# DDoS A denial-of-service technique that uses numerous hosts to perform an attack. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## September 2026 Security Updates #1 for XCP-ng 8.3 LTS DevFeed: [September 2026 Security Updates #1 for XCP-ng 8.3 LTS]() Original publisher: [Read original article]() Author: David Morel Published: 2026-09-08T14:07:29Z Content type: article Language: en Sources: [XCP-ng Blog]() Topics: [Security](), [Vulnerabilities](), [DDoS](), [Memory Leaks]() Tags: [2026](), [cve](), [lts](), [maintenance-updates](), [memory-leak](), [release](), [security](), [september-2026](), [updates](), [vulnerabilities]() ### AI overview This article announces September 2026 security updates for XCP-ng 8.3 LTS. The fixes address vulnerabilities in Xen, oxenstored, and Tapdisk, including memory leaks, denial-of-service conditions, and out-of-bounds accesses that could allow code execution with administrator privileges in dom0. One Xen issue does not affect supported XCP-ng 8.3 LTS installations and is deferred for defense in depth. ### Source excerpt New security and maintenance updates are available for XCP-ng 8.3 LTS. This includes update to Xen, oxenstored and blktap. ## What part of 'No!' is so hard for the DNS understand? DevFeed: [What part of 'No!' is so hard for the DNS understand?]() Original publisher: [Read original article]() Author: Geoff Huston Published: 2026-09-04T01:06:30Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [servers](), [Caching](), [DDoS](), [Cybercrime](), [Availability](), [Bot](), [Script]() Tags: [apnic-labs](), [attacks](), [availability](), [bots](), [caching](), [ddos](), [dns](), [generate](), [measurement](), [random](), [server](), [servers](), [tech-matters]() ### AI overview The article explains how random name attacks overwhelm authoritative DNS servers by generating queries for nonexistent names, bypassing recursive resolver caches and potentially causing domain availability failures. It also describes APNIC Labs' measurement work on nonexistent-domain responses to improve DNS resilience. ### Source excerpt At APNIC Labs we've been experimenting with understanding how the DNS handles requests to resolve nonexistent names to make the DNS more resilient to random name attacks. ## Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave DevFeed: [Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave]() Original publisher: [Read original article]() Author: Cloudforce One Published: 2026-08-11T13:00:00Z Content type: article Language: en Sources: [Cloudflare Blog]() Topics: [DDoS](), [Cloudflare](), [Threat Research](), [Cloudforce One](), [Network](), [data](), [Cybercrime](), [High Profile Threats]() Tags: [analysis](), [attacks](), [cloudflare](), [cloudforce-one](), [data](), [ddos](), [dns](), [drive](), [global](), [government](), [industry](), [iran](), [media](), [network](), [radar](), [streaming](), [threat-report]() ### AI overview Cloudflare's H1 2026 DDoS Threat Report analyzes attacks from January through June 2026. It highlights a 519% quarter-over-quarter increase in attacks exceeding 1 Tbps, a shift toward DNS and CLDAP reflection and amplification vectors, and the influence of geopolitical events on attack patterns. The report also covers attack volumes, an April peak, and the possible impact of Operation PowerOFF. ### Source excerpt In the first half of 2026, Cloudflare detected a 519% surge in hyper-volumetric DDos attacks across its network. These attacks were driven heavily by DNS and CLDAP reflection vectors. This report breaks down how major geopolitical conflicts reshaped the global cyber threat landscape. ## Kimwolf v7: An Evolution of the Kimwolf Botnet DevFeed: [Kimwolf v7: An Evolution of the Kimwolf Botnet]() Original publisher: [Read original article]() Author: Asher Davila, Chris Navarrete and Doel Santos Published: 2026-08-11T10:00:16Z Content type: article Language: en Sources: [Unit 42]() Topics: [Kimwolf v7](), [Android](), [DDoS](), [Internet of things](), [C2](), [Ethereum Name Service (ENS)](), [Malware](), [Cybercrime](), [Ethereum](), [Blockchain](), [Routing (disambiguation)](), [Threat Hunting & Intel]() Tags: [android](), [android-apk](), [blockchain](), [c2](), [ddos](), [devices](), [ethereum](), [http](), [iot-botnets](), [kimwolf-v7](), [linux](), [malware](), [network](), [networks](), [resilience](), [routing](), [rpc](), [spoofing](), [threat-research]() ### AI overview Kimwolf v7 is an Android and IoT botnet variant that adds HTTP/2-based DDoS flooding with browser fingerprinting, Ethereum Name Service resolution for C2 addresses, and Tor-backed routing to improve infrastructure resilience. The article also describes its targeting of Android TV devices and exploitation of unauthenticated ADB instances. ### Source excerpt Discover how Kimwolf v7 targets Android IoT devices with HTTP/2 DDoS fingerprinting, Ethereum ENS C2 resolution and Tor backup routing. The post Kimwolf v7: An Evolution of the Kimwolf Botnet appeared first on Unit 42. ## New setup page after domain checkout DevFeed: [New setup page after domain checkout]() Original publisher: [Read original article]() Author: Can Temizyurek Published: 2026-08-05T17:00:00Z Content type: release Language: en Sources: [Vercel News]() Topics: [Vercel](), [Routing (disambiguation)](), [Caching](), [DDoS](), [Firewall](), [Amazon Route 53](), [Git](), [Template]() Tags: [cache](), [cdn](), [checkout](), [ddos](), [dns](), [firewall](), [git](), [google](), [routing](), [vercel]() ### AI overview Vercel has introduced a post-checkout setup page for domain purchases. It tracks registration status and provides guided actions for deploying or connecting projects, proxying or redirecting existing sites, and configuring email DNS records. ### Source excerpt Buying a domain on Vercel now takes you to a setup page that tracks registration live, with direct paths to deploy a new project, connect an existing one, proxy or redirect a site you already run, or set up email. Registration can take a few minutes. Each setup action unlocks as soon as the domain is ready. If registration fails, the page shows what went wrong and the status of your refund. Deploy a new project or connect an existing one Deploy something opens project creation with the domain preselected. Connect a Git repository, prompt with v0, or start from a template, and the domain is attached when the project deploys. Connect an existing project attaches the domain to a project you pick from your team. Proxy or redirect a site you already run Enter an origin to proxy traffic to, and requests to the domain route through Vercel's CDN. Vercel will cache applicable requests at the edge, and Vercel Firewall's automated DDoS protections will automatically run. Enter a URL to redirect, and visitors are forwarded there. In both cases, Vercel creates a project to handle the routing and configures it for you. Set up email with DNS presets Choose your email provider and Vercel adds the DNS records it needs. Presets are available for Google Workspace, Outlook, iCloud, Proton Mail, Zoho, Mailgun, and ImprovMX. There's also a preset for using the domain as your Bluesky handle. If you'd rather configure records yourself, Manage DNS records opens the domain's DNS records page. Search for a domain at vercel.com/domains to get started. Read more ## What Is Web App and API Protection (WAAP)? | Harness DevFeed: [What Is Web App and API Protection (WAAP)? | Harness]() Original publisher: [Read original article]() Author: Michael Isbitski Published: 2026-07-23T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [web applications](), [API](), [Security](), [Cybersecurity](), [Testing](), [DDoS](), [Bot]() Tags: [api](), [api-security](), [bots](), [ci-cd](), [cybersecurity](), [ddos](), [security](), [testing](), [web-app]() ### AI overview This Harness article explains Web Application and API Protection (WAAP) as a unified approach to securing web applications and APIs. It describes combining API discovery, testing, runtime protection, bot and abuse protection, and cloud-scale WAF capabilities, with integration into software delivery workflows. ### Source excerpt Discover how Harness Web Application and API Protection (WAAP) unifies web app and API security, testing, and runtime protection. Protect your apps, start today | Blog ## Analysis of Telegram IPv6 BGP announcements by Indian ISPs DevFeed: [Analysis of Telegram IPv6 BGP announcements by Indian ISPs]() Original publisher: [Read original article]() Published: 2026-06-17T23:52:47Z Content type: opinion Language: en Sources: [Personal blog of Anurag Bhatia]() Topics: [BGP](), [networking](), [DDoS]() Tags: [as135709](), [as152144](), [as45820](), [bgp](), [ddos](), [lightstorm](), [rfc7999](), [rtbh](), [telegram](), [ttsl]() ### AI overview The article examines unusual BGP announcements for Telegram IPv6 prefixes by several Indian ISPs after a reported Telegram prefix hijack. It proposes that existing BGP blackholing configurations may have been used to block Telegram traffic, while noting this is the author's interpretation. ### Source excerpt Since the Telegram's prefix hijack (4 days ago on 17-Jun-2026) by RCom, there is visible noise in the BGP routing table from multiple other Indian ISPs, including Tata Teleservices (AS45820) / Lightstorm (AS135709/AS152144), etc. mostly in IPv6. Let's look at 2a0a:f280::/48 (Live lookup here) Notice all the ASNs here largely seem to be downstreams or peers of AS45820 in India, no major large peer or upstream that would take this announcement outside of India. Similarly, take the case of aggregate - 2a0a:f280::/32. This has TTSL (AS45820) as well as Lightstrom (AS152144/135709) originating these prefixes to smaller peers. Analysis: Possible reason and impact of this behaviour Today I tested some config in lab to see why this could be happening. Here's what I strongly feel is happening (quite sure, unless someone has a better explanation): Indian Govt. has asked ISPs to block Telegram and unlike past blocks mostly at the DNS layer, ISPs have been asked to drop IPs as well. Technically in these cases ISPs could simply add a blackhole route and that would drop traffic going towards these prefixes (from their customers) and that would not be visible at BGP (control plane) but only in traceroutes (data plane). If any of these customers had a full routing feed from those respective ISPs, they would keep on learning Telegram's route with the correct/expected AS_PATH and expected origin AS. Very likely these players had blackhole config setup for the DDoS protection and ended up using the same i.e they are treating Telegram's IPv6 prefixes like they would treat their own when under attack. Also, blackholing is a common practice during DDoS attacks. Imagine a network with a 100G uplink gets hit by a 400G volumetric attack. It will take up all the link bandwidth and thus in these cases ISPs blackhole their own (or downstream) IPs (often small - single /32s or a few) and they signal this to their BGP adjacencies as well. There is a standard BGP blackhole community: 65535:666 as ## 360 billion tokens, 3 million customers, 6 engineers DevFeed: [360 billion tokens, 3 million customers, 6 engineers]() Original publisher: [Read original article]() Author: Eric Dodds Published: 2026-03-18T04:00:00Z Content type: article Language: en Sources: [Vercel News]() Topics: [Artificial Intelligence](), [Software as a service](), [hosting](), [SSL](), [Security](), [DDoS](), [Architecture & Design](), [observability]() Tags: [ai](), [ddos](), [hosting](), [observability](), [saas](), [security](), [self-hosting](), [ssl](), [vercel]() ### AI overview This developer case study describes Durable, an AI business builder serving about 1.1 billion tokens per day and 3 million customers with a six-engineer team. It explains how Durable consolidated its multi-tenant, multi-product infrastructure on Vercel to ship production agents quickly and reduce infrastructure costs compared with self-hosting. ### Source excerpt Impact at a glance Durable ships new production agents to customers in a single day AI features and agents serve ~1.1B tokens per day (360B per year) 10x leverage for every engineer, product manager, and designer 3-4x lower infra cost compared to self hosting Durable began with a simple goal: make owning a