Stay updated on DoS threats. Explore the latest news and insights on Denial of Service attacks, prevention tips, and cybersecurity strategies.
Search across headline titles and summaries.
Background for this topic.
Denial of service (DoS) is an attack that makes a system, network, or application unavailable by exhausting resources or triggering failure. Floods can consume bandwidth, connection state, CPU, memory, or request-processing capacity; a software defect may instead be exploited to crash a service. A distributed denial-of-service (DDoS) attack generates traffic from many systems, increasing volume and complicating source-based blocking. The material security impact is loss of availability for users and dependent services, including websites, APIs, DNS, and operational systems.
Mitigation should match the bottleneck. Rate limits, request validation, connection protections, caching, and service isolation can reduce application and state-exhaustion attacks; volumetric traffic generally needs filtering or absorption upstream of the network. Monitoring should distinguish abnormal request patterns from ordinary load and alert on saturation, while tested failover, traffic diversion, and restoration procedures limit outage duration. Vulnerability management and timely patching reduce DoS caused by remotely triggerable crashes, but do not replace capacity planning and resilience testing.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned today of a critical remote code execution (RCE) flaw in the Ruckus Wireless Admin panel actively exploited by a recently discovered DDoS botnet. [...]
New samples of the RapperBot botnet malware have added cryptojacking capabilites to mine for cryptocurrency on compromised Intel x64 machines. [...]
Cryptomining is a logical partner for an existing IoT-focused DDoS botnet, so the RapperBot authors customized XMRig to make it happen.
A new malware botnet named 'AndoryuBot' is targeting a critical-severity flaw in the Ruckus Wireless Admin panel to infect unpatched Wi-Fi access points for use in DDoS attacks. [...]
U.S. authorities have announced the seizure of 13 internet domains that offered DDoS-for-hire services to other criminal actors
Ten of the domains targeted today were "reincarnations" of services seized in December 2022.
The U.S. Federal Bureau of Investigation (FBI) this week seized 13 domain names connected to “booter” services that let paying customers launch crippling distributed denial-of-service (DDoS) attacks. Ten of the domains are reincarnations of DDoS-for-hire services the FBI seized in December 2022, when it charged six U.S. men with computer crimes for allegedly operating booters.
Four pleaded guilty to running DDoS-for-hire operations
Plus: Court-ordered domain seizures of DDoS-for-hire sites Intel is investigating reports that BootGuard private keys, used to protect PCs from hidden malware, were leaked when data belonging to Micro-Star International (MSI) was stolen and dumped online. …
The U.S. Justice Department announced today the seizure of 13 more domains linked to DDoS-for-hire platforms, also known as 'booter' or 'stressor' services. [...]