Over half of public vulnerabilities bypass web application firewalls

According to a new report 52 percent of public vulnerabilities bypass leading web application firewalls (WAFs). Yet over 91 percent of bypassed vulnerabilities can be mitigated when rules are tailored with AI for the actual vulnerability and application context instead of generic attack patterns. The report from Miggo Security is based on analysis of a sample of 360+ CVEs for WAF testing across leading WAF vendors. It finds that it takes 41 days on average for a CVE-specific WAF rule to be published by leading WAF vendors, while exploit code appears within hours. This mismatch defines the modern exposure window.… [Continue Reading]