I’d like to share another customer story that highlights the magnitude of today’s cyber threats.

Over the past month, one of our customers, the leading cloud services provider in a major country, was subjected to an intense and persistent DDoS attack campaign. This provider delivers advanced computing services and GPU-based infrastructure-as-a-service for AI workloads to thousands of enterprise customers, many of whom depend on these services for their day-to-day operations.

Since September 19, the organization has faced more than 250 DDoS attacks, with as many as 10 attacks occurring in a single day. Attack volumes reached over 850 Gbps, representing traffic levels more than 1,000 times above normal. The campaign leveraged multiple attack vectors, including random UDP floods, and was launched from a large, globally distributed botnet. Had these attacks been successful, they could have significantly disrupted services for thousands of enterprises and caused severe business consequences for the provider.

Throughout the campaign, Radware’s cloud security services successfully defended the customer and maintained uninterrupted service availability. Our DDoS Protection service identified and mitigated attacks automatically and in real time, ensuring no impact on customer-facing operations. In parallel, our Active Attackers Feed proactively blocked traffic from known malicious sources, further strengthening the organization’s defenses.

Most importantly, our products stopped the attacks without any impact on the services this provider delivers to its own customers. The thousands of enterprises running AI workloads on its infrastructure were able to keep working throughout the campaign. Our Cloud Services Product and Operations teams worked around the clock to make that happen. 

What can other cloud providers take from this?

Attacks can last for weeks. This campaign went on for a month, with up to 10 attacks a day. Protection that depends on someone noticing and reacting will not keep up. Detection and mitigation need to work automatically, at any hour.

Attackers change their methods. The campaign used dozens of attack vectors and came from sources all over the world. A single rule or a single type of defense is not enough.

AI workloads are hard to recover. A training run or a long processing job that stops halfway can mean hours or days of lost work, and restarting it is not always simple. For a provider of AI infrastructure, an outage costs your customers far more than the minutes it lasts.

I would also like to invite you to join our webinar series on Web DDoS attacks: what they are and how to prevent them. I will take part in the first webinar, where we will talk about the nature of these attacks and present customer stories. Here is a link to register to the Web DDoS Attacks Explained series.

Good news for our Cloud DDoS and Alteon customers: we're offering you one week of free PHP2Shell protection through our cloud security platform.

You may have seen the news about the new PHP2Shell vulnerabilities. If your organization runs affected versions of PHP, you may be at risk. Exploitation attempts have already been reported. We know patching is urgent, but testing and rolling out updates takes time. This offer is here to help you in the meantime.

Here's what you should know:

• The risk: Two critical PHP vulnerabilities (CVSS 9.2) could let unauthenticated attackers run malicious code or access sensitive information.

• The challenge: The vulnerabilities affect the PHP engine itself, not just one application or plugin. While you test and deploy fixes, applications can stay exposed.

• How Radware helps: Our cloud security platform includes targeted protection to help detect and block exploitation attempts against these vulnerabilities. This includes known attack patterns that got past earlier protections.

Want to take advantage of the offer?* Click here

💬 How is your team handling PHP patching? Share your thoughts or questions in the comments.