Somewhere in your traffic logs, a bot is doing more than looking 2026-09-22 at 13:30 By Mirko Zorz Akamai has watched verified AI crawlers, ChatGPT among them, move from reading web pages to sending high-frequency POST requests. In a 30-day analysis of its global customers, ecommerce accounted for 44.8% of those AI bot POST transactions, […]
Somewhere in your traffic logs, a bot is doing more than looking Read More »
KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066) 2026-08-03 at 14:42 By Zeljka Zorz A critical security vulnerability (CVE-2026-66066) in Ruby on Rails (aka Rails), one of the most widely used frameworks for building websites and web apps, may allow attackers to read sensitive files off a server and, in some cases, take full control of […]
KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066) Read More »
Akamai to acquire LayerX for $205 million 2026-05-15 at 14:32 By Industry News Akamai has entered into a definitive agreement to acquire LayerX, a provider of browser-based AI usage control and secure enterprise browser (SEB) technology. LayerX’s solutions will extend Akamai’s protection into the browser, where the majority of enterprise tasks now occur and where […]
Akamai to acquire LayerX for $205 million Read More »
Akamai to Acquire AI and Browser Security Firm LayerX for $205 Million 2026-05-14 at 18:25 By Eduard Kovacs The acquisition enables Akamai to expand its Zero Trust portfolio to add protection directly into the browser. The post Akamai to Acquire AI and Browser Security Firm LayerX for $205 Million appeared first on SecurityWeek. This article […]
Akamai to Acquire AI and Browser Security Firm LayerX for $205 Million Read More »
New Mirai variants target routers and DVRs in parallel campaigns 2026-04-22 at 16:42 By Zeljka Zorz Hidden inside newly discovered botnet malware is an unusual message from its creator: “AI.NEEDS.TO.DIE”. Dubbed “tuxnokill” by researchers at Akamai, the malware is one of two fresh Mirai botnet variants documented this month by major cybersecurity firms and, judging […]
New Mirai variants target routers and DVRs in parallel campaigns Read More »
Akamai Brand Guardian detects and removes AI-driven brand impersonation 2026-03-25 at 13:47 By Industry News Akamai has introduced Akamai Brand Guardian, an evolution of Brand Protector that uses AI to identify and manage brand impersonation at scale. Scammers are exploiting the widespread availability of generative AI to deploy sophisticated fake websites and digital identities in […]
Akamai Brand Guardian detects and removes AI-driven brand impersonation Read More »
Your APIs are under siege, and attackers are just getting warmed up 2026-03-19 at 07:21 By Anamarija Pogorelec Internet-facing systems are handling sustained levels of malicious traffic across APIs, web applications, and DDoS channels. Akamai’s State of the Internet security report places these patterns within the same operating environment, with activity increasing across each area […]
Your APIs are under siege, and attackers are just getting warmed up Read More »
Ransomware’s new playbook is chaos 2025-12-31 at 07:07 By Anamarija Pogorelec Ransomware threats are accelerating in scale, sophistication, and impact. Data reveals how evolving techniques, shifting payment trends, and AI-driven capabilities are reshaping the threat landscape, and raising the stakes for every organization. The weekend is prime time for ransomware Over half of organizations that […]
Ransomware’s new playbook is chaos Read More »
Microsoft fixes “BadSuccessor” Kerberos vulnerability (CVE-2025-53779) 2025-08-13 at 15:20 By Zeljka Zorz For August 2025 Patch Tuesday, Microsoft has released security updates resolving 100+ security vulnerabilities in its various solutions, including a relative path traversal flaw in Windows Kerberos (CVE-2025-53779) that allows an authorized attacker to elevate privileges over a network as part of a […]
Microsoft fixes “BadSuccessor” Kerberos vulnerability (CVE-2025-53779) Read More »
New HTTP Request Smuggling Attacks Impacted CDNs, Major Orgs, Millions of Websites 2025-08-07 at 12:46 By Eduard Kovacs A desync attack method leveraging HTTP/1.1 vulnerabilities impacted many websites and earned researchers more than $200,000 in bug bounties. The post New HTTP Request Smuggling Attacks Impacted CDNs, Major Orgs, Millions of Websites appeared first on SecurityWeek. […]
New HTTP Request Smuggling Attacks Impacted CDNs, Major Orgs, Millions of Websites Read More »