business easier than having a job. 60% of U.S. adults say they want to be their own boss, but only about 4% actually do it. Durable's bet is that the blocker isn't ambition. It's friction. "Small businesses are death by a thousand tools, logins, workflows, and designs," explained James Clift, founder of Durable. "If you remove those barriers, business owners can focus on their customers." Today, Durable is an AI business builder that helps entrepreneurs launch in minutes, then optimize with agents that handle things like SEO, content, and operations. The gap between idea and ownership has never been smaller. It feels like one seamless experience to their customers, but under the hood it's a multi-tenant, multi-product platform that has to run millions of individual businesses safely, reliably, and cost-effectively. As they scaled, manually operating multiple services just to self-host was enough work to be a second product. With a small team, Durable chose rapid consolidation over incremental improvement: one codebase, one infrastructure platform. Infra is hard; multi-tenant infra is harder Durable isn't serving one app. They are managing millions of customer sites, CRMs, and agents, each with different traffic patterns and different operational needs. One customer site might get 100x the traffic of another, and power laws show up quickly. When spikes happen, a small portion of Durable customers can consume a disproportionate share of compute, which made cost isolation, attribution, and pricing strategy significant engineering problems. Khan called out a few of the most acute pain-points from self-hosting: Custom domains and SSL at SaaS scale, including paying tho ## Cyber fallout from the Iran war: What to have on your radar DevFeed: [Cyber fallout from the Iran war: What to have on your radar]() Original publisher: [Read original article]() Author: Tomáš Foltýn Published: 2026-03-12T14:17:33Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Security & Privacy](), [Threat Research](), [cloud-infrastructure](), [Amazon Web Services (AWS)](), [DDoS](), [Reconnaissance]() Tags: [amazon-web-services-aws](), [business-security](), [canada](), [cloud](), [cybersecurity](), [ddos](), [iran](), [united-kingdom](), [us]() ### AI overview The article examines the cybersecurity fallout from the Iran war, including attacks on AWS data centers and the rapid mobilization of pro-Iranian cyber groups. It describes hacktivism, APT reconnaissance and initial access, espionage, disruption, sabotage, and the heightened risks to organizations with Middle East supply-chain or cloud dependencies. ### Source excerpt The cybersecurity implications of the war in the Middle East extend far beyond the region. Here's where to focus your defenses. ## Technology Short Take 190 DevFeed: [Technology Short Take 190]() Original publisher: [Read original article]() Author: Scott Lowe Published: 2026-02-06T13:00:00Z Content type: article Language: en Sources: [Scott's Weblog]() Topics: [networking](), [DDoS](), [Azure](), [Security](), [Windows](), [Cloud](), [Encryption](), [Git](), [Open Source](), [Terraform](), [Linux](), [macOS]() Tags: [2026](), [article](), [aws](), [azure](), [cilium](), [cli](), [cloud](), [cni](), [containers](), [cri-o](), [ddos](), [devops](), [docker](), [git](), [go](), [iac](), [k8s](), [kubernetes](), [linux](), [macos](), [markdown](), [networking](), [oci](), [open-source](), [security](), [technology](), [terraform](), [windows]() ### AI overview Technology Short Take 190 is a curated roundup of technical reading on networking, solar-storm effects on satellites, hardware, DDoS attacks against Microsoft Azure, Windows encryption, cloud management, Git tools, Terraform and OpenTofu, hosted email, Linux, macOS, and Markdown. ### Source excerpt Welcome to Technology Short Take #190! This is the first Tech Short Take of 2026, and it has been nearly three months (wow!) since the last one. I can't argue that I fell off the blogging bandwagon over the end of 2025 and early 2026. I won't get into all the reasons why (if you're interested then feel free to reach out