Zoutje

Security News · Mar 21, 2026 · 2 min read

AI Bots Will Outnumber Humans Online by 2027, Cloudflare CEO Warns

Cloudflare CEO Matthew Prince predicts AI bot traffic will surpass human traffic online by 2027. The shift has major implications for WAF operators and bot management strategies.

Security News · Mar 21, 2026 · 3 min read

US Disrupts Massive IoT Botnets Behind Record 30 Tbps DDoS Attacks

The U.S. DoJ disrupted four IoT botnets that infected 3 million devices and launched record-breaking 30 Tbps DDoS attacks. Akamai, Cloudflare and other tech firms assisted the takedown.

Security News · Mar 20, 2026 · 1 min read

AWS Warns Hackers Have Abused Cisco Firewall Zero-Day Since January

AWS reveals that the Interlock ransomware group has been exploiting a critical Cisco firewall zero-day (CVE-2026-20131) since January. The CVSS 10 flaw allows unauthenticated remote code execution as root.

Security News · Mar 20, 2026 · 1 min read

Cloud Misconfigurations Are Still a Multi-Billion Dollar Problem

Cloud misconfigurations remain one of the biggest preventable security risks in 2026. Open storage buckets, overly permissive IAM roles, and default credentials keep causing breaches that cost billions.

Security News · Mar 19, 2026 · 2 min read

HAProxy Holds Its Perfect Score in Load Balancing for Another Consecutive Quarter in G2 Spring 2026 Grid Reports

HAProxy earns 78 badges including 25 Leader positions in G2 Spring 2026 Grid Reports, maintaining a perfect satisfaction score across WAF, DDoS Protection, and Bot Detection categories.

Security News · Mar 19, 2026 · 3 min read

Interlock Ransomware Exploited Cisco Firewall Flaw for Weeks

AWS researchers reveal the Interlock ransomware group exploited a maximum-severity Cisco firewall flaw for over five weeks before Cisco disclosed the vulnerability.

Security News · Mar 18, 2026 · 1 min read

Red Access Can Turn Any Firewall Into an AI-Ready Security Platform

Red Access, the agentless platform built to simplify security across all browsers, is introducing a firewall-native SSE, an agentless cloud layer that instantly upgrades any existing firewall with modern Security Service Edge (SSE),

Security News · Mar 18, 2026 · 1 min read

RAVEN.IO Raises $20 Million to Prevent Cyberattacks as AI-Generated Exploits Make CVE-Based Security Obsolete

New approach to application security in production at 11 companies analyzes code behavior at runtime rather than relying on CVEs or external defenses. PALO ALTO, Calif., March 18, ...

Security News · Mar 18, 2026 · 1 min read

Firewalls, rogue devices, and your own tools: what Barracuda’s threat report means for MSPs

Every year, security vendors publish threat reports. Most say variations of the same thing. But Barracuda’s Managed XDR Global Threat Report stands out for a reason that matters to MSPs: it’s built on ...

Security News · Mar 17, 2026 · 3 min read

F5 Overhauls ADSP With AI Observability, Post-Quantum WAF, and NGINX Convergence

F5 announced major updates to its Application Delivery and Security Platform at AppWorld, including a new observability tool, post-quantum cryptography for BIG-IP WAF, and agentic AI support for NGINX.

Security News · Mar 17, 2026 · 1 min read

SentinelOne and Cloudflare expand partnership to deliver real-time threat detection and automated response for enterprises

SentinelOne’s Singularity AI SIEM integrates Cloudflare Logpush telemetry to strengthen enterprise security posture ...

Security News · Mar 16, 2026 · 1 min read

Cloudflare Partners With Mastercard to Bring Threat Intelligence to Small Businesses

Cloudflare Inc. (NYSE:NET) operates as a cloud services provider that delivers a range of services to businesses worldwide.

Research · Mar 16, 2026 · 15 min read

An AI Agent Improved OWASP CRS Detection by 80% in 20 Experiments

We pointed an AI agent at the actual OWASP Core Rule Set regex patterns and let it find bypasses, fix them, and reduce false positives. 20 experiments, 20 kept, 0 discarded. TPR went from 55.8% to 100%, FPR dropped from 29.7% to 4.8%.

Security News · Mar 15, 2026 · 2 min read

IO River Uses Wasm to Run Check Point WAF Across Any CDN

IO River leverages WebAssembly to decouple WAF engines from CDN providers, starting with Check Point on Akamai. The goal: run your preferred WAF everywhere without vendor lock-in.

Security News · Mar 15, 2026 · 3 min read

F5 CEO Says AI Is Accelerating the Need for Platform Consolidation

F5 CEO Francois Locoh-Donou argues that AI workloads are making hybrid multi-cloud even more complex, pushing enterprises toward consolidated delivery and security platforms.

Research · Mar 15, 2026 · 18 min read

We Let an AI Agent Run Autonomous Experiments on ModSecurity CRS. Here's What It Found.

