Every story tagged Attack Detection, curated for CIOs and IT leaders — ranked by source credibility, engagement, and freshness.
2 stories · open in the command center
Mastodon's flagship server experienced a DDoS attack that caused temporary outages, following similar attacks on competitor Bluesky, highlighting the growing threat of sophisticated distributed attacks targeting social media infrastructure. The incident demonstrated both the vulnerability of centralized services and the resilience of decentralized architectures—only mastodon.social was affected while users on federated instances remained operational. This pattern of attacks against alternative social platforms suggests IT organizations should reassess DDoS protection strategies, particularly for services running federated or decentralized architectures.
A WordPress site experienced a brute-force attack generating 288,493 requests in 24 hours to XML-RPC endpoints, which was detected not through traditional uptime or CPU monitoring, but through an anomalous drop in cache hit ratio from 70-90% to 0.8%. The attack leveraged XML-RPC's system.multicall feature to test hundreds of credentials per request, bypassing conventional rate limiting while consuming significant server resources. This incident highlights the need for defense-in-depth security strategies combining edge protection (WAF rules) and application-level hardening, as well as monitoring non-traditional metrics like cache performance for early threat detection.