Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Web applications suffer continuously evolving attacks, where a web application firewall (WAF) is the first line of defense and a necessary part of organization…
ModSecurity has released fixes for a group of web application firewall (WAF) weaknesses that can let dangerous input reach Linux-hosted applications without be…
The North Korean threat actors behind the Contagious Interview campaign, also tracked as WaterPlum, have been attributed to a malware family tracked as StoatWa…
From zero-day exploits to large-scale bot attacks — the demand for a powerful, self-hosted, and user-friendly web application security solution has never been …
A security researcher has released a new security tool that fends off web-based attacks like…This “teler-waf” Tool Protects Go Apps From Web-based Attacks on L…
Researchers at industrial and IoT cybersecurity firm Claroty have identified a generic method for bypassing the web application firewalls (WAFs) of several maj…
The use of Web Applications is growing amongst businesses, however, that also makes these businesses a target for Cyber Criminals to attack. If there are vulne…
Researchers have found a new malware campaign exploiting vulnerable Microsoft Exchange Servers. The threat actors…Squirrelwaffle Malware Loader Exploits Vulner…
Details have emerged about a new unpatched security vulnerability in Fortinet's web application firewall (WAF) appliances that could be abused by a remote, aut…
Protecting web applications has always been a focus of cybersecurity professionals. That's why they work tirelessly toward developing new toolsWhy WAF is a Mus…
In an era where cyberattacks are constantly on the rise, every business must employ adequate security measures to protect onesHow A WAF Can Benefit A Business …
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers…
Most SaaS teams remember the day their user traffic started growing fast. Few notice the day bots started targeting them.On paper, everything looks great: more…
If you manage Linux systems in production, you already operate with multiple layers in place. Network firewalls, SELinux or AppArmor, IDS and IPS, and regular …
The City of Baltimore was under cyber-attack last year, with hackers demanding $76,000 in ransom. Though the city chose not to pay the ransom, the attack still…
Think your WAF has you covered? Think again. This holiday season, unmonitored JavaScript is a critical oversight allowing attackers to steal payment data while…
Why do the Riskiest SOC Alerts Go Unanswered?Security operations teams are drowning in alerts. But the real problem isn't always alert volume; it's the blind s…
How To Use This ReportEnhance situational awareness of techniques used by threat actorsIdentify potential attacks targeting your industryGain insights to help …
How To Use This ReportEnhance situational awareness of techniques used by threat actorsIdentify potential attacks targeting your industryGain insights to help …
Multiple vulnerabilities have been discovered in ModSecurity Core Rule Set, the worst of which could result in bypassing the WAF.
Multiple issues were found in modsecurity-apache, open source, cross platform web application firewall (WAF) engine for Apache which allows remote attackers to…
A new attack method can be used to circumvent web application firewalls (WAFs) of various vendors and infiltrate systems, potentially enabling attackers to gai…
