Insights, tutorials, and news about Web Application Firewalls and application security.
Palo Alto Networks patches CVE-2026-0227, a high-severity DoS flaw in PAN-OS that lets unauthenticated attackers push firewalls into maintenance mode. Nearly 6,000 devices are exposed online.
SecureIQLab has published the first independent methodology for validating AI security solutions, spanning 32 validation scenarios across three security layers. Up to 20 vendors are considered for validation, spanning pure-play LLM firewalls, broader AI security solutions, and API security and edge platforms offering LLM protection. The methodology measures both prevention and detection, penalizin
HAProxy Technologies has launched HAProxy Fusion 2.0 and HAProxy Unified Gateway 1.0 at KubeCon Amsterdam. Fusion 2.0 introduces centralized security policy management with Security Profiles, a visual Threat-Response Matrix, and a unified security control plane for WAF, bot management, and DDoS protection. Built on HAProxy Enterprise 3.2 LTS, it includes native Kubernetes deployment via a new Oper
Radware spin-off Skyhawk Security now maps AI-driven cloud attack simulations to five named adversary groups including Scattered Spider and APT29, helping teams prioritize defenses based on actual threats.
HPE expands its hybrid mesh firewall platform with AI visibility controls, keyword filtering for AI tools, and the new SRX440 appliance. Announced at RSAC 2026, all features ship in Q2.
Cloudflare launches Dynamic Workers in open beta, an isolate-based sandbox for AI agent code that starts 100x faster than containers. The security implications for edge WAF providers are significant.
CISA gives federal agencies three days to patch CVE-2026-20131, a CVSS 10 RCE flaw in Cisco Secure Firewall Management Center already exploited by Interlock ransomware since January.
At RSAC 2026, hot new cybersecurity tools were announced Monday by vendors including Palo Alto Networks, CrowdStrike, Cisco and Arctic Wolf.
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch a maximum-severity vulnerability, CVE-2026-20131, in Cisco Secure Firewall Management Center (FMC) by Sunday,
Cloudflare makes AI Security for Apps generally available, adding LLM threat detection to its WAF. AI endpoint discovery is now free for all plans, giving teams visibility into shadow AI deployments.
Sansec discloses PolyShell, a critical Magento REST API flaw that lets unauthenticated attackers upload malicious files for RCE and account takeover. All versions up to 2.4.9-alpha2 are affected.
The U.S. DoJ disrupted four IoT botnets that infected 3 million devices and launched record-breaking 30 Tbps DDoS attacks. Akamai, Cloudflare and other tech firms assisted the takedown.