Summary
This report is a detailed examination of security trends, vulnerabilities, and attack vectors observed during Q2 2024, specifically in the web application and API security domain. The Fastly Security Research Team analyzes large volumes of traffic data to provide insights that inform security practitioners about the evolving threat landscape. Key findings include that 49% of IPs added to the Network Learning Exchange (NLX) were listed for only one day, which underscores the transient nature of many attacks. Additionally, 91% of attacks from NLX sources were found to target multiple customers, indicating a broad increase in mass scanning tactics. The report also highlights concerning trends such as the rise of traversal attacks and the exploitation of vulnerabilities in WordPress plugins. The data collected during the reporting period, from April 1 to June 30, 2024, offers critical guidance for organizations aiming to enhance their security postures against emerging threats.
