Outsmarting Persistent Threats & Hardening Access
How we are dealing with the recent spike in malicious actors on CAIMS.
We’ve just pushed a fresh security update to step up our defenses against malicious actors and further isolate our application environments.
Outsmarting the Long Game
While our security measures had already reduced overall server attacks, one persistent actor refused to give up. They shifted to a low-and-slow strategy—reducing attack frequency and rotating through multiple IP addresses to slip past standard blocks.
In today’s update, we’ve deployed targeted countermeasures to completely block this actor. Interestingly, constantly rotating clean IP infrastructure isn't cheap—which makes the economics of their high-cost reconnaissance pretty questionable... but we've shut the door on them regardless (even if we know they’ll eventually try a new angle).
Zero Access for Unknown Tenants & Direct Hits
As part of today’s push, we’ve also implemented a strict new access control layer:
- Blocked Direct Server Access: The system now rejects unverified direct access attempts to underlying server endpoints.
- Tenant Isolation: Requests from unauthorized or unknown tenants are instantly dropped at the perimeter, ensuring your environment remains fully isolated and protected from scanner noise.
System performance remains unaffected, and all client applications continue to run safely within our hardened infrastructure.