Web application firewall
219
MENTIONS
78
EPISODES
66
PODCASTS
Search complete. 219 mentions across 78 episodes found for "Web application firewall".
Oct 29, 2026
Andy MartinGUEST
It's a great point.
Andy MartinGUEST
I think the liability risk with vibing one's own patch for something versus trying to block that with, say, a WAF rule or dynamic configuration on the way in, there's a better offset for liability and pushing it out was centralized into the whole organization.
Andy MartinGUEST
But that does require somebody to have identified that in the first place.
Andy MartinGUEST
And this kind of abstract window of, you know, if something's reported, the chances of reproduction from a frontier model with find bad things, I believe is what somebody types in to get the PHP exploits out of a frontier Red Team model.
Ryan LucasHOST
I guess the key takeaway is that ASN volume is an unreliable proxy for threat activity, and cloud workloads are portable and can move providers within hours.
Ryan LucasHOST
Detection key on behavior such as shared TLS fingerprints, request rates, and WAF rules with very sensitive endpoints.
Matt KohnHOST
So what I'm hearing is they have properly configured, they're designed for failure, people running these bots, and they have full HA and DR capabilities, and this is what every business should strive for.
Matt KohnHOST
And it shows it's a business.
1 HR LATER
Matt KohnHOST
ECS in like 2016.
Ryan LucasHOST
ECS Gateway is an account-level resource that dynamically provisions all the ALBs, certificates, and DNS hostnames, the listener rules, target groups, security groups, the flavors, the logos, and all of the things that are needed for allowing ingress to your ECS service.
Ryan LucasHOST
Formalizes a platform team versus application team split where the platform team defines subnets, security groups, TLS listeners, WAF, and associate the gateway with the clusters.
Ryan LucasHOST
And then the app team just adds the connectors to a create service or update service.
Artificial IntelligenceNARRATOR
300 requests in 5 minutes.
Artificial IntelligenceNARRATOR
How we chose the web application firewall.
Artificial IntelligenceNARRATOR
WAF, limit for the token route.
Artificial IntelligenceNARRATOR
By Daniil Romashov.
Bastien DollaGUEST
And I think it was Brazil.
Bastien DollaGUEST
So according to countries, people were not... being able to connect rail because the WAF was stopping those countries and we couldn't understand.
Bastien DollaGUEST
The support was like, I don't understand.
Bastien DollaGUEST
It doesn't work in Brazil, but it works fine in Spain.
Bastien DollaGUEST
And it was because we had this bug that, you know, it was one country was actually considered as one person.
Bastien DollaGUEST
And when all the clients came back online, the rate limitation on the WAF were just stopping that country from getting online.
Bastien DollaGUEST
So that was an example we were like, and so luckily we found the problem quite fast and solved it, but it was pretty bad.
Bastien DollaGUEST
And one of the things is that at Rayon, we really want to build a tool that is core to the professional life of people.
AlexHOST
The patches essentially tell attackers where the vulnerability is, and proof-of-concept exploits were circulating within hours.
AlexHOST
Cloudflare reported a significant spike in command injection attacks, with that category jumping to over 11% of all mitigated WAF requests between October 20th and 22nd, up from under 6% in the days before.
AlexHOST
So the signal was there.
AlexHOST
However, by October 22, SANSEC updated their assessment to note that mass exploitation appeared less likely than initially feared.
Gary IllyesGUEST
So if it's important for the site owner, then they will have to make a decision about, as you said, who bears the cost of authentication.
Gary IllyesGUEST
Nowadays, it's either WAF, like a web application firewall, like Cloudflare or Akamai or whatever, who historically acted just as a CDN.
Gary IllyesGUEST
But nowadays, they step more and more into the web application firewall business as well.
Gary IllyesGUEST
Or the site owner can also, might just deploy their own authentication methods for crawlers.
Byron DeLaMatreGUEST
So you got to be prepared to act and apply and patch and then have multiple layers.
Byron DeLaMatreGUEST
You want to make sure you have a WAF, perhaps even multiple WAFs.
Byron DeLaMatreGUEST
As an example here, if you were using a PHP-based firewall, such as the very popular WordFence, that would not have been effective because the attack occurred before the request would even reach WordFence.
Byron DeLaMatreGUEST
So yeah, multiple layers.
Adam BrewerHOST
So we probably need to get to that.
Andy JhaHOST
Yeah, so one of the things that if you are hosting websites like this that you can do is, you know, if it's important enough, have some sort of WAF protection, web application firewall, right? And so that inspects traffic and blocks known attack patterns before they reach your server.
Andy JhaHOST
Cloudflare is like a vendor in that area.
Andy JhaHOST
That's one of the largest ones.
Andy JhaHOST
I host a few websites that are also protected by Cloudflare just on the free plan.
Andy JhaHOST
So if it's a really, really small, you know, just for yourself, have something available like that.
Andy JhaHOST
Or if you're a large company, you can purchase like a WAF.
Andy JhaHOST
Other WAF vendors like Microsoft Azure WAF, as well as like Akamai, those are a couple other big ones, also shipped protections for this prior to it going live.
Mike SchemaHOST
And I want to dig into a little bit more because 90 days, a single quarter sounds wonderfully fast for for for an org to do.
Mike SchemaHOST
And there are also going back to that idea of classic WAF mode for for just a brief second.
Mike SchemaHOST
I'm using that as a bit of a metaphor.
Mike SchemaHOST
You can have EBPF that I said just it's just pure observability and you're feeding into your sim.
Rashid FerozeGUEST
So this is how we try to do it, but it is going to be difficult.
Rashid FerozeGUEST
You still have to observe for a few months and then slowly.
Rashid FerozeGUEST
But at least you're able to detect, right? Previously, you were in complete blind spot, right? Because your WAF might not give you that data, right? Or any other security product might not give you that data because everything is so...
Rashid FerozeGUEST
working on different planes, right? Your CSPM is working in a different plane.
Troy HuntHOST
So dystopian governments could have signed their own certificates and intercepted any TLS traffic.
Troy HuntHOST
Anyone working in a position such as Cloudflare, Maybe not the best example because they do interception by design anyway so that they can do caching, WAF rules, everything else.
Troy HuntHOST
An ISP could do that.
Troy HuntHOST
Someone sitting on the network who can intercept your traffic could do that.
68 more episodes mention Web application firewall.
Create an account to see the whole feed, search across every transcript, and follow the entities you care about.