Top resources for Cybersecurity Awareness Month
Summary: Cisco Talos reported that attackers exploited CVE-2023-44487, a vulnerability in the HTTP/2 protocol's handling of request cancellations, to launch DDoS attacks, including one Google recorded at over 398 million requests per second in August. The newsletter also noted that attackers published personal information of almost one million people with Ashkenazi Jewish heritage after breaching genetic testing service 23andMe, and that Microsoft patched more than 100 vulnerabilities including two exploited zero-days while Apple fixed two critical iOS flaws exploited in the wild.
What's compelling: Google called the August attack more than seven times larger than any DDoS it had recorded, and Talos warned that a larger botnet could produce traffic orders of magnitude greater, so the question is whether your DDoS mitigation is sized for that multiplier rather than the last attack you saw.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2023-42724CVE-2023-44487
- Related
- Patch Tuesday, October 2023 Edition Cyber Risks ·CVE-2023-44487: HTTP/2 Rapid Reset Attack Vulnerability Known Exploited Vulnerabilities · Oct 10, 2023