A WAF Is Not a Patch
- 1371 words
- 7 min read
A web application firewall buys you time and visibility, but it does not remove the vulnerability. What a WAF and virtual patching can and cannot do, and what engineering teams still owe.
A web application firewall buys you time and visibility, but it does not remove the vulnerability. What a WAF and virtual patching can and cannot do, and what engineering teams still owe.
Two critical flaws in the PHP runtime, CVE-2026-109618 and CVE-2026-109619, can allow unauthenticated remote code execution. Here is what the advisories and public reports say, how a WAF and layered controls help, and how to patch PHP and your Docker images.
F-Secure identified 301 threats targeting smartphones and tablets. In 2011, Android reached 66% and this year 79% of viruses created for mobile devices.
Tips to protect consumers on this special date, "Mother's Day", when malicious websites and links turn your gift into a nightmare.
Malware causes insecurity among Brazilians who use "internet banking" as a convenient tool.