InfoSecBulletin Cybersecurity for mankind
On October 24, 2025, Azure DDoS Protection detected and mitigated the largest cloud DDoS attack at 15.72 Tbps with nearly 3.64 billion packets per second, aimed at one endpoint in Australia.
Azure’s global DDoS Protection system quickly identified and mitigated threats, filtering out harmful traffic and ensuring continuous service for customer workloads.
Critical WordPress Plugin Flaw Exposes 600,000 Sites to Attacks
Apple Patches 28 Security Flaws in macOS, iOS, and iPadOS
DoNot (APT-C-35) Targeting Bangladesh Military Personnel
McDonald’s, Vodafone Affected by Azure Theft Campaign Exposing Millions of Records
NIST to Modernize NVD in the Age of Artificial Intelligence
ALERT
Multiple TP-Link Flaws Allow to Bypass Auth and Escalate Privileges
LiteLLM supply chain attack reveals 153GB of stolen credentials online
PATCHCORD Backdoor Targets Telecom and CII In South Asia
Fortinet Fixes Multiple Flaws in FortiWeb, FortiManager, and FortiClient
“City-Forum” Campaign
“City-Forum” Campaign Attacks Salesforce and ServiceNow Instances Worldwide
The attack originated from Aisuru botnet. Aisuru is a Turbo Mirai-class IoT botnet that frequently causes record-breaking DDoS attacks by exploiting compromised home routers and cameras, mainly in residential ISPs in the United States and other countries.
The attack featured high-rate UDP floods aimed at a specific public IP, originating from over 500,000 unique IPs. These sudden UDP bursts had little source spoofing and random ports, making traceback easier and allowing for provider enforcement.
An Azure attack surpasses recent records, indicating a worrying trend. Last month, on September 15, 2025, Cloudflare disclosed that it stopped a 22.5 Tbps attack, driven by a Mirai variant infecting smart devices.
In March 2025, Google Cloud fended off a 10.2 Tbps attack from Asia-Pacific botnets that used SYN floods and DNS amplification.
In 2024, AWS reported an 8.9 Tbps attack on a U.S. e-commerce site, linked to hacked routers in Eastern Europe.
Cloudflare’s 2025 Q1 DDoS Report from April showed a record number of DDoS attacks mitigated last year, marking a 198% increase from the previous quarter and a 358% rise compared to the previous year.
It blocked 21.3 million DDoS attacks against its customers in 2024, plus 6.6 million attacks on its infrastructure during an 18-day multi-vector campaign.
DDoS Scandals Hit Bangladesh ISP Sector: BTRC Prepares Crackdown
