Original Fix for Log4j Flaw Fails to Fully Protect Against DoS Attacks, Data Theft

Organizations should upgrade ASAP to new version of logging framework released Tuesday by the Apache Foundation, security experts say.

---

Apache’s Fix for Log4Shell Can Lead to DoS Attacks

Not only is the jaw-dropping flaw in the Apache Log4j logging library ubiquitous; Apache’s blanket of a quickly baked patch for Log4Shell also has holes.

---

Dark web marketplace bites the dust after colossal DDoS attack

A large-scale cannabis marketplace on the dark web has been taken offline for good by a DDoS attack.

---

Dark web market Cannazon shuts down after massive DDoS attack

Cannazon, one of the largest dark web marketplaces for buying marijuana products, shut down last week after suffering a debilitating distributed denial of service attack. [...]

---

Blizzard confirms Battle.net was taken down by a DDoS attack

DDoS attack on Battle.net lasted about an hour, appears to have affected small subset of players.

---

The gaming industry's latest challenge: DDoS protection

Like moths to a flame, hackers always go where the action is. As the COVID-19 pandemic drove work away from the office, businesses have faced one cyberattack after another on their remote work infrastructure. Meanwhile, a boom in virtual entertainment has brought a surge of players to the gaming industry -- and with them, a rise in DDoS attack activity. Cybercrime rings are launching triple extortion campaigns combining DDoS attacks with ransomware, and data theft, while ordinary gamers can rent a botnet easily and affordably to cheat or disrupt competition with a DDoS attack of their own. The highly popular Titanfall 2 game has already been rendered virtually unplayable -- perhaps by as… [Continue Reading]

---

How to Choose the Right DDoS Protection Solution

Pankaj Gupta, Senior Director at Citrix, outlines how distributed denial of service attacks have become increasingly sophisticated, bigger and economically motivated.

---

DDoS Attacks Surge 35% in Q3 as VoIP is Targeted

Lumen claims longest attack lasted 14 days

---

Cloudflare blocks almighty DDoS attack launched by Mirai botnet

Cloudflare has detected and mitigated a monsterous DDoS attack that peaked at almost 2Tbps.

---

DDoS attack takes yet another VoIP provider offline

Attacks against VoIP providers take another victim as Telnyx is hit.

---

Telnyx is the latest VoIP provider hit with DDoS attacks

Telnyx is the latest VoIP telephony provider targeted with distributed denial-of-service (DDoS) attacks, causing worldwide outages since yesterday. [...]

---

Critical Citrix DDoS Bug Shuts Down Network, Cloud App Access

The distributed computing vendor patched the flaw, affecting Citrix ADC and Gateway, along with another flaw impacting availability for SD-WAN appliances.

---

DDoS attack cost Bandwidth.com nearly $12 million

While the VoIP company still beat its earnings projections, the attack caused a $700,000 dent in revenue for Q3.

---

DDoS Attacks Shatter Records in Q3, Report Finds  

Q3 DDoS attacks topped thousands daily, with more growth expected.

---

Kaspersky Finds DDoS Attacks in Q3 Grow by 24%, Become More Sophisticated

The total number of smart attacks (advanced DDoS attacks that are often targeted) increased by 31% when compared to the same period last year.

---

Cloudflare report highlights devastating DDoS attacks on VoIP services and several 'record-setting HTTP attacks'

In Q3, Cloudflare researchers said they stopped "one of the largest recorded HTTP attacks​."

---

FBI: HelloKitty ransomware adds DDoS attacks to extortion tactics

The U.S. Federal Bureau of Investigation (FBI) has sent out a flash alert warning private industry partners that the HelloKitty ransomware gang (aka FiveHands) has added distributed denial-of-service (DDoS) attacks to their arsenal of extortion tactics. [...]

---

‘Professional cybercriminals’ blamed for DDoS attacks against UK telecoms providers

Packet in, says industry group

---

Digital Extortionists DDoS VoIP Providers

UK body warns of “unprecedented” attack campaign

---

KT clarifies routing error caused outage instead of DDoS attack

South Korea's IT ministry is still investigating what caused KT's nationwide outage of their network.

---