CuraSec

tag: Threat-Trends · 2 items

Learn Cloudflare Q3 2026: 18.2M Network-Layer DDoS Attacks, Up 38%
2026-10-31 · The Hacker News · source ↗ #ddos#threat-trends#cloudflare
  • Engineer — Learn: Volume benchmarks are useful context for capacity planning and DDoS mitigation sizing, but no new attack technique or actionable configuration change emerges from this report.
  • SOC/IR — Learn: Useful for calibrating alert thresholds and briefing teams on DDoS trend baselines, but no IOCs, TTPs, or detection actions are surfaced.
  • Leader — Learn: The 38% year-over-year increase is board-deck-ready benchmarking data to justify DDoS mitigation investment, but no immediate action is required.
Plan archived Google GTIG: AI Doubles Vuln Disclosures, Exploitation Rate Nearly Doubles
2026-09-30 · Google Threat Intelligence · source ↗ #vulnerability-management#ai-security#threat-trends
  • Engineer — Learn: Industry-scale data showing exploitation rates nearly doubled and AI-discovered vulns skew toward RCE — a signal to review patch SLA targets and triage priority frameworks, but no specific software or configuration to change today.
  • SOC/IR — Learn: The compression between disclosure and exploitation (18 exploited/month vs 10.5 in 2025) is useful triage context — detection coverage gaps close faster now — but the report provides no IOCs, TTPs, or specific campaigns to action against.
  • Leader — Plan: Statistically grounded data showing doubled exploitation rates and AI-driven growth in RCE-class findings warrants updating the risk register and briefing leadership on the need to tighten patch SLA expectations across engineering teams this quarter.