{"id":8892,"date":"2025-07-24T13:53:27","date_gmt":"2025-07-24T13:53:27","guid":{"rendered":"http:\/\/localhost\/?p=8892"},"modified":"2025-07-24T13:53:27","modified_gmt":"2025-07-24T13:53:27","slug":"surges-in-cyber-activity-accompany-regional-military-operations","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=8892","title":{"rendered":"Surges in Cyber Activity Accompany Regional Military Operations"},"content":{"rendered":"

Security Update News<\/h2>\n

Update Information<\/h3>\n\n\n\n\n\n\n
Title<\/th>\nSurges in Cyber Activity Accompany Regional Military Operations<\/td>\n<\/tr>\n
Update ID<\/th>\nIMPERVABLOG:AC64B0E4CC0DAB9CABF3ECC704A4A625<\/td>\n<\/tr>\n
Type<\/th>\nimpervablog<\/td>\n<\/tr>\n
Published<\/th>\n2025-07-24T16:38:39<\/td>\n<\/tr>\n
Last Updated<\/th>\n2025-07-24T16:38:39<\/td>\n<\/tr>\n<\/table>\n

Security Impact<\/h3>\n\n\n
Severity<\/th>\nNONE<\/td>\n<\/tr>\n<\/table>\n

Update Details<\/h3>\n
\nGeopolitical events and military operations often trigger a cascade of online activity, both legitimate and malicious. Recent data from our global threat network highlights the strong connection between military escalations and cyberattacks, with the latest example unfolding in the Middle East.<\/p>\n

## **Operation Rising Lion Triggers Cyber Spikes Across Israeli Sites**<\/p>\n

On June 13, Israel launched Operation Rising Lion, and the ripple effects in cyberspace were immediate. The following day, traffic to Israeli websites surged to 172% above typical levels, as individuals likely sought real-time updates and information about the unfolding operation.<\/p>\n

While much of this spike can be attributed to organic traffic from news readers and concerned citizens, it was accompanied by notable increases in cyberattack activity:<\/p>\n

* **Spike in Web Application & API Protection (WAAP) Attacks:** WAAP threats\u2014including malicious bot traffic, API abuse, and web application attacks\u2014jumped by 63% over the two days immediately following the start of the operation, particularly in the government and financial industries. Government sites had the largest rise, spiking 320% above average in the days following the operation.
* **Rise in RPS of Application Layer (L7) DDoS Attacks:** After briefly declining immediately following the operation, L7 DDoS attacks began to rise again in subsequent days, leaping to 54% more attacks than average within a week. Although the number of attacks has increased slightly, it remains within the range observed in prior weeks, as Israeli sites are frequently targeted by DDoS. However, the requests-per-second (RPS) rate has grown noticeably in the week following the operation, spiking 1,336% above the rates the week prior. While still below 1 million RPS, these attacks largely targeted sites affiliated with defense.
* **No Notable Change in Network Layer (L3\/4) DDoS Attacks:** Network-layer attacks have also increased since the start of _Operation Rising Lion_ , though again, they have not exceeded the levels seen earlier in the year. Interestingly, despite the higher number of attacks, bandwidth levels have remained modest, averaging around 5 Gbps. These attacks primarily focused on Israeli government sites, possibly aiming to disrupt public communications or degrade critical services.<\/p>\n

## **U.S. Involvement Sparks Further Traffic Shifts**<\/p>\n

The situation escalated further when the United States launched Operation Midnight Hammer on June 22. In the days leading up to the U.S. operation, we observed increased traffic to U.S.-based sites, especially those in the financial and news industries, likely driven by speculation about potential American involvement following Israel’s actions. Traffic to news sites specifically had two large spikes of about 50% above average, following Israel\u2019s operation and then again after US involvement.<\/p>\n

In the chart below, you can see spikes to US news sites at three specific points: as tensions rose in the Middle East, right after Israel began their operation, and right after the US operation. These points underscore the deep global interest in the military and political fallout from these operations.<\/p>\n

## **Historical Context: The Ukraine Invasion Cyber Pattern**<\/p>\n

These patterns mirror previous cyber trends observed during large-scale conflicts. In February 2022, during Russia’s initial invasion of Ukraine, we recorded a 56% surge in traffic to Ukrainian websites in late February as the world monitored developments, a rise that was sustained for the rest of the year. That traffic spike was accompanied by an uptick in WAAP attacks, as well as distributed denial-of-service (DDoS) attacks on a range of targets, including financial institutions, business sites, and gas stations.<\/p>\n

## **Key Takeaway: Cyber and Kinetic Worlds Are Deeply Interconnected**<\/p>\n

Our data once again shows how geopolitical crises manifest in cyberspace\u2014through both legitimate spikes in web traffic and malicious cyberattacks. While traffic surges are often driven by users seeking information, attackers frequently exploit these moments of heightened attention to launch targeted campaigns against government, military, and media sites, as well as critical infrastructure like healthcare and transportation.<\/p>\n

Organizations\u2014particularly in high-risk regions or industries, like defense, financial services, and government\u2014should remain on heightened alert during geopolitical events and ensure their defenses against DDoS, API abuse, and other web application attacks are fully operational.<\/p>\n

The post Surges in Cyber Activity Accompany Regional Military Operations appeared first on Blog.\n<\/p><\/div>\n

