The cloud represents a gamechanger in the way businesses access and use technology, but it’s also brought with it major implementation challenges. The most fundamental of these is simply that the cloud comprises multiple services and platforms, which …
Tag: Web application firewall
Security Vendor News
Bad Bots and the Commoditization of Online Fraud
by Erez Hasson •
Fraudsters will stop at nothing to exploit your websites and customers, and with the accelerated shift to digital payments, online fraud has never been more profitable. This shift, catalyzed by the pandemic, really gained traction in 2021 as the popularity of digital payments exploded. In fact, compared to 2020, online payments more than doubled in […]
The post Bad Bots and the Commoditization of Online Fraud appeared first on Blog.
Europe, Global Security News, North America
Evasive Bots Drive Online Fraud – 2022 Imperva Bad Bot Report
by Erez Hasson •
The 2022 Imperva Bad Bot Report is now available. The report is the ninth annual in-depth analysis of bot traffic, created with data collected from Imperva’s global network throughout the past year by the Imperva Threat Research Team. Bad bots are soft…
Europe, Global Security News, North America
A New Security Approach for the New Age of Multi-Cloud
by Eyal Arazi •
Most organizations today deploy web applications across multi-cloud and hybrid environments. However, existing models for application security are obsolete and no longer up to the task of providing high-grade, consistent, and frictionless application …
Security Vendor News
Imperva Protects from New Spring Framework Zero-Day Vulnerabilities
by Daniel Johnston •
New zero-day Remote Code Execution (RCE) vulnerabilities were discovered in Spring Framework, an application development framework and inversion of control container for the Java platform. The vulnerability potentially leaves millions of applications at risk of compromise. In two separate disclosures, zero-day RCE vulnerabilities were revealed in the Cloud and Core modules of Spring Framework. Spring […]
The post Imperva Protects from New Spring Framework Zero-Day Vulnerabilities appeared first on Blog.
Security Vendor News
API Gateway or not, You Need API Security
by Bruce Lynch •
To build and deploy apps in a fast-paced, iterative process, cloud-native developers in organizations on the digital transformation journey rely on APIs for communication. With at least 90% of developers using APIs in cloud-native web application development, organizations are reviewing their API security strategies to ensure that security moves in lockstep with innovation. Organizations need […]
The post API Gateway or not, You Need API Security appeared first on Blog.
Security Vendor News
5 Ways to Determine if you do Cybersecurity or Cybersecurity Theater
by Bruce Lynch •
For a sentient species, humans, in general, have curious ideas when it comes to reckoning and responding to risk. For example, studies show using seat belts when driving in automobiles save lives. Studies also show when cyclists use helmets more cyclists’ lives are saved. This research drives prolific seat belt and helmet use among auto […]
The post 5 Ways to Determine if you do Cybersecurity or Cybersecurity Theater appeared first on Blog.
Europe, Global Security News, North America, Vulnerabilities
Salt Security Survey Surfaces API Security Weaknesses
by Michael Vizard •
A survey of more than 250 security, application and DevOps executives and professionals published today by Salt Security found 95% of respondents experienced a security incident involving application programming interfaces (APIs) in the last 12 months…
Europe, Global Security News, North America
What is Shift-Left Testing and What are the Benefits?
by Nik Hewitt •
Back in the infancy of software creation, certainly up until the mid-90s when we still used more traditional software development practices, most testing was conducted at the end of the production cycle (on a graph, this would be to the right on the de…
Security Vendor News
Log4Shell log4j Remote Code Execution – The COVID of the Internet
by Vitaly Simonovich •
The Log4Shell zero day vulnerability is truly one of the most significant security threats of the past decade and its effects will be felt far into 2022 and beyond. Imperva has observed over 102M exploitation attempts across thousands of sites protected by Imperva Cloud Web Application Firewall (WAF). In the days following, the team at […]
The post Log4Shell log4j Remote Code Execution – The COVID of the Internet appeared first on Blog.
Security Vendor News
2021 in Review, Part 4: 5 Cybersecurity Topics to Watch in 2022
by Bruce Lynch •
One of the core principles of cybersecurity is not letting things “slip through the cracks”. An effective security posture depends on visibility. The more visibility you have into the environments where your data is, the more successful you will be in applying your organization’s security protocols and identifying suspicious behavior. Here are five cybersecurity issues […]
The post 2021 in Review, Part 4: 5 Cybersecurity Topics to Watch in 2022 appeared first on Blog.
Security Vendor News
2021 in Review, Part 2: 5 Top Cybersecurity Stories
by Bruce Lynch •
Ransomware may have dominated headlines in 2021, but it’s only one of many threats security teams must protect against. We’re taking a look back at 5 top cybersecurity stories of 2021 that practitioners wanted to learn more about. 5. The State of Security in eCommerce Why you should learn more about this The global pandemic […]
The post 2021 in Review, Part 2: 5 Top Cybersecurity Stories appeared first on Blog.
Security Vendor News
Protecting today’s web applications requires more than a firewall
by Bruce Lynch •
The way organizations build web applications has changed dramatically over the last several years. As a result, many organizations are considering additional security strategies to augment the Web Application Firewall (WAF) on which they have relied to protect critical digital business operations from vulnerabilities. New technology has created a development environment where the web application […]
The post Protecting today’s web applications requires more than a firewall appeared first on Blog.
Europe, Global Security News, North America
Best practices in WAF gateways to meet the demands of digital transformation
by eyalgur •
Every day, digital transformation is changing every organization’s threat landscape. As a result, they are facing a dilemma about where and how to deploy their application security solution. One of the most common approaches that organizations take is …
Europe, Global Security News, North America
The Risks Of False Positives With Web Application Firewalls
by Ritika Singh •
In order to stay abreast with the pace of web application development in the current age, automated tools are required for vulnerability testing in order to help with finding such.
The post The Risks Of False Positives With Web Application Firewalls ap…
Security Vendor News
Financial Services: Web Application Attacks Grow by 38% In First Half of 2021
by Terry Ray •
During his career in the middle of the last century, professional bank robber Willie Sutton made off with an estimated $2 million in stolen money. Urban legend has it that when a journalist asked Sutton why he robbed banks, he replied, “That’s where the money is.” In later interviews, Sutton disclaimed the quote. Regardless, the […]
The post Financial Services: Web Application Attacks Grow by 38% In First Half of 2021 appeared first on Blog.
Security Vendor News
Brace yourselves: Holiday shopping season is coming
by Erez Hasson •
The E-commerce market has seen tremendous revenue growth during the pandemic. Along with that good news for E-business, there has been an increase in fraudulent activities online that may cost retailers over $20 billion in losses by the end of 2021. According to eMarketer, worldwide retail E-commerce sales posted a 27.6% year-over-year growth rate in […]
The post Brace yourselves: Holiday shopping season is coming appeared first on Blog.