and I'll fill you in). Enough about me--let's get to the technical content! Here's hoping you find something useful. Networking Here's a little something on the lighter side about what causes network outages. As the lead-in to this article on Starlink's performance during a solar superstorm says, "It's not science fiction." Solar storms can have a real impact on Earth, and satellites in low-Earth orbit (LEO) are not exempt from that impact. Servers/Hardware William Lam reviews the Mini PC and SFF (small form factor) hardware announcements from CES 2026. Security The scale of DDoS attacks continues to grow, as evidenced by this report of a 15 Tbps attack on Microsoft Azure. Microsoft having the ability to give away your Windows PC's data encryption key is horrifying. Cloud Computing/Cloud Management While doing some reading on Terragrunt, I also came across this open source tool for performing operations against multiple Git repositories. I don't have a use case for it, but it is cool! While on the topic of Terragrunt: let me say that I appreciate the work that went into their online docs! From what I've read so far, they are well-written, clear, concise, and informative. Well done! And while still on the topic of Terragrunt: it was this article from Axel Mendoza on why they use Terragrunt over Terraform/OpenTofu that sent me down the Terragrunt rabbit hole. The most recent installation of Ricardo Sueiras' AWS open source newsletter pointed me to a couple of tools that look really handy: s3sh (available from GitHub) and taws (also available from GitHub). Nick Buraglio has a great comparison of hosted email options. Operating Systems/Applications Howard ## Mitigating Denial-of-Service Vulnerability from Unrecoverable Stack Space Exhaustion for React, Next.js, and APM Users DevFeed: [Mitigating Denial-of-Service Vulnerability from Unrecoverable Stack Space Exhaustion for React, Next.js, and APM Users]() Original publisher: [Read original article]() Published: 2026-01-13T17:00:00Z Content type: article Language: en Sources: [Node.js Blog]() Topics: [Node.js](), [vulnerability](), [DDoS](), [Next.js](), [React](), [Application Performance Management (APM)](), [Availability](), [JavaScript]() Tags: [apm](), [availability](), [javascript](), [next-js](), [node-js](), [react](), [security](), [vulnerability]() ### AI overview Node.js describes a denial-of-service vulnerability in which stack space exhaustion can cause an immediate, uncatchable process exit when async hooks are enabled. The issue affects applications using React Server Components, Next.js request-context tracking, and APM instrumentation. A January 2026 Node.js security release adds a mitigation, while applications and frameworks should adopt stronger defenses such as limiting attacker-controlled recursion. ### Source excerpt Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts. ## Oracle zero-day vulnerability for sale DevFeed: [Oracle zero-day vulnerability for sale]() Original publisher: [Read original article]() Published: 2025-09-17T22:00:00Z Content type: opinion Language: en Sources: [Dennis Yurichev]() Topics: [vulnerability](), [Exploit](), [DDoS]() Tags: [exploit](), [rdbms](), [vulnerability]() ### AI overview The author describes a zero-day vulnerability in Oracle RDBMS that can make a remote database hang or freeze, characterizing it as a denial-of-service issue without access to remote data. The author says they are considering selling a proof of concept or exploit. ### Source excerpt Oracle zero-day vulnerability for sale ## Wednesday, May 14, 2025 Security Releases DevFeed: [Wednesday, May 14, 2025 Security Releases]() Original publisher: [Read original article]() Published: 2025-05-14T03:00:00Z Content type: release Language: en Sources: [Node.js Blog]() Topics: [Node.js](), [releases](), [Security](), [vulnerability](), [Memory Leaks](), [DDoS](), [Parser](), [Windows]() Tags: [2025](), [http](), [memory](), [node](), [node-js](), [open-source](), [release](), [releases](), [security](), [vulnerability](), [windows]() ### AI overview The Node.js Project announced security releases for the 24.x, 23.x, 22.x, and 20.x release lines on May 14, 2025. The updates address vulnerabilities involving cryptographic operations in background threads, HTTP request smuggling in Node.js 20, and an unrecoverable memory leak affecting specific Windows configurations. ### Source excerpt Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts. ## Laravel Cloud is live! Can you ship in 1 minute? DevFeed: [Laravel Cloud is live! Can you ship in 1 minute?]