Cloud-native and other service-based architectures have many advantages, and many organizations are adopting them. As a result, new RESTful web services and other API-based services are continually appearing. Unfortunately, as APIs evolve, so do their potential attack surfaces. Developers are often preoccupied with rigorous delivery schedules, so it is easy for newly-created vulnerabilities to go unnoticed. Meanwhile, hackers focus on finding opportunities for abuse that the developers hadn’t anticipated. In this environment, robust API protection is vital.

Modern threat actors use a variety of sophisticated tactics to wage ATO attacks. Reblaze (now part of Link11) protects against them all: it prevents credential theft, credential discovery, session attacks, and the abuse of valid credentials.

Some of the main benefits:
  • Prevents:
    • Account Abuse
    • Session Attacks
    • Credential Discovery
    • Abuse of Valid Credentials
  • Complete Account Security
  • Eliminates Man-in-the-Middle (MITM)

In this white paper, we’ll discuss ways to reduce security-related costs, while at the same time achieving a more robust security posture. Some of the tactics discussed in this white paper apply to any architecture, whether cloud, hybrid, or traditional datacenter. Others apply specifically to cloud architectures. In particular, organizations using the public cloud to host their sites, apps, and services can expect significant financial benefits when using a web security solution running in the same VPC and using the same CDN.

The security specialists at Link11 have summarized the developments in DDoS attacks for the 1st half of 2021 in a report. The extensive figures and analyses from network monitoring provide an up-to-date picture of the threat landscape: characterized by high-volume attacks, heavy abuse of cloud servers, and ongoing DDoS extortions campaigns. Multi-vector attacks, which target various vulnerabilities in the IT infrastructure, also posed a growing threat in the first half of the year.

Download the Link11 report for in-depth data and assessments on DDoS attacks:

  • The DDoS Threat Situation in key figures
  • Trends in quality and quantity of attacks
  • Developments in amplification-reflection attacks and cloud DDoS attacks

Arvato Systems harnessed Link11 Cloud Security on Platform Equinix®, eliminating DDoS cyberattacks via a redundant network and security infrastructure.

Arvato Systems serves the IT needs of both internal and external customers. It offers solutions for multiple industries such as retail/e-commerce, media, healthcare and utilities. Given the increase in volume and complexity of distributed denial of service (DDoS) attacks, the company needed to scale the mitigation capacity of its data center and security architecture. Harnessing Link11’s cloud-native DDoS protection service on Platform Equinix ensured that only “clean traffic” reached Arvato Systems’Systems’ and its customers’ networks.

Equinix and Link11 helped Arvato Systems significantly expand the scalability and reliability of its DDoS cybersecurity infrastructure for its internal users and external customers while gaining high- performance, low-latency connectivity to multiple service providers. This solution provided Arvato Systems with benefits like eliminated system failures, doubled internet bandwidth capacity, increased system capacity, and greater network and system resiliency.

The digital acceleration resulting from global pandemic lockdowns dramatically changed the threat situation for DDoS attacks. In Link11’s DDoS Report, the firm’s security experts summarize the new DDoS threats that companies were confronted with. More and broader attack surfaces attracted both high-volume and multi-vector attacks. In addition, DDoS attackers often extorted companies dependent on online services and availability.

Download the Link11 DDoS Report 2020 for in-depth data and insight on:
  • Attack parameters
  • The quality and quantity of attacks
  • New DDoS vectors
  • Industries in the crosshairs of DDoS attacks

The European Court of Justice has declared the Privacy Shield agreement with the USA invalid. This means the previously common practice of exporting data is no longer legal in many cases. Transferring personal data to a country outside the EU is now only permitted if the destination country guarantees equivalent data protection to the EU GDPR. This requirement was not met by the USA or other insecure third countries, which is why the “EU Privacy Shield” was invalidated by the ECJ in the “Schrems II” case.

The white paper uses the example of IT security to analyse the impact of this decision on the deployment of non-EU service providers. Many companies use software solutions and “as-a-service” offerings from larger, more established providers from the USA to defend against cyberattacks or load handling via a Content Delivery Network (CDN). In this cooperation, personal data of suppliers or business partners, for example, may be stored on servers outside the EU.

Data protection officers and IT teams in companies must quickly find solutions to these data protection problems. There is a need for immediate action. If not, there is the threat of fines.

Online shopping is booming worldwide in times of COVID-19 lockdowns, and it looks like the upcoming Valentine’s Day will provide another sales boost. In times of #stayathome, many users searching for flowers, sweets, or jewelry seem to rely on online shopping even more than last year. The infographic shows what a billion-dollar market Valentine’s Day has become and the momentum with which online retail is growing.

The numbers also demonstrate it’s not just the e-commerce industry in full swing; cybercrime is also on the rise. There is a great danger for web shops, from DDoS attacks to malware to bad bots, as revenues can be lost or customers can become dissatisfied. Online store operators and their hosting providers should take the threat of cyber attacks seriously and implement preventive measures.

The gaming industry and e-commerce sectors are the most frequent targets of DDoS attacks. This is partly due to the fact that, today, even non-experts can launch an attack. By blocking other players from accessing the gaming platform or lowering connection speeds, attackers can gain a competitive advantage. In many games, quick response times are essential for the flow of the game and the players’ enjoyment – for example, in sports or first-person shooter games. Often, the attacker takes the entire game offline.

The infrastructure operators of large gaming providers are investing in DDoS protection solutions to handle load peaks caused by threats such as DDoS attacks. Information about server outages spreads quickly across social platforms. So do complaints about lags, disconnects, loading hangs, or maintenance windows.

Since the start of the Covid-19 pandemic, gamers have been spending significantly more time at their consoles or on other gaming devices. They expect their gaming network to always be available. Furthermore, not only the amount of time spent gaming, but also the amount of money spent on it has skyrocketed during the pandemic. The UK market, for example, is expected to grow by almost 13% in 2021, and experts predict a financial turnover of $6,148 million. Though the market is massive, gaming providers are still under great competitive pressure. A platform failure can lead to huge losses. Against this background, taking security precautions to prevent cyberattacks becomes even more important.