Top all-time · #7022
Radware Page
Company blog · radware.com/blogsecurity
Radware Page is the company blog at radware.com, writing about security. Since 2016, 11 different Hacker News readers have linked it 12 times, most often “GitHub Supply Chain Attack: Command Injection and CI/CD Data Exfiltration”. No feed was found, so read it on the site itself.
Too few sampled comments (9) to say how often HN recommends it.?
Why HN links it
HN readers link Radware's site and blog as a source on DDoS attacks and security incidents, such as a GitHub supply-chain campaign and a Facebook crawler flaw. No comment judges the writing itself.
Summarised by Claude from a sample of 9 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Loader page.
Most-linked posts?
- GitHub Supply Chain Attack: Command Injection and CI/CD Data Exfiltration2 people · 2 mentions · first linked 2026-10-29
- ShadowLeak: Zero-Click, Service-Side Attack Exfiltrating Sensitive ChatGPT Data2 people · 2 mentions · first linked 2025-09-19
What Hacker News says?
Considering the hacker's motive: https://x.com/Sn_darkmeta/status/1844358501952618976 Is it safe to assume the hacker want to erase the evidence? Forcing the service offline also means they want to prevent people from archiving evidence in the next how-ever-long hours. Combining with the spoken language they used in that video, are they planning some online disinformation campaign? ---- Edit: some more info about th…
Comment linking /security/threat-advisories-and-attack-reports/six-day-web-ddos-attack-campaign/
on “Internet Archive: Security breach alert”Submitted GitHub Supply Chain Attack: Command Injection and CI/CD Data Exfiltration as a story · 4 points
HN discussionSomeone should look at mergers of large digital advertising companies after Trump's most recent election... And then look at the timing of it. The countries involved happened to be Israeli and have many employees based out of Argentina. Which is crazy since the United States, Israel and Argentina happened to become extremely close after that election cycle... The CTO happens to have worked for Radware https://radwar…
Comment linking /
on “AdFection: Targeted ads turned into a pipeline for zero-click mercenary spyware”Submitted ShadowLeak: Exfiltrating Sensitive Data Using ChatGPT's Deep Research Agent as a story · 1 points
HN discussionSomeone should look at mergers of large digital advertising companies after Trump's most recent election... And then look at the timing of it. The countries involved happened to be Israeli and have many employees based out of Argentina. Which is crazy since the United States, Israel and Argentina happened to become extremely close after that election cycle... The CTO happens to have worked for Radware https://radwar…
Comment linking /
on “AdFection: Targeted ads turned into a pipeline for zero-click mercenary spyware”Submitted ShadowLeak: Zero-Click, Service-Side Attack Exfiltrating Sensitive ChatGPT Data as a story · 1 points
HN discussionDDOSs can have more impact than you think. Such as taking down hospitals and the war in Ukraine. Not really sure which one can be worse though... https://www.radware.com/security/ddos-experts-insider/ert-ca...
Comment linking /security/ddos-experts-insider/ert-case-studies/boston-childrens-hospital-ddos-mitigation-case-study/
on “I ran the worlds largest DDoS-for-Hire empire and Cloudflare helped”Except they didn't "own" Google's data centers at all. They tapped a fiber optic cable outside any data centers. Every other wavelength and individual strand in that cable would have also been susceptible. Fiber optic cables aren't some secret, they're quite visible(orange) and accessible in public rightaways. So yeah Protonmail is not much safer from that level of hostility is it? Lastly for all Protonmail's righte…
Comment linking /solutions/ssl-sniffing/
on “ProtonMail blocked by Vodafone Turkey”Cisco has the easiest to grasp fundamentals [1], but to really understand DDOS attacks you'll have to dig down into learning about how TCP works and network layers. Mitigation sounds non-commital because it is. I don't personally have any experience with mitigating a DDOS attack on Heroku, so I'm not qualified to talk about their prepardness, but DDOS mitigation varies quite a bit [2][3], running the entire gamut of…
Comment linking /newsevents/mediacoverage/changing-challenging-ddos-attacks/
on ““We have been experiencing a catastrophic DDoS attack””https://www.radware.com/products/bot-manager/ This seems to be the offending product being used, although the captchas themselves are standard hCaptcha.
Comment linking /products/bot-manager/
on “Effectiveness of trees in reducing temperature, outdoor heat exposure in Vegas”Source: https://www.radware.com/blog/inside-a-github-supply-chain-at...
Comment linking /blog/inside-a-github-supply-chain-attack-campaign/
on “Attackers turn GitHub issues into supply chain campaign against 61 public repos”Probably unrelated, but there was an old exploit on facebook using notes where you could paste an image tag with a URL + dynamic parameter an unlimited amount of times and facebook crawlers would hit that link however many times it was pasted in the note, essentially allowing you to DDOS a site with their servers. https://www.radware.com/blog/security/a-flaw-worth-fixing-ho...
Comment linking /blog/security/a-flaw-worth-fixing-how-we-tested-and-stopped-the-facebook-notes-flaw/
on “Facebook's Fascination with My Robots.txt”
