Barracuda ESG Vulnerability Chain Gives Root — and Botnets Nodes
Barracuda patched two ESG flaws that chain into root. We break down why compromised mail gateways make ideal botnet nodes for udp and http flood attacks.
HTTP floods: Layer 7 GET/POST attacks, HTTP pipelining, HTTP/2 Rapid Reset, and how each is mitigated (or not).
Barracuda patched two ESG flaws that chain into root. We break down why compromised mail gateways make ideal botnet nodes for udp and http flood attacks.
SonicWall won't patch two GMS flaws, including a 9.1 unauthenticated file read. Why EoL management boxes are a gift to every botnet and DDoS-for-hire fleet.
SlippyNunchucks hijacked Sogou Input Method DNS requests over plaintext HTTP to drop the DarkVigil backdoor. Our botnet team's take on this classic MITM vector.
UAM, JS Challenge, Managed Challenge, BFM, Turnstile — why Cloudflare stops most stressers, and why it does not stop us.
Passive filtering, JS Challenge and the feared WASM Challenge — how Qrator defends the RU segment, and how we took 21.8M RPS through it anyway.
Google sinkholed the XCPE botnet's C2, but 1.3 million backdoored TV boxes remain infected, and their proxy revenue model makes them ideal DDoS assets.
CVE-2026-58115 turns Siemens IoT2050 gateways into persistent botnet relays via an unauthenticated Node-RED interface. Here's why edge devices recruit so well.