1.Autonomous WAF Mitigation: From Validated Exploit to Deployed Defense, Fastblog | 2026-08-03 00:00 | tenzai.com | Original ↗ | .md | #ai-security | #cloud | #agentic-ai
2.Now Detecting: WP2Shell - Pre-Authentication RCE in WordPress Corevulnerability | Critical | 2026-07-17 00:00 | CVE-2026-63030 | ethiack.com | Original ↗ | .md | #rce | #zero-day | #rest-api
3.In WAF we (should not) trustresearch | 2026-03-25 23:00 | blog.quarkslab.com | Original ↗ | .md | #appsec | #web-security | #command-obfuscation
4.Bypassing WAFs for Fun and JS Injection with Parameter Pollutionresearch | 2025-08-04 00:00 | ethiack.com | Original ↗ | .md | #web-security | #xss | #waf
5.Hacker opinion piece | Will artificial intelligence replace hackers?blog | 2025-07-21 12:00 | bugcrowd.com | Original ↗ | .md | #ai-security | #bug-bounty | #automation
6.Recon series #3: HTTP fingerprinting – sleuthing for a web application’s hidden vulnerabilitiesblog | 2025-03-18 14:58 | yeswehack.com | Original ↗ | .md | #bug-bounty | #waf | #cve
7.Sensing and blocking JavaScript SQL injection attacksblog | 2025-03-04 00:00 | aikido.dev | Original ↗ | .md | #sql-injection | #web-security | #waf
8.Whitelisting an IP Address for Penetration Testing in Cloudflareresearch | 2024-02-12 00:31 | projectblack.io | Original ↗ | .md | #waf | #penetration-testing | #cloudflare
9.An Interesting XSS-Bypassing WAFvulnerability | 2023-07-26 10:04 | labs.cognisys.group | Original ↗ | .md | #pentesting | #web-security | #xss
10.Web application firewall bypassblog | 2022-10-11 13:55 | yeswehack.com | Original ↗ | .md | #bug-bounty | #pentesting | #web-security
11.Living with and Learning from Log4Shellblog | 2021-12-16 00:00 | bugcrowd.com | Original ↗ | .md | #supply-chain | #incident-response | #waf
12.Virtual Patching of Vulnerabilities at the Pace of Businessblog | 2021-07-01 13:26 | yeswehack.com | Original ↗ | .md | #vulnerability-management | #incident-response | #waf
13.ZwinK’s Tips and Tricks to Crush Bug Bounty #4 & #5blog | 2021-06-22 00:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #burp-suite | #waf
14.To Add Value to Your Penetration Testing, Allow List Source IPsblog | 2021-06-22 00:00 | netspi.com | Original ↗ | .md | #waf | #penetration-testing | #methodology
15.Are You Giving Out Cheat Codes if You Whitelist Pen Testers?blog | 2020-07-29 00:00 | bishopfox.com | Original ↗ | .md | #waf | #penetration-testing | #methodology
16.Application Self Protection – A New Addition to the OWASP Top 10blog | 2017-06-06 00:00 | netspi.com | Original ↗ | .md | #appsec | #waf | #owasp
17.Bug Bounties and NGWAF: 1+1=3blog | 2016-04-22 00:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #waf | #bugcrowd
18.Thoughts on Web Application Firewallsblog | 2012-10-15 00:00 | netspi.com | Original ↗ | .md | #secure-coding | #sql-injection | #waf
19.SQL Injection: Death by Blacklistvulnerability | 2010-12-22 00:00 | netspi.com | Original ↗ | .md | #sql-injection | #web-security | #waf