July 17th, 2024

Cloudflare reports almost 7% of internet traffic is malicious

Cloudflare's report highlights a rise in malicious internet traffic, driven by global events. It emphasizes the need for timely patching against new vulnerabilities, notes a surge in DDoS attacks, stresses API security, and warns about harmful bot traffic. Organizations are urged to adopt robust security measures.

Read original articleLink Icon
Cloudflare reports almost 7% of internet traffic is malicious

Cloudflare's latest State of Application Security Report reveals that almost 7% of internet traffic is malicious, with an increase driven by factors like wars and elections. The report highlights the rapid exploitation of new vulnerabilities, including zero-day exploits, emphasizing the importance of timely patching. Distributed Denial of Service (DDoS) attacks remain prevalent, with Cloudflare blocking 4.5 million unique DDoS attacks in the first quarter of 2024. The sophistication and scale of these attacks are growing, with some reaching unprecedented levels. Additionally, API security is becoming crucial as API-related traffic increases, posing a significant target for attackers. The report also notes the prevalence of automated bot traffic, with around 93% of bots potentially being harmful. To mitigate these threats, organizations are advised to implement robust security measures from providers like Cloudflare and secure their code with assistance from software supply chain security companies. Proactive measures are essential to safeguard websites and services in the face of evolving cyber threats.

Link Icon 8 comments
By @solardev - 4 months
That seems... really low? I would've expected way, WAY more than that.

Even later on in the report, they say:

> 31.2% of all application traffic processed by Cloudflare is bot traffic. [...] 93% of bots we identified were unverified bots, and potentially malicious.

So I guess there's a wide range there, from 7% verified at the low end, up to maybe 30% at the higher, hypothetical end?

By @jsheard - 4 months
The call is coming from inside the house, the majority of DDoS-for-hire services are hiding behind Cloudflare.
By @ChrisArchitect - 4 months
By @eduction - 4 months
Crime is up in your neighborhood, says company that sells burglar alarms.
By @netsharc - 4 months
> In one case, attackers attempted to exploit a JetBrains TeamCity DevOps authentication bypass a mere 22 minutes after the proof-of-concept code was published.

Ha, I wonder if an LLM can be told to "code an exploit from this proof-of-concept, find hosts where this app is running and give me admin access"...

By @freedomben - 4 months
It's a shame that the actual report is buried behind the marketing BS "give me your email to get the report" stuff.
By @bdcravens - 4 months
That's all?