#waf
-
Hackers exploit SiteGuard WAF flaw to run commands as root and SYSTEM
A critical OS command injection flaw has been found in the statistics feature of the SiteGuard Server Edition firewall. Attacks are already underway.
-
Attackers Bypass WAFs to Exploit an Oracle PeopleSoft Flaw
Google warns of a renewed wave of mass exploitation against a critical Oracle PeopleSoft flaw, with a ShinyHunters-linked group slipping past WAF rules and dropping web shells.
-
Cloudflare and OpenAI: Vulnerability Discovery That Accounts for Real Traffic
Cloudflare is launching an invitation-only Vulnerability Discovery and Remediation service that ties vulnerabilities found in code to production traffic and tells you what to fix first.
-
Cloudflare Rolls Out WAF Rules to Protect WordPress Against Two Dangerous Vulnerabilities
Cloudflare has released two rules for its web firewall after the WordPress security team reported two high-severity vulnerabilities to it. The company stresses that the protection does not remove the need to update.