In July 2026, the threat intelligence team at Palo Alto Networks’ Unit 42 published an unusual analysis. After examining an IoT botnet called TuxBot v3 Evolution, the researchers discovered that large portions of the malicious code did not originate from a human but rather from a language model. The model even left its own train […]
The post TuxBot and the New Era of Botnets appeared first on Link11.
On May 5, 2026, shortly after dinner, millions of German websites simply vanished from the internet. It wasn’t hackers, it wasn’t bombs, and the power wasn’t out either. The cause was a problem with the DNSSEC implementation at DENIC, the custodian of all .de domains. Amazon, DHL, major news portals: Suddenly, they were no longer […]
The post The Evening When the German Internet Briefly Ceased to Exist appeared first on Link11.
DDoS attacks affect companies of all sizes, and they rarely come at a convenient time. To remain capable of responding in an emergency, you must lay the groundwork well in advance. What this means in concrete terms must be clarified from technical, organizational, and regulatory perspectives. Reports are piling up: websites are down, services have […]
The post By the time the attack hits, it’s too late: How to build DDoS-resilient infrastructure now appeared first on Link11.
In late April 2026, the Federal Office for Information Security adopted a particularly ambitious set of cloud regulations. The C3A criteria catalog – short for “Criteria enabling Cloud Computing Autonomy” – is intended to define when a cloud provider is truly sovereign. The idea is sound. But the closer you look, the more questions arise. […]
The post C3A: A Broad Framework, Unanswered Questions – What IT Managers Need to Know Now appeared first on Link11.
Shortly after half past eleven at night, the dashboards of the Security Operations Center showed everything was green. Initially, there were only a few requests per minute, which was in line with what one would expect for a .de domain at that hour. However, within five minutes, the numbers exploded, reaching over 900,000 requests against […]
The post Green Light, Red Alarm: What a Bot Attack on a Payment API Reveals About Modern Attack Methods appeared first on Link11.
It was a perfectly ordinary morning. Roland Hambach, CEO of ene’t GmbH, was sitting at breakfast scrolling through his emails. Then came the first one with the subject line “DDoS Attack.” Then the second. Then the third. His first instinct: spam, delete. But then the IT department sounded the alarm at the same time. What followed was […]
The post Three Emails, Then Silence: What a DDoS Attack Teaches a CEO appeared first on Link11.
Today’s DDoS attacks are not just simple volume or protocol attacks anymore. They can originate from comprised devices within trusted and legitimate networks, mimic real traffic, and appear in short high-intensity bursts that leave little time for manual response. Link11 has completely rebuilt its Layer 3/4 DDoS mitigation solution from the ground up. The Next-gen Network DDoS Protection combines proactive protection built for the AI era, and behavior-based detection with full IPv4 […]
The post Link11 provides the next generation of modern network DDoS protection appeared first on Link11.
DDoS attacks are rapidly growing in intensity and precision. They are now shorter, more targeted, and increasingly AI-generated. Link11 Network DDoS Protection has always been a strong and reliable standard for organizations looking to secure their network infrastructure. But the demands of modern enterprise networks have changed. Attackers are continuously refining their strategies. And the last thing your team deserves is the pressure to constantly recalibrate when an attack is underway. Therefore, in direct response to the […]
The post Next Gen Network DDoS Protection: What Has Improved for Your Network appeared first on Link11.
A two-stage DDoS attack with a bandwidth of over one terabit, targeting login, download, and admin sections, shows that modern attackers test systems during an attack as well as beforehand. There were two waves of attacks, separated by a ten-hour break. In total, over 335 million requests were sent. These included targeted attempts to log […]
The post 335 million requests, a ten-hour break – then a second attempt appeared first on Link11.
Link11 has become aware of a security incident at the market intelligence provider Klue which, according to the information available to us, affected a broader group of Klue customers. Klue was connected to its customers’ Salesforce CRM environments through OAuth-based API integrations; Link11 also used such an integration. Based on the analysis conducted so far, attackers abused valid integration credentials associated […]
The post Security Incident at Third-Party Provider Klue: Certain Link11 CRM Data Affected appeared first on Link11.
