Insights, tutorials, and news about Web Application Firewalls and application security.
DDoS attacks surged 150% in H2 2025. Gcore reports 1.3 million attacks in Q4 alone. Cloudflare mitigated 47.1 million over the year, peaking at 31.4 Tbps. Attack durations under 60 seconds make manual response useless.
SecureIQLab today announced that its SOCx AI-Driven Cloud Security Validation Platform has integrated AI Security CyberRisk Validation as its fourth active methodology, joining Advanced Cloud Firewalls (ACFW),
Cloudflare, AMD, and WebPros collaborate to build an AI hosting stack, combining cloud infrastructure, processors, and hosting tools for scalable AI deployment.
Gartner formalized the hybrid mesh firewall category in 2025. Check Point, Fortinet, and Cisco are the three vendors leading the space. Here is how they compare and what it means for WAF buyers.
Palo Alto Networks patches CVE-2026-0227, a high-severity DoS flaw in PAN-OS that lets unauthenticated attackers push firewalls into maintenance mode. Nearly 6,000 devices are exposed online.
SecureIQLab has published the first independent methodology for validating AI security solutions, spanning 32 validation scenarios across three security layers. Up to 20 vendors are considered for validation, spanning pure-play LLM firewalls, broader AI security solutions, and API security and edge platforms offering LLM protection. The methodology measures both prevention and detection, penalizin
HAProxy Technologies has launched HAProxy Fusion 2.0 and HAProxy Unified Gateway 1.0 at KubeCon Amsterdam. Fusion 2.0 introduces centralized security policy management with Security Profiles, a visual Threat-Response Matrix, and a unified security control plane for WAF, bot management, and DDoS protection. Built on HAProxy Enterprise 3.2 LTS, it includes native Kubernetes deployment via a new Oper
Radware spin-off Skyhawk Security now maps AI-driven cloud attack simulations to five named adversary groups including Scattered Spider and APT29, helping teams prioritize defenses based on actual threats.
HPE expands its hybrid mesh firewall platform with AI visibility controls, keyword filtering for AI tools, and the new SRX440 appliance. Announced at RSAC 2026, all features ship in Q2.
Cloudflare launches Dynamic Workers in open beta, an isolate-based sandbox for AI agent code that starts 100x faster than containers. The security implications for edge WAF providers are significant.
CISA gives federal agencies three days to patch CVE-2026-20131, a CVSS 10 RCE flaw in Cisco Secure Firewall Management Center already exploited by Interlock ransomware since January.
At RSAC 2026, hot new cybersecurity tools were announced Monday by vendors including Palo Alto Networks, CrowdStrike, Cisco and Arctic Wolf.