View Advisory Details<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Security Update News Update Information Title Surges in Cyber Activity Accompany Regional Military Operations Update ID IMPERVABLOG:AC64B0E4CC0DAB9CABF3ECC704A4A625 Type impervablog Published 2025-07-24T16:38:39 Last Updated 2025-07-24T16:38:39 Security…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,59,13,33,7,11,5],"class_list":["post-8892","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-impervablog","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\nSurges in Cyber Activity Accompany Regional Military Operations - zero redgem<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zero.redgem.net\/?p=8892\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Surges in Cyber Activity Accompany Regional Military Operations - zero redgem\" \/>\n<meta property=\"og:description\" content=\"Security Update News Update Information Title Surges in Cyber Activity Accompany Regional Military Operations Update ID IMPERVABLOG:AC64B0E4CC0DAB9CABF3ECC704A4A625 Type impervablog Published 2025-07-24T16:38:39 Last Updated 2025-07-24T16:38:39 Security...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zero.redgem.net\/?p=8892\" \/>\n<meta property=\"og:site_name\" content=\"zero redgem\" \/>\n<meta property=\"article:published_time\" content=\"2025-07-24T13:53:27+00:00\" \/>\n<meta name=\"author\" content=\"invoker\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"invoker\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=8892#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=8892\"},\"author\":{\"name\":\"invoker\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\"},\"headline\":\"Surges in Cyber Activity Accompany Regional Military Operations\",\"datePublished\":\"2025-07-24T13:53:27+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=8892\"},\"wordCount\":722,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"keywords\":[\"CVE\",\"CVSS\",\"exploit\",\"impervablog\",\"news\",\"NONE\",\"Security\",\"tapic\",\"Vulnerability\"],\"articleSection\":[\"category_news\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=8892#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=8892\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?p=8892\",\"name\":\"Surges in Cyber Activity Accompany Regional Military Operations - zero redgem\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\"},\"datePublished\":\"2025-07-24T13:53:27+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=8892#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=8892\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=8892#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zero.redgem.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Surges in Cyber Activity Accompany Regional Military Operations\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"name\":\"zero redgem\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zero.redgem.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\",\"name\":\"zero redgem\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"width\":191,\"height\":188,\"caption\":\"zero redgem\"},\"image\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\",\"name\":\"invoker\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"caption\":\"invoker\"},\"sameAs\":[\"https:\\\/\\\/zero.redgem.net\"],\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Surges in Cyber Activity Accompany Regional Military Operations - zero redgem","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zero.redgem.net\/?p=8892","og_locale":"en_US","og_type":"article","og_title":"Surges in Cyber Activity Accompany Regional Military Operations - zero redgem","og_description":"Security Update News Update Information Title Surges in Cyber Activity Accompany Regional Military Operations Update ID IMPERVABLOG:AC64B0E4CC0DAB9CABF3ECC704A4A625 Type impervablog Published 2025-07-24T16:38:39 Last Updated 2025-07-24T16:38:39 Security...","og_url":"https:\/\/zero.redgem.net\/?p=8892","og_site_name":"zero redgem","article_published_time":"2025-07-24T13:53:27+00:00","author":"invoker","twitter_card":"summary_large_image","twitter_misc":{"Written by":"invoker","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zero.redgem.net\/?p=8892#article","isPartOf":{"@id":"https:\/\/zero.redgem.net\/?p=8892"},"author":{"name":"invoker","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca"},"headline":"Surges in Cyber Activity Accompany Regional Military Operations","datePublished":"2025-07-24T13:53:27+00:00","mainEntityOfPage":{"@id":"https:\/\/zero.redgem.net\/?p=8892"},"wordCount":722,"commentCount":0,"publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"keywords":["CVE","CVSS","exploit","impervablog","news","NONE","Security","tapic","Vulnerability"],"articleSection":["category_news"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zero.redgem.net\/?p=8892#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zero.redgem.net\/?p=8892","url":"https:\/\/zero.redgem.net\/?p=8892","name":"Surges in Cyber Activity Accompany Regional Military Operations - zero redgem","isPartOf":{"@id":"https:\/\/zero.redgem.net\/#website"},"datePublished":"2025-07-24T13:53:27+00:00","breadcrumb":{"@id":"https:\/\/zero.redgem.net\/?p=8892#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zero.redgem.net\/?p=8892"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/zero.redgem.net\/?p=8892#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zero.redgem.net\/"},{"@type":"ListItem","position":2,"name":"Surges in Cyber Activity Accompany Regional Military Operations"}]},{"@type":"WebSite","@id":"https:\/\/zero.redgem.net\/#website","url":"https:\/\/zero.redgem.net\/","name":"zero redgem","description":"","publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zero.redgem.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/zero.redgem.net\/#organization","name":"zero redgem","url":"https:\/\/zero.redgem.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/","url":"","contentUrl":"","width":191,"height":188,"caption":"zero redgem"},"image":{"@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca","name":"invoker","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","caption":"invoker"},"sameAs":["https:\/\/zero.redgem.net"],"url":"https:\/\/zero.redgem.net\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/8892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8892"}],"version-history":[{"count":0,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/8892\/revisions"}],"wp:attachment":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8892"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8892"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}