() Original publisher: [Read original article]() Author: Sam Published: 2025-02-21T21:26:00Z Content type: article Language: en Sources: [Laravel Blog]() Topics: [Cloud](), [Laravel](), [Livewire](), [autoscaling](), [React](), [VS Code Extension](), [Vue.js](), [Caching](), [Databases](), [DDoS](), [Authentication](), [SSL]() Tags: [authentication](), [autoscaling](), [caching](), [cloud](), [databases](), [ddos](), [extension](), [laravel](), [react](), [ssl](), [sso](), [tailwind](), [vs-code](), [vue]() ### AI overview Laravel announces Laravel Cloud, new Starter Kits for React, Vue, and Livewire, a stable VS Code Extension, and Laravel 12. Laravel Cloud supports rapid deployment with autoscaling, hibernation, managed databases, caching, storage, DDoS protection, SSL, CDN, and edge caching. ### Source excerpt Today we shipped Laravel Cloud, Starter Kits (React, Vue, & Livewire), VS Code Extension, and Laravel 12. ## Securing APIs: Express rate limit and slow down DevFeed: [Securing APIs: Express rate limit and slow down]() Original publisher: [Read original article]() Author: vultr Published: 2024-05-28T00:00:00Z Content type: tutorial Language: en Sources: [MDN Blog]() Topics: [Express](), [Security](), [Node.js](), [web applications](), [DDoS](), [Firewall](), [Bash](), [ssh](), [HTML](), [JavaScript]() Tags: [bash](), [ddos](), [firewall](), [guide](), [how-to](), [node-js](), [security](), [ssh](), [web-applications]() ### AI overview This tutorial explains how to secure Express applications by implementing rate limiting and slow-down mechanisms. It covers deploying an application on a server, configuring firewall access, and using these controls to improve resilience, scalability, security, and service reliability. ### Source excerpt This guide introduces you to rate limits and slow down mechanisms. Learn how to apply slow down and rate limit mechanisms in Express applications. ## Exploiting HTTP/2 CONTINUATION frames for DoS attacks DevFeed: [Exploiting HTTP/2 CONTINUATION frames for DoS attacks]() Original publisher: [Read original article]() Author: Vandana Verma Sehgal Published: 2024-04-08T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [HTTP](), [vulnerability](), [DDoS](), [servers](), [web applications](), [Go Language](), [Node.js]() Tags: [attacks](), [awareness](), [blog](), [code-security](), [developer](), [devops](), [devrel](), [enablement](), [engineering](), [go](), [http](), [http-server](), [internet-traffic](), [js](), [monitor](), [node-js](), [open-source-security](), [performance](), [security](), [server](), [snyk-open-source](), [snyk-platform](), [vulnerability](), [vulnerability-insights]() ### AI overview This article explains a vulnerability in HTTP/2 implementations that lets attackers flood a single stream with excessive CONTINUATION frames, potentially overwhelming or crashing web servers. It describes the affected ecosystem, including Node.js and Go, and recommends patching, rate limiting, traffic monitoring, and temporarily disabling HTTP/2 when no patch is available. ### Source excerpt This post covers all the info you need on the new HTTP/2 CONTINUATION frames vulnerability, including the affected versions, its impact, mitigation steps, and how to protect your applications. ## Chainguard patches 3 "silent" Golang CVEs in under 24 hours DevFeed: [Chainguard patches 3 "silent" Golang CVEs in under 24 hours]() Original publisher: [Read original article]() Published: 2024-03-21T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Vulnerabilities](), [Go](), [chainguard images](), [Security](), [Automation](), [toolchain](), [DDoS](), [Monitoring](), [Open