Link11, a European provider of cloud-based IT security solutions specializing in network and web application security, is strengthening its commitment to digital sovereignty by opening a ‘Technical Customer Excellence Hub’ in Lisbon. This move sees the company relocating its technical customer service operations to the European Union. “With the hub in Lisbon, we are addressing the specific […]
The post Link11 is fully committed to Europe and is opening a Customer Excellence Hub in Lisbon appeared first on Link11.
In our latest Cyber Insight report, we analyze a politically motivated DDoS attack on a defense contractor. This was a Layer 7 attack, rather than a classic volumetric flood at the network level: it involved targeted pressure on the application layer. Each request must be evaluated by the WAF, involving rate limiting, session tracking, and […]
The post How Cloud Infrastructures Are Becoming Weapons of Attack appeared first on Link11.
If your network is online and generating revenue, it is a potential target. That is not an exaggeration, but the reality of the modern internet. And if you are currently relying on a standard transit provider with a DDoS mitigation service bolted on top, there is a possibility that your protection has a gap in […]
The post Clean Transit: What it is, what it can do and why it matters for your network appeared first on Link11.
Not all attacks are spectacular. Some are rather inconspicuous, without reaching record levels of bandwidth or packet volume. This was the case with the following DDoS attack: At first glance, it seemed rather unspectacular, as the volume was around 3 million requests. Compared to large-scale DDoS campaigns, this is not an exceptional figure. Nevertheless, it is worth taking a closer look […]
The post GET methods in the HTTP protocol: Why even simple requests can become a DDoS risk appeared first on Link11.
When an enterprise becomes the target of a Distributed Denial of Service (DDoS) attack, the first action is often to block malicious traffic as quickly and rigorously as possible. But what happens when the mitigation measures overshoot the mark and lock out the very people you actually want to serve? When Protection Becomes an Obstacle: […]
The post How Intelligent DDoS Mitigation Protects Legitimate Traffic appeared first on Link11.
What happens when you take away cybercriminals’ most expensive toy? They get angry and attack. When courageous security researchers decided to paralyze over 500 command servers of the notorious IoT botnets Kimwolf and Aisuru, the hackers reacted promptly: They launched massive revenge attacks on the researchers, whose data packets were filled to the brim with […]
The post The bizarre Cyber War over Kimwolf and Aisuru appeared first on Link11.
Link11, a European specialist in IT security solutions, is delighted to announce the launch of the English-language version of its successful podcast, Follow the White Rabbit. As Jens-Philipp Jung, Link11’s CEO, emphasises, “In today’s interconnected world, cybersecurity is a global challenge that requires collective vigilance and action. By launching the English version of Follow the White Rabbit, we […]
The post Link11 Launches English-Language Version of IT Security Podcast Follow the White Rabbit appeared first on Link11.
Not all DDoS attacks have the same objective. Some are designed simply to overload, while others are intended to conceal something more nefarious. A massive increase in requests immediately raises red flags in every SOC. However, when millions of requests flood the infrastructure in a short period, standard diagnosis often falls short. At first glance, the case seems clear: a classic […]
The post DDoS or smokescreen? Why volume attacks are often only half the story appeared first on Link11.
We have already established that WAAP is the logical answer to modern application architectures. But what does that mean in practice? Putting the more complex theory aside, WAAP is primarily about making security scalable and manageable. Below, we present four key ways in which WAAP can help you regain control of your digital infrastructure. The return of visibility The first practical […]
The post Beyond the filter: How does WAAP support everyday IT operations? appeared first on Link11.
In IT security, the following principle often applies: introduce a new tool for every new problem. As a result, many companies have developed a digital patchwork quilt over time. Endpoint protection here, firewalls there, identity management, DDoS protection, WAF, bot management, and API security—everything was purchased, configured, and operated individually. On paper, this looks like seamless coverage. In operational reality, however, […]
The post Using lots of security solutions? How fewer tools lead to more control appeared first on Link11.
