Back to blog

Follow and Subscribe

Security

Page 4 of 20

React2Shell Continued: What to know and do about the 2 latest CVEsFastly Security Research Team
In the wake of the critical severity React2Shell CVEs, two new CVEs exploiting similar Next.js and React components were announced on December 11. Learn more about these new CVEs.
SecurityIndustry insights
The Sleep Test: How Embracing Chaos Unlocks API ResilienceLorraine Bellon, Anna Jensen
Learn how Fastly's API Discovery and new Inventory feature unlock API resilience for platform engineers by embracing chaos and strategic, thoughtful planning.
SecurityProduct
DDoS in November David King, Liam Mayron
DDoS attackers were largely absent on Black Friday 2025. Fastly’s latest report reveals why, and what the shifting attack patterns mean for your apps and APIs.
SecurityIndustry insights
Prepare for peaks
Black Friday is Dead, Long Live Black Friday: Cyber 5 Traffic InsightsRobyn Bean, Alec Olslund
Black Friday isn’t the traffic spike it used to be. Fastly’s data shows holiday demand now stretches across all of November. Here’s what Cyber 5 2025 really looked like.
SecurityCDN & Delivery+2
An illustration of a shield with arrows and a server behind it
How React2Shell is evolving: Industries and regions targetedKelly Shortridge
Fastly is seeing sustained React2Shell attacks across all industries and regions. Learn what’s happening and the critical steps enterprises should take to patch vulnerable apps.
SecurityIndustry insights
Fastly’s Proactive Protection for React2Shell, Critical React RCE CVE-2025-55182 and CVE-2025-66478Kelly Shortridge
Protect your apps from the critical React RCE bugs (CVE-2025-55182/66478). Fastly's NGWAF Virtual Patch provides proactive defense.
Security
CAPTCHAs Are Costing Retailers Customers — Heavy AI Users Are the First to Walk AwayAlina Lehtinen-Vela
Our original survey of 881 online shoppers shows CAPTCHAs are quietly killing conversions especially among heavy AI users.
AISecurity
An illustration of a shield with arrows and a server behind it
Mitigating DDoS attacks faster and with even more accuracyLiam Mayron, David King
Learn how Fastly's Adaptive Threat Engine update for DDoS Protection boosts mitigation accuracy and reduces Mean Time to Mitigation by 72% for the holidays.
SecurityProduct
Fastly's resilient architecture helps prevent outages and mitigate severity
Outages, Attacks, and a Need for ResilienceAustin Spires
Cloud outages are a stark reminder of our digital economy's fragility. Learn how Fastly mitigated a major traffic failover and concurrent DDoS attacks with zero disruption.
CDN & DeliveryEdge network+3
Wikipedia Tells AI Companies to "Stop Scraping"Natalie Griffeth
Wikipedia cracks down on AI scraping, citing server strain and lost traffic. See why publishers are fighting back and turning to bot management.
SecurityIndustry insights
The New 2025 OWASP Top 10 List: What Changed, and What You Need to KnowNatalie Griffeth
The 2025 OWASP Top 10 list is here! Discover what changed, the two new categories, and how to secure your applications against emerging threats.
Security
Increasing the accessibility of managed security servicesCody Arnold
Make world-class protection accessible. Fastly’s new Managed Security Professional delivers 24/7 expert defense for your most critical apps and APIs.
ProductSecurity
Your API Catalog Just Got an UpgradeLorraine Bellon, Anna Jensen
Discover, monitor, and secure your APIs with Fastly API Discovery. Get instant visibility, cut the noise, and keep your APIs secure and compliant.
SecurityProduct
3 Costly Mistakes in App and API Security and How to Avoid ThemDavid King, Ashley Hurwitz
Avoid costly app and API security mistakes. Learn how to streamline WAF evaluation, estimate TCO, and embrace agile development for optimal security.
SecurityDevOps
DDoS in SeptemberLiam Mayron, David King, +1
Fastly's September 2025 DDoS report details modern application attacks. Get insights and guidance to strengthen your security initiatives.
SecurityIndustry insights
In AI We Trust? Increasing AI Adoption in AppSec Despite Limited OversightNatalie Griffeth
AI adoption in AppSec is soaring, yet oversight lags. Explore the paradox of trust vs. risk, false positives, and the future of AI in application security.
SecurityAI+1
Design for Chaos: Fastly’s Principles of Fault Isolation and Graceful DegradationBrian Haberman
Learn how Fastly builds a resilient CDN through fault isolation & graceful degradation. Discover our principles for minimizing disruption & ensuring continuous service.
CDN & DeliveryEngineering+3
Fastly's Seven Years of Recognition as a Gartner® Peer Insights™ Customers’ ChoiceKim Ogletree
Fastly was named a 2025 Gartner® Peer Insights™ Customers’ Choice for Cloud WAAP, marking seven consecutive years of recognition driven by customer trust and reviews.
Company newsSecurity+1
Make Sense of Chaos with Fastly API DiscoveryLorraine Bellon, Anna Jensen
Discover, monitor, and secure your APIs with Fastly API Discovery. Get instant visibility, cut the noise, and keep your APIs secure and compliant.
SecurityProduct
Teach Your robots.txt a New Trick (for AI)Brooks Cunningham, Fastly Enterprise Solution Architects
Control how AI bots like Google-Extended and Applebot-Extended use your website content for training. Update your robots.txt file with simple Disallow rules.
CDN & DeliverySecurity+2