Starting from stock OWASP CRS defaults, an AI agent improved balanced accuracy from 86.7% to 96.7% on CRS v3.3.8, and from 80.8% to 98.4% on CRS v4.24.0, running 30 experiments over 7 hours. Full methodology, results, and downloadable configs.

Security News · Mar 14, 2026 · 3 min read

F5 Upgrades WAF With AI Risk Scoring and Post-Quantum Readiness

F5 rolls out AI-powered WAF risk scoring, automated AI vulnerability remediation, bot defense for agentic AI, and post-quantum cryptography readiness across its ADSP platform.

Security News · Mar 14, 2026 · 3 min read

Red Access Adds SSE Capabilities to Existing Firewalls Without Rip-and-Replace

Red Access launches agentless SSE that layers on top of existing firewalls from Palo Alto, Fortinet, Cisco, and Check Point. Deployment in hours, not months.

Security News · Mar 13, 2026 · 1 min read

HAProxy Ranked #3 Best Web Hosting Software Product in G2’s 2026 Best Software Awards

User-driven recognition highlights HAProxy’s leadership in Load Balancing, WAF, and DDoS Protection for scaling modern ...

Security News · Mar 13, 2026 · 1 min read

Red Access Turns Any Firewall Into an AI-Ready Security Platform

Red Access, the agentless platform built to simplify security across all browsers, GenAI, SaaS and corporate apps, today announced Firewall-Native SSE, an agentless cloud layer that instantly upgrades any existing firewall with modern Security Service Edge (SSE),

Security News · Mar 11, 2026 · 2 min read

Cloudflare Launches Stateful API Vulnerability Scanner Targeting BOLA Flaws

Cloudflare's new Web and API Vulnerability Scanner goes beyond traditional WAF rules by actively probing for logic flaws like Broken Object Level Authorization, the top threat on the OWASP API Security Top 10.

Security News · Mar 11, 2026 · 2 min read

NSFOCUS Outlines Full-Chain Web Security System Combining WAF and Tamper Protection

Chinese cybersecurity vendor NSFOCUS details its integrated web security architecture, pairing WAF capabilities with host-based tamper proofing for end-to-end protection against web application attacks.

Security News · Mar 11, 2026 · 2 min read

Radware Launches Alteon Protect: Cloud-Augmented WAF Without SSL Key Sharing

Radware's new Alteon Protect separates cloud-based threat detection from on-device enforcement, letting organizations add WAF, bot, API, and DDoS protection to existing ADC infrastructure without rerouting traffic or sharing SSL certificates.

Security News · Mar 10, 2026 · 3 min read

WordPress Plugin Flaw Exploited to Create Admin Accounts, Wordfence Blocks 200+ Attacks

Critical CVE-2026-1492 in WPEverest's User Registration plugin (60K+ sites) lets attackers create admin accounts without authentication. Wordfence blocked 200+ attacks in 24 hours. Patch to 5.1.4 now.

Security News · Mar 10, 2026 · 3 min read

Akamai Bets Big on AI Inference Cloud as Security Takes a Back Seat

Akamai is projecting 45-50% cloud growth in 2026 and pushing hard into AI inference with NVIDIA GPUs. The security business that built this company is now "Act 2" in a three-act strategy. What does that mean for WAF customers?

Security News · Mar 10, 2026 · 3 min read

Sansec Open-Sources Yargo, a YARA Engine That Scans Malware 6.8x Faster

Sansec open-sources Yargo, a pure Go YARA engine optimized for web source code. 6.8x faster than go-yara, processing 57K scans/day in production. MIT licensed.

Security News · Mar 9, 2026 · 1 min read

Datagroup to offer Akamai WAF to businesses in Ukraine

Ukrainian telecom Datagroup partners with Akamai to offer pay-as-you-go cloud WAF to small and medium businesses, lowering the barrier to enterprise-grade web application protection in a high-threat market.

Security News · Mar 9, 2026 · 1 min read

How to Protect Your SaaS from Bot Attacks with SafeLine WAF

SafeLine, a self-hosted open-source WAF, targets SaaS bot abuse with semantic traffic analysis and 99.45% claimed detection accuracy. A viable option for teams that need full control over traffic inspection.

Security News · Mar 8, 2026 · 3 min read

Cisco warns of max severity Secure FMC flaws giving root access

Cisco patches two CVSS 10.0 flaws in Secure Firewall Management Center. Both allow unauthenticated remote attackers to gain root access. Fourth max-severity firewall flaw in 8 months.

Security News · Mar 8, 2026 · 4 min read

CyberStrikeAI tool adopted by hackers for AI-powered attacks

Team Cymru links CyberStrikeAI, an open-source AI attack platform, to the threat actor who breached 500+ FortiGate firewalls. The tool automates scanning, exploitation, and post-exploitation using AI orchestration.