Home Blog
DDoS (distributed denial of service) attacks have become a major threat to a huge variety of businesses, from the smallest to the largest multi-national corporations. DDoS attacks can cause significant damage and disruption. They can adversely affect a targeted company’s reputation and result in lost revenue. It’s why many businesses now, as part of the investment to protect their network against DDoS attacks, are turning to threat intelligence feeds.
As a professional ADC administrator, you know how frustrating it can be to receive a call about application performance issues, especially on the weekend. Whether it's slow response times, connectivity failures, or other glitches, troubleshooting these problems can be a time-consuming and frustrating process.
Here are the first things that come to mind when many people think of a DDoS attack: Unsophisticated, the oldest trick in the book, not harmful, “I am not at risk”, and on and on. I am here to tell you it is all false. Our current DDoS threat landscape proves it. Although we see many attacks in the news that are related to political debates and extremists’ hacktivism, other targets, including high schools, e-commerce, and others, don’t necessarily make the news but are attacked as regularly.
As web applications become the core of business functions, application protection takes an ever more important role in protecting those applications, their availability and the customer data that is processed through them.
However, as its importance grows, the domain of application security is also growing in depth and complexity, with a unique set of attacks, tools and mechanisms for mitigation attacks. As a consequence, it is becoming a dedicated discipline within cybersecurity, distinct from other domains or specializations.
A 2-tier DDoS solution combining on-premises and cloud-based protection is the best practice recommended by industry experts, such as Gartner. By utilizing both solutions, organizations can benefit from the strengths of each, including the ability to mitigate attacks closer to the source with on-premises protection and the scalability and flexibility of cloud-based protection.
DNS over HTTPS (DoH) is a protocol that allows for DNS resolution to occur through an encrypted HTTPS connection. Unlike traditional DNS resolution, which employs unencrypted UDP or TCP connections, DoH provides a heightened level of privacy and security and has been widely adopted by major web browsers and operating systems.
So, you've recently been hired to become a SOC (security operations center) manager for a major organization. You are obviously very excited. You're told that your role is to monitor — at all times — the organization to ensure it isn’t and won’t experience any cyber attacks.
Radware has the unique opportunity to work with many women in technology and cybersecurity. So, to celebrate International Women’s Day 2023, we turned to our customers — in this case, women — who continually provide us with interesting, insightful responses to questions we present to them. In this case, we asked them to provide advice and suggestions for women who are interested in working in technology and cybersecurity.
The impact of these hyper volumetric DDoS attacks can be devastating — they cause extended downtime, financial losses and reputational damage. That’s why it’s critical that organizations are prepared to detect and mitigate these vicious attacks with a state-of-the-art mitigation on-prem platform.
The Aite Matrix: Leading Bot Detection and Management Provders report shows Radware as the leader among the ten vendors Aite-Novarica evaluated.
The following are 5 key reasons that there aren't enough cybersecurity professionals to keep organizations safe from today's array of threats.
Microservices, which break down applications into smaller, independent services, offer numerous benefits, and using Kubernetes as the go-to for orchestration has only made them more popular.
Using the layered security capabilities of Red Hat OpenShift, Radware Kubernetes Web and API Protection (KWAAP) brings Radware’s carrier-grade security to the era of microservices and Kubernetes-orchestrated frameworks.
The new partnership with industry leaders Oncore and Radware will help businesses achieve their digital transformation goals.
To understand why the application supply chain is an area that should not be overlooked, we must first understand the current cyber threat landscape and how modern applications are built.
For many, the greatest concern they have about migrating their application environment to the cloud is what it may mean to their attack surface. Their concern is valid. No question, the cloud has expanded it.
In 2022, Radware saw DDoS attacks grow by over 200% and the number of blocked events per customer nearly doubled each quarter. The precipitous growth in DDoS attacks is frightening.
