Welcome to InfoRiskToday’s DDoS Resource Center!

The latest news, views and education about distributed-denial-of-service attacks. New, sophisticated DDoS attacks have increased throughout the world, and security experts predict this trend will continue. Use this DDoS Resource Center for the latest information on detection, mitigation, incident response and ongoing risk management.

DNS Flaw Can Be Exploited for DDoS Attacks

Akshaya Asokan • May 7, 2021

Security researchers have uncovered a flaw dubbed TsuNAME in DNS resolver software that attackers could used to carry out distributed denial-of-service attacks against authoritative DNS servers. Google and Cisco have resolved the issue in their DNS servers.

Fraud Management & Cybercrime

The Power of Actionable Threat Intel

Latest

DDoS Protection

Plex Media Servers Used to Amplify DDoS Threats

Akshaya Asokan • February 6, 2021

Researchers with NetScout are warning that attackers are abusing certain versions of the Plex media server app to strengthen and amplify DDoS attacks. The FBI has also warned about increases in DDoS attacks that use these types of amplification techniques.

Governance & Risk Management

Switching Away from Paper Documents for Good

Information Security Media Group • April 1, 2021

Replacing paper documents with an electronic version is one of the many tasks you may be facing as part of the remote work transformation.

DevSecOps

OnDemand Webinar | Security Education for Developers

Information Security Media Group • March 12, 2021

Watch this episode of the "On The Road to DevSecOps" series to learn from a group of DevOps experts on why AppSec Awareness and Training matters and how to give your developers secure coding education that works.

DevSecOps

OnDemand Webinar | Public Sector Digital Transformation and Secure Software

Information Security Media Group • March 12, 2021

Software is at the center of it all, placing increased pressure on developers, security managers, and DevOps leaders to develop applications faster. However, this need for speed comes at a price, and security can be seen as a blocker and not an enabler. Watch this webinar to understand why it's time to prioritize your...

Next-Generation Technologies & Secure Development

On Demand Webinar | How to Effectively Manage the Modern Risks of Open-Source Code

Information Security Media Group • March 11, 2021

Watch this webinar to learn how to identify open source with confidence, minimize risk, prioritize remediation when issues arise & more.

Security Operations

ROI Case Study - Nucleus Research: European Financial Services Institution

Information Security Media Group • March 11, 2021

Application Security

Security Labs: A Boost for Software Development Training

Tom Field • March 9, 2021

Traditionally, software development training falls short on security. And as enterprises embrace the “shift left” movement, that gap puts them at risk. Veracode’s Dave Ferguson discusses the gap and how Veracode’s new Security Labs was developed to fill it.

Next-Generation Technologies & Secure Development

What a Modern Threat Intelligence Program Should Be

Tom Field • March 2, 2021

Many enterprises have what they consider to be mature threat intelligence programs. Yet they continue to be breached. Where is the disconnect? Gene Yoo, CEO of Resecurity, describes what’s wrong with TI programs today, as well as the essential elements of a modern threat intelligence program.

Fraud Management & Cybercrime

Ransomware: How to Regain Lost Ground

Tom Field • February 25, 2021

Amid a surge in destructive ransomware attacks, Datto CISO Ryan Weeks says we “are losing ground” to the adversaries. He offers insight from a new Global Ransomware Report and the start of a multisector Ransomware Task Force.

Identity & Access Management

OnDemand Webinar: 2021 State of Physical Access Control

February 24, 2021

Watch this OnDemand webinar to learn more about the data uncovered during this unprecedented year and how organizations are seeking to implement and extend modern security capabilities.

Critical Infrastructure Security

Ukraine Blames Russia for DDoS Attack on Defense Websites

Prajeet Nair • February 23, 2021

The National Security and Defense Council of Ukraine accuses Russia of turning Ukrainian government servers into a botnet for massive distributed denial-of-service attacks that then caused the servers to be blocked.

Finance & Banking

Human Challenge: Hard For Humans, Easy For Bots

Information Security Media Group • February 18, 2021

Listen to this podcast to learn how a leading cybersecurity company is combating bad bots and making web apps’ user experience easier using Human Challenge.