Ransomware groups shift to quadruple extortion to maximize pressure 2025-08-05 at 07:33 By Help Net Security Threat actors are using a new quadruple extortion tactic in ransomware campaigns, while double extortion remains the most common approach, according to Akamai. Ransomware extortion tactics (Source: Akamai) The emerging trend of quadruple extortion includes using DDoS attacks to […]
Ransomware groups shift to quadruple extortion to maximize pressure Read More »
Infosec products of the month: June 2025 2025-06-27 at 07:01 By Sinisa Markovic Here’s a look at the most interesting products from the past month, featuring releases from: Akamai, AttackIQ, Barracuda Networks, BigID, Bitdefender, Contrast Security, Cymulate, Dashlane, Embed Security, Fortanix, Fortinet, Jumio, Lemony, Malwarebytes, SpecterOps, StackHawk, Stellar Cyber, Sumsub, Thales, Tines, Vanta, and Varonis. […]
Infosec products of the month: June 2025 Read More »
Microsoft fixes zero-day exploited for cyber espionage (CVE-2025-33053) 2025-06-11 at 14:16 By Zeljka Zorz For June 2025 Patch Tuesday, Microsoft has fixed 66 new CVEs, including a zero-day exploited in the wild (CVE-2025-33053). Also, Adobe Commerce and Magento Open Source users are urged to update quickly. About CVE-2025-33053 CVE-2025-33053 is a remote code execution vulnerability […]
Microsoft fixes zero-day exploited for cyber espionage (CVE-2025-33053) Read More »
Unpatched Wazuh servers targeted by Mirai botnets (CVE-2025-24016) 2025-06-10 at 13:31 By Zeljka Zorz Two Mirai botnets are exploiting a critical remote code execution vulnerability (CVE-2025-24016) in the open-source Wazuh XDR/SIEM platform, Akamai researchers have warned. What is Wazuh? Wazuh is a popular open-source security information and event management (SIEM) and extended detection and response […]
Unpatched Wazuh servers targeted by Mirai botnets (CVE-2025-24016) Read More »
New infosec products of the week: June 6, 2025 2025-06-06 at 07:01 By Sinisa Markovic Here’s a look at the most interesting products from the past week, featuring releases from Akamai, AttackIQ, Barracuda Networks, Bitdefender, Fortinet, Malwarebytes, and Varonis. Bitdefender unifies security, risk management, and compliance in a single platform Bitdefender announced GravityZone Compliance Manager, […]
New infosec products of the week: June 6, 2025 Read More »
Akamai launches DNS Posture Management for real-time monitoring and guided remediation 2025-06-03 at 14:16 By Industry News Akamai Technologies has introduced Akamai DNS Posture Management, a solution that offers unified, multicloud visibility over all DNS assets. The agentless solution provides real-time monitoring and guided remediation across all major DNS providers. Security teams can quickly detect […]
Akamai launches DNS Posture Management for real-time monitoring and guided remediation Read More »
Akamai, Microsoft Disagree on Severity of Unpatched ‘BadSuccessor’ Flaw 2025-05-22 at 20:08 By Ryan Naraine Akamai documents a privilege escalation flaw in Windows Server 2025 after Redmond declines to ship an immediate patch. The post Akamai, Microsoft Disagree on Severity of Unpatched ‘BadSuccessor’ Flaw appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
Akamai, Microsoft Disagree on Severity of Unpatched ‘BadSuccessor’ Flaw Read More »
Unpatched Windows Server vulnerability allows full domain compromise 2025-05-22 at 18:45 By Zeljka Zorz A privilege escalation vulnerability in Windows Server 2025 can be used by attackers to compromise any user in Active Directory (AD), including Domain Admins. “The [“BadSuccessor”] attack exploits the delegated Managed Service Account (dMSA) feature that was introduced in Windows Server […]
Unpatched Windows Server vulnerability allows full domain compromise Read More »
Photos: RSAC 2025, part 2 2025-05-01 at 16:31 By Help Net Security RSAC 2025 Conference is taking place at the Moscone Center in San Francisco. Help Net Security is on-site, and this gallery takes you inside the event. The first gallery is here. The featured vendors are: Tines, Thales, Sumo Logic, N-able, Google, ExtraHop, Cy4Data […]
Photos: RSAC 2025, part 2 Read More »
Akamai boosts WAF protections across multiple environments 2025-04-09 at 15:24 By Industry News Akamai introduced App & API Protector Hybrid. Users can now expand the critical web application firewall (WAF) capabilities of Akamai’s web application and API protection (WAAP) while consistently securing applications and APIs for multicloud, on-premises, and CDN-agnostic environments. Security leaders are increasingly tasked with […]
Akamai boosts WAF protections across multiple environments Read More »