I've seen a real uptick in the past couple of days in attacks on my IP address space. Not sure if I'm being targeted, or part of a wider campaign. Oh well, fail2ban makes quick work of them

It’s been one of those weeks, including a thread of #IT #cluelessness and tomfoolery. Sure, reduce the rate limit for all #API users to one call every five minutes, because you have some unapproved bad actors executing a #DDoS. You know you can rate limit by user, but why bother?

I did eventually remind them they re-enabled any random user to create their own API #token. They seemed honestly surprised. Which made it all the more sad. Emperor, please put your clothes back on.

Devs say AI crawlers dominate traffic, forcing blocks on entire countries - Software developer Xe Iaso reached a breaking point earlier this year when... - https://arstechnica.com/ai/2025/03/devs-say-ai-crawlers-dominate-traffic-forcing-blocks-on-entire-countries/ #machinelearning #biz⁢ #ddos #ai

Who could have guessed that an industry whose entire business model is based on theft would behave like malware attacks on the Internet?

https://arstechnica.com/ai/2025/03/devs-say-ai-crawlers-dominate-traffic-forcing-blocks-on-entire-countries/?utm_source=mastodon&utm_medium=social

FOSS infrastructure is under attack by AI companies.

https://thelibre.news/foss-infrastructure-is-under-attack-by-ai-companies/

LLM scrapers are taking down FOSS projects' infrastructure, and it's getting worse.

Artificial intelligence companies are creating incredibly large scale denial of service situations on the infrastructure of Open Source Networks.

Now Network owners need to waste time on Finding ways of sending All These requests of the rogue AI insects to /dev/null

@altbot

#DDoS #DenialOfService #AI #LLM #KDE #crawler #programming #Alibaba #IP #FOSS #attack #OpenSource

https://thelibre.news/foss-infrastructure-is-under-attack-by-ai-companies/

Latest issue of my curated #cybersecurity and #infosec list of resources for week #11/2025 is out!

It includes the following and much more:

➝ Alleged Co-Founder of #Garantex Arrested in India;

➝ X Suffered a #DDoS Attack;

➝ Microsoft #PatchTuesday Fixes 7 Zero-days;

➝ UK Hospital Discovered 5,000 to 10,000 Unknown Devices Connected to its Network;

➝ #NVIDIA Chips Smugglers Granted Bail in Singapore;

➝ #Tenable tested #DeepSeek's Ability to Generate #Malware;

➝ #OpenAI labelling DeepSeek as "state-controlled";

➝ New #Jailbreak Method called Context Compliance Attack (CCA) Works Against Most #AI Models

Subscribe to the #infosecMASHUP newsletter to have it piping hot in your inbox every week-end

https://infosec-mashup.santolaria.net/p/template-infosec-mashup-xx-2025-7eb9e43f2aebd47f?utm_source=beehiiv&utm_medium=mastodon

Oh really it was Ukraine that took down X on March 10? Not so fast.

Independent security researchers found evidence that some X origin servers were not properly secured behind DDoS protection, and researchers noted they did not even see Ukraine in the breakdown of the top 20 IP address origins involved in the attacks. https://www.wired.com/story/x-ddos-attack-march-2025/ #X #Musk #DDoS #cyberattack #cybersecurity #security #Ukraine #BotNet #Internet

No, Elon — X DDoS was NOT by Ukraine

#X marks the botnet: #Outage outrage was a Ukrainian cyberattack, implies our favorite African billionaire comedy villain.

The social media platform formerly known as #Twitter went offline earlier this week. It was swamped by wave after wave of distributed denial of service attacks (DDoS). Now-owner #ElonMusk (pictured) has been telling everyone the #DDoS traffic came from Ukraine.

O RLY? That’s “garbage,” say experts. In #SBBlogwatch, we never stopped calling it Twitter.

@TheFuturumGroup @TechstrongGroup @SecurityBlvd: https://securityboulevard.com/2025/03/elon-musk-x-ddos-ukraine-richixbw/?utm_source=richisoc&utm_medium=social&utm_content=richisoc&utm_campaign=richisoc

What Really Happened With the #DDoS Attacks That Took Down #X

https://www.wired.com/story/x-ddos-attack-march-2025/

What Really Happened With the DDoS Attacks That Took Down X

First, Never Believe Anything #Muskovite Says.

https://www.wired.com/story/x-ddos-attack-march-2025/

Musk links cyberattack on X to Ukraine without evidence https://www.csoonline.com/article/3842823/musk-links-cyberattack-on-x-to-ukraine-without-evidence.html #Security #DDoS

Elon Musk doesn't understand DDOS attacks. | @destiny

Musk says X hit by 'cyber-attack' as thousands report outages
https://www.bbc.com/news/articles/c62x5k44rl0o

"several major outages spanning more than six hours on Monday, "each having global impact".

"This is amongst the longest X/Twitter #outages we've tracked in terms of duration, and the pattern is consistent with a denial of service attack targeting X's infrastructure at scale," he added."

Dark Storm Team Claims DDoS Attack on X, Causing Major Outage

X (formerly Twitter) is experiencing its third major outage of the day, with users reporting widespread login and loading issues. The hacking group Dark Storm Team has reportedly claimed responsibility for a DDoS attack on the platform, according to a public Telegram post.

https://www.newsweek.com/x-twitter-outage-dark-storm-live-updates-2042333

Massive #botnet that appeared overnight is delivering record-size DDoSes
#ddos #security

https://arstechnica.com/security/2025/03/massive-botnet-that-appeared-overnight-is-delivering-record-size-ddoses/

Massive botnet that appeared overnight is delivering record-size DDoSes

Eleven11bot infects video recorders, with the largest concentration of them in the US.

https://arstechnica.com/security/2025/03/massive-botnet-that-appeared-overnight-is-delivering-record-size-ddoses/

Så er der opdateret lidt på materialet til på mandag, Workshop hos PROSA.

DDoS simulering hvor vi samles om noget netværksudstyr og lærer at sende netværkspakker, MANGE MANGE netværkspakker

https://github.com/kramse/security-courses/tree/master/presentations/pentest/simulated-ddos-workshop

Materialet må som altid deles og kopieres, og samme workshop plejer jeg at holde på BornHack, så måske skal du skrive det i kalenderen