New WAF intelligence feeds
July 07, 2022 1:57PM
Cloudflare is expanding our WAF’s threat intelligence capabilities by adding four new managed IP lists that can be used as part of any custom firewall rule...
Cloudflare observations of Confluence zero day (CVE-2022-26134)
June 05, 2022 9:54PM
Vulnerabilities WAF Zero Day ThreatsOn 2022-06-02 at 20:00 UTC Atlassian released a Security Advisory relating to a remote code execution (RCE) vulnerability affecting Confluence Server and Confluence Data Center products. This post covers our current analysis of this vulnerability...
The end of the road for Cloudflare CAPTCHAs
April 01, 2022 2:31PM
Managed Challenge CAPTCHA WAF Security BotsWe decided we’re going to stop using CAPTCHAs. Before we talk about how we did it, and how you can help, let's first start with a simple question. Why in the world is CAPTCHA still used anyway?...
WAF mitigations for Spring4Shell
March 31, 2022 4:13PM
WAF Security CVE VulnerabilitiesCloudflare Managed Ruleset updates for the recent vulnerabilities affecting the Java Spring framework and related software components...
WAF for everyone: protecting the web from high severity vulnerabilities
March 15, 2022 12:59PM
Security Week WAF Managed Rules FreeWe are excited to provide our new Cloudflare Web Application Firewall, with a Free Managed Ruleset to all Cloudflare users...
More Posts
March 15, 2022 12:59PM
Improving the WAF with Machine Learning
Today we are excited to complement managed rulesets (such as OWASP and Cloudflare Managed) with a new tool aimed at identifying bypasses and malicious payloads without human involvement, and before they are exploited...
-
By