Security
Page 7
-
Log4j JNDI Attack Signal Now Available
Daniel Corbett
We are excited to announce the general availability of our new LOG4J-JNDI attack signal, which allows for detecting and mitigating Log4Shell attacks.
SecurityProduct -
A QUIC chat with Jana Iyengar: Rebuilding fundamental standards of the web
Anil Dash
A can’t-miss conversation with Fastly’s VP of Product, Infrastructure Services, Jana Iyengar about getting his hands dirty among a whole community of brilliant people who have been busy rebuilding the fundamental standards that underpin the internet that we all use every day.
Industry insights+ 3 more -
Private Access Tokens and the Future of Anti-Fraud
Robert Gibson
Learn how the new authorization protocol, Private Access Tokens, is changing how DevOps teams and security professionals fight against fraudulent activity:
PrivacySecurity -
AWS Lambda and Cloud WAF upgrades for wider deployment | Fastly
Julie Rockett
WAF deployment flexibility is critical to keep up with the pace of business. That’s why we innovate on the widest range of WAF deployment methods in the market.
Security -
Interview with HUMAN CEO Tamer Hassan
Lakshmi Sharma
Fastly announced a reseller partnership with HUMAN Security, Inc. to better safeguard enterprises and internet platforms from sophisticated bot attacks and fraud. We sat down with HUMAN CEO and Co-founder Tamer Hassan to learn more about bots, and what HUMAN is doing to protect its customers from the threat.
Platform+ 2 more -
Automating and Defending Nefarious Automation
Fastly Security Research Team, Simran Khalsa
If your application is on the internet, chances are it has been subjected to nefarious automation. These events can include many different attacks – including content scraping, credential stuffing, application DDoS, web form abuse, token guessing, and more.
Security -
Pro Tips: Next-Gen WAF Mastery
The Fastly Security Technical Account Management Team
Learn how you can use your next-gen WAF effectively, along with best practices.
Security -
Future security trends for 2022/2023 | Fastly
Mike Johnson
The world changed when the pandemic hit in 2020, leaving organizations unsure of how it would affect the future. Security leaders may have found themselves wondering if their long-standing business approaches, processes, and tools could withstand the changes brought on by the pandemic.
Security -
What is TLS Fingerprinting?| Fastly
Fastly Security Research Team, Xavier Stevens
TLS fingerprinting has become a prevalent tool to help security defenders identify what clients are talking to their server infrastructure.
Security -
The Signals Series, Part 1: Exploring Custom Signals
Liz Hurder
Traditional web application firewalls (WAFs) were created to stop malicious traffic from reaching your origin servers, which served its purpose well during an internet age of HTML and PNGs.
ProductSecurity -
Fastly Wins 2 Cybersecurity Awards | Fastly
Julie Rockett
The RSA Conference (#RSAC) is here again, and we at Fastly couldn’t be more excited. It’s the first time the world-leading conference has been in-person since 2020, and we are thrilled to be reunited with friends, colleagues, and the entire security industry at San Francisco’s Moscone Center. And we’re excited for more than just who we’ll see and what we’ll learn at RSAC. During cybersecurity’s biggest week, Fastly has been honored with two industry awards.
Security -
Virtual Patching with the Fastly Next-Gen WAF
Blake Dournaee
From bureaucratic red tape to chained dependencies patching servers has been a pain in the industry for years. This is why WAF-based virtual patching was introduced.
SecurityProduct -
Future of web app/API security: Dept. of Know Live! | Fastly
Margaret Arakawa
Every Thursday in March, we hosted industry thought leaders on “The Dept. of Know Live!” Web Series to chat about trends in web app and API security. Read on to learn more about our takeaways from the series, how it resonated with our audience, and where we go from here.
Industry insightsSecurity -
Threat hunting network callbacks in WAF data
Fastly Security Research Team, Xavier Stevens
Threat hunting is the practice of looking for active attackers who have possibly penetrated security boundaries within an organization. WAF data can be a valuable resource in threat hunting for network callbacks. Here’s how.
Security -
Deadlock bugs: circular waits of torment | Fastly
Kelly Shortridge
This post will illuminate how deadlock bugs emerge, some facets of their fascinating and frustrating strangeness, and guidance on how to handle them in your own systems.
Security -
Join Fastly Security Labs: Try New WAF Features | Fastly
Daniel Corbett
Today, we’re happy to announce the launch of Fastly Security Labs, a new program that empowers customers to continuously innovate by being the first to test new detection and security features — ultimately shaping the future of security.
Security -
Dept. of Know Live: Tips for asset management | Fastly
Daniel Miessler
Founder of Unsupervised Learning Daniel Miessler joined hosts Kelly Shortridge and Bea Hughes on The Dept. of Know Live! to chat about why we can’t ignore asset management’s role in security. In this blog post, Daniel shares highlights from the conversation.
Security -
Introducing GraphQL Inspection for the Fastly Next-Gen WAF
James Nguyen
GraphQL is fast gaining popularity, and we’re excited to announce that we now support GraphQL Inspection in our Fastly Next-Gen WAF (powered by Signal Sciences).
Security -
Spring: CVE-2022-22963 & Spring4Shell (CVE-2022-22965) | Fastly
Fastly Security Research Team, Xavier Stevens, + 1 more
In this post, we review details for two RCE vulnerabilities impacting Spring Cloud and Spring Framework, including how Fastly customers can protect themselves from this vulnerability.
Security -
Dept. of Know Live: Ellen Körbes on developer experience. | Fastly
Ellen Körbes
Ellen Körbes, Senior Product Line Manager at VMware Tanzu Kubernetes, joined hosts Kelly Shortridge and Bea Hughes on The Dept. of Know Live! to chat about how security falls short of developer expectations. In this blog post, Ellen shares highlights from the conversation.
Security