Source](), [Pull Request](), [Linux]() Tags: [automation](), [chainguard](), [chainguard-images](), [cve](), [cves](), [ddos](), [github](), [go](), [golang](), [golang-patch](), [linux](), [melange](), [merge](), [monitoring](), [safe-source-for-open-source](), [security](), [silent-cve](), [tooling](), [wolfi]() ### AI overview Chainguard describes how it patched three Golang CVEs in under 24 hours. Its automation monitored new Go releases, opened a pull request, rebuilt the Wolfi package, and updated Chainguard Images containing Go. ### Source excerpt See how Chainguard swiftly patched three Golang CVEs in under 24 hours, showcasing rapid response and dedication to secure software. ## How IX.BR Automates Quarantine LAN Testing DevFeed: [How IX.BR Automates Quarantine LAN Testing]() Original publisher: [Read original article]() Author: ben@benjojo.co.uk Published: 2024-02-01T11:27:29Z Content type: article Language: en Sources: [benjojo blog]() Topics: [Network](), [Ethernet](), [Internet Traffic](), [DDoS](), [proxy](), [Testing]() Tags: [arp](), [bgp](), [ethernet](), [internet](), [internet-traffic](), [lan](), [proxy](), [tests]() ### AI overview The article describes IX.BR São Paulo's automated quarantine LAN testing portal for internet exchange participants. It explains why quarantine testing matters, including the risks of Ethernet loops, management frames, and Proxy ARP on a shared Layer 2 exchange LAN. ### Source excerpt Appreciation of automated IX Quarantine LAN testing Something that bgp.tools (my company) does a great deal is joining internet exchanges. ## Where Fediverse Instances Are Hosted DevFeed: [Where Fediverse Instances Are Hosted]() Original publisher: [Read original article]() Author: ben@benjojo.co.uk Published: 2024-01-12T12:34:50Z Content type: article Language: en Sources: [benjojo blog]() Topics: [Fediverse](), [ActivityPub](), [Mastodon](), [BGP](), [hosting](), [DDoS](), [proxy](), [Server](), [Cloudflare](), [Digital Ocean](), [HTTP]() Tags: [bgp](), [cdn](), [cloudflare](), [ddos](), [digitalocean](), [fediverse](), [http](), [mastodon](), [network](), [social-media]() ### AI overview An investigation examines where Fediverse instances are hosted by discovering Mastodon peers, resolving their DNS records, mapping them to autonomous systems, and comparing hosting providers. It finds that proxy CDN providers can obscure the underlying hosts, so the analysis explores using ActivityPub requests to identify actual hosting infrastructure. ### Source excerpt Where is all of the fediverse? Spurred on by the problems at Twitter, a lot of my social media timeline has "moved out" of Twitter/"X" on to what people mostly describe as mastodon or ## Find and fix HTTP/2 rapid reset zero-day vulnerability CVE-2023-44487 DevFeed: [Find and fix HTTP/2 rapid reset zero-day vulnerability CVE-2023-44487]() Original publisher: [Read original article]() Author: Jamie Smith; Kriti Dogra; Anthony Larkin Published: 2023-10-11T23:00:00Z Content type: tutorial Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [HTTP](), [vulnerability](), [DDoS](), [Cloudflare](), [nginx]() Tags: [acquisition](), [attacks](), [aws](), [azure](), [blog](), [cloudflare](), [configuration](), [container-images](), [cve](), [ddos](), [developer](), [http](), [nginx](), [pmm](), [security](), [snyk-container](), [snyk-open-source](), [vulnerability](), [vulnerability-insights]() ### AI overview This article explains the HTTP/2 Rapid Reset vulnerability, tracked as CVE-2023-44487, which can enable large volumetric DDoS attacks against web servers implementing HTTP/2. It recommends mitigating exposure through infrastructure providers and CDNs, then upgrading affected packages and checking container images and open source ecosystems for remediated versions. ### Source excerpt Learn how to find and fix the HTTP/2 rapid reset vulnerability (CVE-2023-44487) that has been designated a High severity vulnerability with a CVSS score of 7.5 (out of 10). ## Apollo Changelog: May 5, 2023 DevFeed: [Apollo Changelog: May 5, 2023]() Original publisher: [Read original article]() Author: Dylan