Insights, tutorials, and news about Web Application Firewalls and application security.
The U.S. DoJ disrupted four IoT botnets that infected 3 million devices and launched record-breaking 30 Tbps DDoS attacks. Akamai, Cloudflare and other tech firms assisted the takedown.
Cloudflare CEO Matthew Prince predicts AI bot traffic will surpass human traffic online by 2027. The shift has major implications for WAF operators and bot management strategies.
Cloud misconfigurations remain one of the biggest preventable security risks in 2026. Open storage buckets, overly permissive IAM roles, and default credentials keep causing breaches that cost billions.
AWS reveals that the Interlock ransomware group has been exploiting a critical Cisco firewall zero-day (CVE-2026-20131) since January. The CVSS 10 flaw allows unauthenticated remote code execution as root.
AWS researchers reveal the Interlock ransomware group exploited a maximum-severity Cisco firewall flaw for over five weeks before Cisco disclosed the vulnerability.
HAProxy earns 78 badges including 25 Leader positions in G2 Spring 2026 Grid Reports, maintaining a perfect satisfaction score across WAF, DDoS Protection, and Bot Detection categories.
Every year, security vendors publish threat reports. Most say variations of the same thing. But Barracuda’s Managed XDR Global Threat Report stands out for a reason that matters to MSPs: it’s built on ...
New approach to application security in production at 11 companies analyzes code behavior at runtime rather than relying on CVEs or external defenses. PALO ALTO, Calif., March 18, ...
Red Access, the agentless platform built to simplify security across all browsers, is introducing a firewall-native SSE, an agentless cloud layer that instantly upgrades any existing firewall with modern Security Service Edge (SSE),
SentinelOne’s Singularity AI SIEM integrates Cloudflare Logpush telemetry to strengthen enterprise security posture ...
F5 announced major updates to its Application Delivery and Security Platform at AppWorld, including a new observability tool, post-quantum cryptography for BIG-IP WAF, and agentic AI support for NGINX.
Cloudflare Inc. (NYSE:NET) operates as a cloud services provider that delivers a range of services to businesses worldwide.
F5 CEO Francois Locoh-Donou argues that AI workloads are making hybrid multi-cloud even more complex, pushing enterprises toward consolidated delivery and security platforms.
IO River leverages WebAssembly to decouple WAF engines from CDN providers, starting with Check Point on Akamai. The goal: run your preferred WAF everywhere without vendor lock-in.
Red Access launches agentless SSE that layers on top of existing firewalls from Palo Alto, Fortinet, Cisco, and Check Point. Deployment in hours, not months.
F5 rolls out AI-powered WAF risk scoring, automated AI vulnerability remediation, bot defense for agentic AI, and post-quantum cryptography readiness across its ADSP platform.
Red Access, the agentless platform built to simplify security across all browsers, GenAI, SaaS and corporate apps, today announced Firewall-Native SSE, an agentless cloud layer that instantly upgrades any existing firewall with modern Security Service Edge (SSE),
User-driven recognition highlights HAProxy’s leadership in Load Balancing, WAF, and DDoS Protection for scaling modern ...
Cloudflare's new Web and API Vulnerability Scanner goes beyond traditional WAF rules by actively probing for logic flaws like Broken Object Level Authorization, the top threat on the OWASP API Security Top 10.
Chinese cybersecurity vendor NSFOCUS details its integrated web security architecture, pairing WAF capabilities with host-based tamper proofing for end-to-end protection against web application attacks.
Radware's new Alteon Protect separates cloud-based threat detection from on-device enforcement, letting organizations add WAF, bot, API, and DDoS protection to existing ADC infrastructure without rerouting traffic or sharing SSL certificates.
Sansec open-sources Yargo, a pure Go YARA engine optimized for web source code. 6.8x faster than go-yara, processing 57K scans/day in production. MIT licensed.
Akamai is projecting 45-50% cloud growth in 2026 and pushing hard into AI inference with NVIDIA GPUs. The security business that built this company is now "Act 2" in a three-act strategy. What does that mean for WAF customers?
Critical CVE-2026-1492 in WPEverest's User Registration plugin (60K+ sites) lets attackers create admin accounts without authentication. Wordfence blocked 200+ attacks in 24 hours. Patch to 5.1.4 now.
SafeLine, a self-hosted open-source WAF, targets SaaS bot abuse with semantic traffic analysis and 99.45% claimed detection accuracy. A viable option for teams that need full control over traffic inspection.
Ukrainian telecom Datagroup partners with Akamai to offer pay-as-you-go cloud WAF to small and medium businesses, lowering the barrier to enterprise-grade web application protection in a high-threat market.
Team Cymru links CyberStrikeAI, an open-source AI attack platform, to the threat actor who breached 500+ FortiGate firewalls. The tool automates scanning, exploitation, and post-exploitation using AI orchestration.
Cisco patches two CVSS 10.0 flaws in Secure Firewall Management Center. Both allow unauthenticated remote attackers to gain root access. Fourth max-severity firewall flaw in 8 months.