Comment by snowwrestler
7 hours ago
Attack traffic doesn’t necessarily mean the attacks were, or would have, succeeded.
From Cloudflare’s perspective, there is no downside to saying what they observed, and deploying defenses.
We may never know if this was actually being successfully exploited prior to patch availability.
You shouldn't wait until the attacks succeed to start deploying defenses.