Resources

Our Blog

Introducing Edgecast’s Advanced Bot Manager

Automated bot attacks have grown in both scale and sophistication. While some bots serve legitimate purposes—such as search engine crawlers—many are created with malicious intent, such as scraping valuable business data or exhausting inventory by exploiting vulnerabilities in web applications. As cybercriminals increasingly employ cache-busting techniques and complex behavioral patterns, businesses require a more nuanced, dynamic approach to bot management—one that blends signature detection, AI, and real-time threat intelligence. Edgecast’s Advanced Bot Manager was built from the ground up to leverage this multi-pronged approach, offering comprehensive and scalable protection against malicious bots while maintaining optimal application performance.

The Polyfill.io Supply Chain Attack and How to Protect Your Site

To understand the recent polyfill.io supply chain attack, we should first define the term “polyfil.” Polyfill refers to code that adds modern functionality to older browsers that lack native support for newer web features. It enables developers to deliver a consistent user experience across diverse browsers, particularly those slower to adopt the latest web standards. In the case of the polyfill.io attack, developers used polyfill to add JavaScript functionality that is not supported by older browsers.Polyfill.io is a widely used service that automatically detects the end user’s browser and served the necessary polyfills to ensure compatibility with modern web technologies. By embedding scripts from cdn.polyfill.io (polyfill.io’s open-source CDN), developers could seamlessly provide polyfills without the hassle of manual management, simplifying the process of maintaining browser compatibility.

Subdomain Security Not Important? Think Again!

Looking collectively at our recent audit reports for several well-known UK enterprise retail websites (which we systematically carry out in advance of client/prospect meetings), one glaring observation stood out: subdomain protection is being largely ignored. In fact, for each retailer audited, approximately 1/3 of their website domains were unprotected. This came as a bit of a surprise. After all, companies with more subdomains have a larger “attack surface,” but when I point this out to the prospective security lead, there is often little appetite to address the problem.

RUM the Halls of Your Edgecast Site (With Data!)

Do you want to gain deeper insights into how users interact with your Next.js website built on the Edgecast Jamstack Platform? This guide provides a step-by-step approach to enabling RUM on your Edgecast Jamstack Platform with Next.js. While the specific code examples target Next.js, the general concepts apply to other JS frameworks as well.

Latest

The Polyfill.io Supply Chain Attack and How to Protect Your Site

To understand the recent polyfill.io supply chain attack, we should first define the term “polyfil.” Polyfill refers to code that adds modern functionality to older browsers that lack native support for newer web features. It enables developers to deliver a consistent user experience across diverse browsers, particularly those slower to adopt the latest web standards. In the case of the polyfill.io attack, developers used polyfill to add JavaScript functionality that is not supported by older browsers.Polyfill.io is a widely used service that automatically detects the end user’s browser and served the necessary polyfills to ensure compatibility with modern web technologies. By embedding scripts from cdn.polyfill.io (polyfill.io’s open-source CDN), developers could seamlessly provide polyfills without the hassle of manual management, simplifying the process of maintaining browser compatibility.

Why Your Web CDN is Broken and How to Fix It

For a CDN to work effectively, it needs to be configured in a way that works well with the underlying website technology – also known as the “tech stack.” How it’s configured is often known as the “caching strategy.”However, many CDNs don’t allow for any configuration changes in the code base of the tech stack. Engineers working on the site don’t have control over this critical performance infrastructure. Instead, updates must be made by additional teams/stakeholders in isolated user interfaces, making testing and debugging extremely difficult and time-consuming for the engineers.

Attack Surface Management Gives You Continuous “White Hat” Coverage

Edgecast’s ASM is the indispensable white hat, fortifying an organization’s security posture in today’s dynamic threat landscape and reducing the bumps along the way. With setup in minutes, it clearly emerges as a leading solution for organizations seeking to strengthen their security posture

Subdomain Security Not Important? Think Again!

Looking collectively at our recent audit reports for several well-known UK enterprise retail websites (which we systematically carry out in advance of client/prospect meetings), one glaring observation stood out: subdomain protection is being largely ignored. In fact, for each retailer audited, approximately 1/3 of their website domains were unprotected. This came as a bit of a surprise. After all, companies with more subdomains have a larger “attack surface,” but when I point this out to the prospective security lead, there is often little appetite to address the problem.

Cybersecurity

Attack Surface Management Gives You Continuous “White Hat” Coverage

Edgecast’s ASM is the indispensable white hat, fortifying an organization’s security posture in today’s dynamic threat landscape and reducing the bumps along the way. With setup in minutes, it clearly emerges as a leading solution for organizations seeking to strengthen their security posture

Subdomain Security Not Important? Think Again!

Looking collectively at our recent audit reports for several well-known UK enterprise retail websites (which we systematically carry out in advance of client/prospect meetings), one glaring observation stood out: subdomain protection is being largely ignored. In fact, for each retailer audited, approximately 1/3 of their website domains were unprotected. This came as a bit of a surprise. After all, companies with more subdomains have a larger “attack surface,” but when I point this out to the prospective security lead, there is often little appetite to address the problem.

Content Delivery Network (CDN)

Harnessing the Power of Content Delivery Networks (CDN) and Caching

‍Leveraging a Content Delivery Network (CDN) combined with effective caching strategies is a powerful, scalable way to boost your website’s speed, reliability, and overall user experience. From reducing latency and bandwidth costs to enhancing SEO and protecting against traffic surges, CDNs offer critical infrastructure that supports both performance and business growth. By strategically caching content, businesses can ensure fast, secure, and seamless content delivery to users across the globe — laying the foundation for long-term digital success.

Performance

Why Your Web CDN is Broken and How to Fix It

For a CDN to work effectively, it needs to be configured in a way that works well with the underlying website technology – also known as the “tech stack.” How it’s configured is often known as the “caching strategy.”However, many CDNs don’t allow for any configuration changes in the code base of the tech stack. Engineers working on the site don’t have control over this critical performance infrastructure. Instead, updates must be made by additional teams/stakeholders in isolated user interfaces, making testing and debugging extremely difficult and time-consuming for the engineers.

Cloud Costs – A Positive EBITA Approach

While interest, along with taxes and amortization, is outside the scope of an EBITA discussion (and this article), any enterprise approach to cloud spend must absolutely recognize the economic context the decisions are made in. This is especially true when, like the current environment, we’re dealing with a significant inflection point.

How Tos

The Polyfill.io Supply Chain Attack and How to Protect Your Site

To understand the recent polyfill.io supply chain attack, we should first define the term “polyfil.” Polyfill refers to code that adds modern functionality to older browsers that lack native support for newer web features. It enables developers to deliver a consistent user experience across diverse browsers, particularly those slower to adopt the latest web standards. In the case of the polyfill.io attack, developers used polyfill to add JavaScript functionality that is not supported by older browsers.Polyfill.io is a widely used service that automatically detects the end user’s browser and served the necessary polyfills to ensure compatibility with modern web technologies. By embedding scripts from cdn.polyfill.io (polyfill.io’s open-source CDN), developers could seamlessly provide polyfills without the hassle of manual management, simplifying the process of maintaining browser compatibility.

RUM the Halls of Your Edgecast Site (With Data!)

Do you want to gain deeper insights into how users interact with your Next.js website built on the Edgecast Jamstack Platform? This guide provides a step-by-step approach to enabling RUM on your Edgecast Jamstack Platform with Next.js. While the specific code examples target Next.js, the general concepts apply to other JS frameworks as well.

Let Us Handle It

With Edgecast’s Managed Services, you’ll work directly with our experts to strengthen your security posture and optimize your site’s performance.