Anti-DDoS Firm Heaped Attacks on Brazilian ISPs

A Brazilian anti-DDoS technology firm was found to have enabled a botnet that launched prolonged and massive distributed denial-of-service (DDoS) attacks against other Brazilian network operators. The firm's CEO attributes the malicious activity to a security breach, suggesting it was likely orchestrated by a competitor aiming to damage the company's reputation. There is no evidence of known exploits in the wild beyond this incident, and no patch or remediation information is available. The incident highlights risks related to insider threats or compromised infrastructure within security service providers.

• krebsonsecurity.com/2026/04/anti-ddos-firm-heaped-attacks-on-brazilian-isps/ (opens in a new tab)

• GCP-2023-004MediumVulnerability2026-10-26
• VU#128947: COVESA vsomeip excessive memory allocation in reliable (TCP) endpoint buffer handlingHighVulnerability2026-10-26
• CVE-2026-115417: aws-c-mqtt · Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapterHighVulnerability2026-10-22
• PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP FlawsExploitedVulnerability2026-10-21
• Issue in the Linux kernel virtio-net/TAP networking path affecting KVM-based hypervisorsHighVulnerability2026-10-15