In recent years, there has been a significant increase in the number of software supply chain attacks. These attacks target the various components that make up a software application, such as libraries and frameworks, to infiltrate and...
One of the many things the global shutdown exposed was the critical need for robust, flexible collaboration and unified communications solutions. It took a pandemic for the world to fully realize their importance. There was literally an overnight need to provide remote workers with access to email, voice calls, messaging services, videoconferencing and collaboration tools — all from a single platform and accessible from anywhere.
Card testing, also known as card checking, is a form of fraud where criminals try to determine if stolen credit card information is valid by making small purchases or attempting to authorize a transaction. The preferred method...
One of the many benefits that comes from working at Radware is the opportunity to work with cybersecurity professionals whose empirical experience protecting organizations from cyber threats and attacks presents a treasure trove of insightful and highly useful information. Mark A. Houpt, the CISO of data center provider and longtime Radware partner DataBank Holdings, Ltd. (DataBank), is a perfect example.
Supply chain attacks occur when a third-party vendor or partner with less robust security measures is breached, allowing attackers to indirectly gain access to an organization. This can happen through backdoors planted in software updates, as seen...
Phishing for 2FA codes is the latest in specialized bots that make it easier and quicker for fraudsters to fool their targets into providing their authentication codes or OTPs.
A partner program is measured by how beneficial it is for both parties. Beneficial is the perfect word to describe Radware’s upgraded, greatly enhanced partner program. To ensure Radware continues to surpass competitors’ partner programs, we have...
It is not common for analysts to have the opportunity to study the social circles of criminal organizations, but occasionally a group emerges that is more transparent than others. Examining a criminal organization's social presence can give...
A bot manager needs to do more than simply eradicate bots that come into contact with networks and employees. A level of discernment is required; remember, not all bots are bad. But it’s imperative to stop the bad, malicious bots in their tracks. Consider the following when selecting a bot manager.
The use of 3rd parties to test the cyber hygiene of business partners and vendors has become increasingly common.
While low-code and no-code application development is a couple decades old, the train truly left the station just a few years ago. It has been gaining considerable steam ever since. So popular and prevalent is low-code/no-code that several studies estimate that by 2025 it will be responsible for two-thirds of all applications developed.
Unfortunately, the holidays are also an exciting time for cybercriminals. While we’re shopping, they’re on their own shopping sprees. It comes in the form of phishing, scraping, password attacks and zero-day exploits. These attacks increase at holiday time.
We like to query Radware customers on an array of cybersecurity subjects because we always receive insightful, interesting and, perhaps most importantly, educational responses. You’ll see that this month is no different.
pplication development has gone through an array of stages. Challenges relating to it got so taxing that in 2001 several noted developers got together to establish the Agile Manifesto. Its goal was to address issues they had with traditional slow and cumbersome application development — the waterfall method.
In October of last year, a ruling against LinkedIn by The United States Court of Appeals for the Ninth District in San Francisco left many confused. How could the court rule in favor of a company, HiQ...
Since mid-October, W4SP malware is attacking software supply chains; in this case, it's using Python packages to launch an information stealer.
A Uber breach verdict was handed down that could prove highly impactful to CISOs and CSOs in the near and distant future.
With the disruption, loss of life and heartbreaking images that the Russia-Ukraine conflict has produced, it is easy to overlook what it has meant to the cyber threat landscape. Even threat actors have taken sides.
Throughout 2022, the theft of user credentials continued to blanket the threat landscape. A recent example that illustrates both the simplicity and depth of this tactic is the Uber breach by threat actor Teapot, which bought the illegally harvested user credentials on the Darknet Marketplace (DNM).
In the third quarter of 2022, the four universal cyberattack drivers were accounted for: war, religion, politics and money.
The 3 days between “Black Friday” and “Cyber Monday” are when online retailers often enjoy their highest sales numbers for the year. Yes, it’s a very big deal. While consumers and retailers eagerly anticipate this 3-day shopping...