorthSec 2021 CTF problem I solved with Allan Wirth @AllanWirth as part of team SaaS which finished in 3rd. It was an extremely creative problem to solve so I wanted to share it here...
HTTP/3 and QUIC: Past, Present, and Future
You may have seen the announcements over the past two weeks -- the IETF QUIC RFCs have been published! That leads to a lot of questions, depending on how closely you've followed this space. You might be wondering what this means to you, or you might think QUIC has been an established thing for...
New Admin Portal for Akamai Enterprise Application Access
The definition of a user has evolved to comprise much more than an employee, making secure access to the right application, for the right user, at the right time difficult and complex. Akamai Enterprise Application Access EAA is a unique cloud architecture that closes all inbound firewall ports,...
HTTP/3 and QUIC: Past, Present, and Future
You may have seen the announcements over the past two weeks -- the IETF QUIC RFCs have been published! That leads to a lot of questions, depending on how closely you've followed this space...
What A Funny App I Got Here!
When you hear the word "malware", the first thing that might come to your mind is a PC or laptop. You think about some weird advertising pop-ups or unrecognized processes running in the background...
New Admin Portal for Akamai Enterprise Application Access
The definition of a user has evolved to comprise much more than an employee, making secure access to the right application, for the right user, at the right time difficult and complex...
Better Real User Monitoring with BoomerangJS and Akamai mPulse
In this blog, we'll walk through a few different snippet insertion methods and available optimizations...
Akamai Provides Prolexic DDoS Service Impact Update (Status: Resolved)
Akamai experienced an outage for one of its Prolexic DDoS services Routed 3.0 starting at 4:20 AM UTC. We detected the issue immediately, and impacted customers received an error alert within seconds. The impact was limited to Akamai customers using version 3.0 of the Routed service. Many of the...
Akamai Provides Prolexic DDoS Service Impact Update (Status: Resolved)
Akamai experienced an outage for one of its Prolexic DDoS services Routed 3.0 starting at 4:20 AM UTC. We detected the issue immediately, and impacted customers received an error alert within seconds. The impact was limited to Akamai customers using version 3.0 of the Routed service...
Stopping Ransomware and Lateral Movement with Segmentation
Learn how to take on the growing ransomware threat, and the necessity of network segmentation from VP of Cyber Research, Amit Serper...
Akamai Platform Update: New Security Enhancements That Intelligently Automate Application and API Security, Mitigate Online Fraud, and Reduce Burden on Security Professionals
Today is Day 2 of Akamai's Platform Update. Yesterday, we talked about the acceleration of modern app development and how we're empowering users to shift more compute and data to the edge. From the core to the cloud to the edge, the applications and APIs that power modern web experiences must als...
Akamai Platform Update: New Security Enhancements That Intelligently Automate Application and API Security, Mitigate Online Fraud, and Reduce Burden on Security Professionals
Today is Day 2 of Akamai's Platform Update. Yesterday, we talked about the acceleration of modern app development and how we're empowering users to shift more compute and data to the edge...
Platform Update: Akamai Boosts Edge Application Power, Expanding Possibilities for Developers
Welcome to the Akamai Platform Update -- two days of new capabilities and innovations across our edge technology and security product portfolios. Today, we look at our edge technology products, which include edge computing, edge delivery CDN, and other complementary products and services that hel...
Platform Update: Akamai Boosts Edge Application Power, Expanding Possibilities for Developers
Welcome to the Akamai Platform Update -- two days of new capabilities and innovations across our edge technology and security product portfolios...
The Adaptive Security Engine -- A Quantum Leap Forward for Application and API Protection
At Akamai, our mission is to make application and API security highly effective and easy. As part of that effort, we are excited to announce the Adaptive Security Engine -- a new core technology powering Akamai's application and API protection offerings, designed to enable a hands-off approach to...
The Adaptive Security Engine – A Quantum Leap Forward for Application and API Protection
At Akamai, our mission is to make application and API security highly effective and easy. As part of that effort, we are excited to announce the Adaptive Security Engine -- a new core technology powering Akamai's application and API protection offerings, designed to enable a hands-off approach to...
Trusting Locations Bites Us Yet Again
Recently, Microsoft announced the discovery of yet another attack being launched by the now infamous Nobelium group, which has been responsible for numerous successful attacks, including the widespread SolarWinds breach in 2020. Thankfully, this latest attempt was not as impactful as those in the...
Trusting Locations Bites Us Yet Again
Recently, Microsoft announced the discovery of yet another attack being launched by the now infamous Nobelium group, which has been responsible for numerous successful attacks, including the widespread SolarWinds breach in 2020...
How Network Segmentation Simplifies PCI DSS Compliance
Read more about how proper network segmentation can simplify PCI DSS compliance by effectively reducing the number of assets in scope...