Anthony Published: 2023-05-05T17:34:27Z Content type: release Language: en Sources: [Apollo Blog]() Topics: [changelog](), [GraphQL](), [releases](), [gateway](), [DDoS](), [apollo-client](), [apollo-server](), [iOS](), [Kotlin]() Tags: [apollo](), [apollo-client](), [attacks](), [bug](), [bug-fixes](), [changelog](), [community](), [gateway](), [graphql](), [improvements](), [ios](), [kotlin](), [preview](), [releases]() ### AI overview Apollo's May 5, 2023 changelog covers three Apollo Router releases, including a preview operation-limits feature for Enterprise users. It also discusses Reddit's move from a gateway to federation, Apollo office hours, product updates, and a community spotlight. ### Source excerpt Rapid router releases Since the last changelog, three new versions of Apollo Router have been released! We can't cover all the changes here, so check out the release notes for more details. One exciting addition is a new preview feature for Enterprise users: operation limits. You can now configure your router to reject queries exceeding certain complexity metrics. ## How Linear made the most of a DDoS DevFeed: [How Linear made the most of a DDoS]() Original publisher: [Read original article]() Author: Carly Ayres Published: 2022-12-15T00:00:00Z Content type: article Language: en Sources: [Figma Blog]() Topics: [DDoS](), [Figma](), [incident](), [Internet Traffic](), [Software](), [App]() Tags: [app](), [ddos](), [design](), [figma](), [incident](), [internet-traffic](), [reports](), [software]() ### AI overview The article describes how Linear responded to a DDoS attack that took down its homepage on October 13, 2022. The team restored access to the app through the login page and then used Figma designs to create a replacement homepage, turning the incident into an opportunity to showcase the redesign and reflect on the process. ### Source excerpt On a good day, the Linear team helps companies build better software by streamlining issue tracking and project management. When they're not doing that, they're trying to get back to doing that as quickly as possible. ## Stuff The Internet Says On Scalability For December 2nd, 2022 DevFeed: [Stuff The Internet Says On Scalability For December 2nd, 2022]() Original publisher: [Read original article]() Author: High Scalability Published: 2022-12-02T17:08:30Z Content type: article Language: en Sources: [High Scalability]() Topics: [Scalability](), [Cloud](), [API](), [AWS Lambda](), [Caching](), [DDoS](), [Memory Safety](), [ibm]() Tags: [api](), [aws-lambda](), [caching](), [cloud](), [ddos](), [hot-links](), [memory-safety](), [scalability]() ### AI overview A December 2, 2022 HighScalability roundup collects statistics and observations about internet-scale systems, including GraphQL traffic, AWS Lambda usage, cloud migrations, caching, edge latency, DDoS mitigation, and memory safety. ### Source excerpt Never fear, HighScalability is here! 1958: An engineer wiring an early IBM computer 2021: An engineer wiring an early IBM quantum computer. @enclanglement My Stuff: I'm proud to announce a completely updated and expanded version of Explain the Cloud Like I'm 10! This version adds 2x ## Our approach to security at speed DevFeed: [Our approach to security at speed]() Original publisher: [Read original article]() Author: Greg Guthe Published: 2022-10-13T00:00:00Z Content type: article Language: en Sources: [Figma Blog]() Topics: [Security](), [Cloud](), [vulnerability](), [DDoS](), [Server]() Tags: [attacks](), [cloud](), [cloud-native](), [development](), [figma](), [security](), [vulnerability]() ### AI overview Figma describes a security operating model designed to help teams ship products quickly while managing risks through transparency, reusable solutions, office hours, and early review of product workflows. The article uses rich preview links as an example, covering SSRF, denial-of-service, malicious HTML, and isolating link-scraping code in a cloud function. ### Source excerpt Learn about how the Figma security team helps us ship products securely, without impacting the pace of development. [Next page]()