Topic
Security systems that filter and monitor HTTP traffic to web applications, blocking common exploits like SQL injection and cross-site scripting.
Cloudflare ran frontier AI models through 45 scenarios that mutated already-blocked attacks, logging 1,107 attempts and 49 findings after human triage. The findings led to three changes in its Managed Ruleset.
Reality
ShinyHunters is mass-exploiting PeopleSoft systems that added firewall rules after the summer breaches but skipped Oracle's patch, Mandiant said. For operators that wrote a filter and stopped, the remedy in the report is the patch Oracle already shipped.
Reality
Huskeys closed $27m five months after leaving stealth, with Blackstone leading what Globes calls the firm's first early-stage cybersecurity round. The cheque is worth about 0.002% of its assets.
Perspective Coverage
3 publishersReality
The invitation-only service takes read access to authorized repositories and ranks findings by whether the route is deployed, busy and already covered by a WAF rule, then proposes a fix, pre-checks it, and hands you the approval.
Reality
Wordfence has blocked nearly 200,000 attempts against CVE-2026-32475 since August 19. Because the payload is a PHP file already sitting in the uploads tree, upgrading to 4.2.2 tells you nothing about whether you were hit.
Perspective Coverage
3 publishersReality
AWS WAF's Bot Control can now answer an AI agent with an HTTP 402 and payment instructions. The action runs only on CloudFront distributions, and AWS says the classification behind it is probabilistic and should be tested first.
Reality
The company says the architecture around a bug matters more than how fast the patch ships, and it is making that case on a stack built from its own products after watching an AI assistant fix bugs and break their dependencies.
Reality
A dev.to teardown argues static IP blocklists cannot survive CGNAT and 100,000-address proxy pools, so edge defence moves to the fields a kernel writes into the first SYN: initial window, MSS, option ordering.
Reality
Adobe scored CVE-2026-75650 at 10.0 and hotfixed it outside the normal cycle after exploitation had already started. Imperva reports attempts against sites in 15 countries and backdoors dressed as system processes.
Reality