Now Available: EdgeKV Distributed Key-Value Store
We're excited to announce the availability of EdgeKV, a distributed key-value store database that enables EdgeWorkers to leverage data stored at the edge when deploying custom code across our serverless computing platform. This solution is fully distributed, meaning it runs in 1,400+ networks and...
Now Available: EdgeKV Distributed Key-Value Store
We're excited to announce the availability of EdgeKV, a distributed key-value store database that enables EdgeWorkers to leverage data stored at the edge when deploying custom code across our serverless computing platform...
The Rapid Resurgence of DDoS Extortion (That Didn't Take Long)
Just when we thought DDoS extortion was fading into the rearview mirror, it's time to circle up the trucks again gas tanks full. Starting last week and rapidly accelerating, we began seeing in our data and hearing firsthand from organizations about a new wave of extortion activity -- new Bitcoin...
How Enigmo Moved Logic from Client to Origin to Edge
By: Hideki Ito Enigmo owns BUYMA, a Japanese fashion C2C marketplace that helps people buy and sell high-quality goods from overseas on www.buyma.com. BUYMA has 8.21 million members and deals with 5.62 million items across 140,000 fashion brands. Its website uses EdgeWorkers to manipulate cookies...
SOGo and PacketFence Impacted by SAML Implementation Vulnerabilities
Part of Akamai's incident management process for vulnerabilities in third party software involves verifying potential impact in other systems using the same or similar libraries. While following that process when addressing the SAML impersonation vulnerability, CVE-2021-28091, which impacted...
Akamai EAA Impersonation Vulnerability - A Deep Dive
In this post, we cover the technical details of CVE-2021-28091, the vulnerability impacting Akamai's Enterprise Application Access EAA platform. We cover our investigation, remediation and disclosure process for the vulnerability. For an overview of the vulnerability, the impact to Akamai, the...
SAML Implementation Vulnerability Impacting Some Akamai Services
This blog post provides an overview of a vulnerability discovered in Akamai's Enterprise Application Access EAA product which has been patched. This vulnerability could have allowed an actor to impersonate an authorized user when interacting with an application that used Security Assertion Markup...
How Enigmo Moved Logic from Client to Origin to Edge
Enigmo owns BUYMA, a Japanese fashion C2C marketplace that helps people buy and sell high-quality goods from overseas on www.buyma.com...
SAML Implementation Vulnerability Impacting Some Akamai Services
This blog post provides an overview of a vulnerability discovered in Akamai's Enterprise Application Access EAA product which has been patched...
SOGo and PacketFence Impacted by SAML Implementation Vulnerabilities
Part of Akamai's incident management process for vulnerabilities in third party software involves verifying potential impact in other systems using the same or similar libraries...
The Rapid Resurgence of DDoS Extortion (That Didn't Take Long)
Just when we thought DDoS extortion was fading into the rearview mirror, it's time to circle up the trucks again gas tanks full...
Akamai EAA Impersonation Vulnerability - A Deep Dive
In this post, we cover the technical details of CVE-2021-28091, the vulnerability impacting Akamai's Enterprise Application Access EAA platform...
5 Benefits of Network Segmentation
Learn more about how microsegmentation can enable you to achieve granular network segmentation, quickly and securely...
Edge DNS Secondary Implementation: Order of Operations for NS Zone and Registrar Records
This article has been updated to include recent industry trends and information about primary implementations. Akamai Edge DNS service delivers edge-based, authoritative domain services for thousands of organizations. These organizations trust Edge DNS to deliver reliable and performant responses...
Edge DNS Secondary Implementation: Order of Operations for NS Zone and Registrar Records
Akamai Edge DNS service delivers edge-based, authoritative domain services for thousands of organizations...
ThinkPHP Exploit Actively Exploited in the Wild
...
It's Official - Akamai is a Great Place to Work
When Akamai Costa Rica won the 'Great Place to Work' award, we were delighted. It's a wonderful achievement that really means a lot to Akamai and to all the collaborators who have worked here. It highlights the great working environment that Akamai have created for us. But it also shines a light ...
Romanian Crypto Mining Infection
While examining my honeypot logs and digging through the newly downloaded binaries last week, I noticed a large compressed file. I figured it would be a crypto miner, typically a tar archive and gzip normally erroneously compressed. I moved the archive over to my test lab and started examining th...
Digital Transformation Usain Bolt-Style: Health Care's Sprint to Modernization
Instead of picking up their phone to schedule a doctor's visit, ring an insurance provider, or call the pharmacy, a patient's first step to getting care is now often the use of an app on their smartphone. There are new ways to order prescriptions, conduct appointments, seek care, and share health...