4 posts
Always-on detections: eliminating the WAF “log versus block” trade-off 2026-03-04 Daniele Molteni Traditional Web Application Firewalls typically require extensive, manual tuning of their rules before they can safely block malicious traffic. When a new application is deployed, s…
Toxic combinations: when small signals add up to a security incident 2026-02-27 Bashyam Anant Himanshu Anand At 3 AM, a single IP requested a login page. Harmless. But then, across several hosts and paths, the same source began appending ?debug=true — the sign of an attacker pro…
Google’s AI advantage: why crawler separation is the only path to a fair Internet 2026-01-30 Maria Palmieri Sebastian Hufnagel Earlier this week, the UK’s Competition and Markets Authority (CMA) opened its consultation on a package of proposed conduct requirements for Google. Th…
How we mitigated a vulnerability in Cloudflare’s ACME validation logic 2026-01-19 Hrushikesh Deshpande Andrew Mitchell Leland Garofalo This post was updated on January 20, 2026. On October 13, 2025, security researchers from FearsOff identified and reported a vulnerability in Cl…