We have observed active exploitation attempts targeting three high-severity CVEs: CVE-2024-2194, CVE-2023-6961, and CVE-2023-40000.

Fastly actively supports and participates in IETF, driving network security standards. Learn how we're enhancing routing security and improving industry standards for a safer Internet.

Getting started with chaos experimentation? In this post, we’ll walk through a small starter example experiment – verifying basic security assumptions on a website.

Get proactive commitments to your security with Fastly’s industry-first Time to Notify SLA for its Managed Security Service customers.

Fastly has been recognized in the 2024 Gartner® Peer Insights™ Voice of the Customer for Cloud Web Application and API Protection.

See how Fastly's Bot Management targets malicious bots to protect your apps and website for a better user experience. Learn more about our bot management capabilities.

An effective edge security strategy can provide significant benefits and protect organizations from the continually evolving threat landscape.

In this new report, we surveyed 235 IT and cybersecurity professionals across Europe to shed light on the state of API security.

This post details the journey of improving the security of TLS private keys and improving the performance and efficiency of TLS handshakes along the way.

The PCI Security Standards Council announced Version 4.0, the latest iteration forces nearly every organization to update policies, procedures, and more.

The White House and Office of the National Cyber Director called for the adoption of memory safe languages, and we see a way for existing code be more memory safe as well.

In this post, we will discuss a low latency approach to detect these attacks by co-locating the password hashes in a KV Store, along with Compute on Fastly’s edge.

Learn threshold blocking best practices and how it increases your WAF confidence so you can get into blocking mode faster.

Replacing OpenSSL with BoringSSL was to reduce the frequency of CVE response and improve the security of our TLS termination system for our customers.

To gain a broader understanding of the threat landscape during "Cyber 5" weekend, we analyzed attack activities with a particular focus on commerce sites.

Flexibility is required for confident blocking decisions that impact as little legitimate traffic as possible. Learn more about the evolution of blocking.

We're excited to announce Fastly's new WAF Simulator, which simplifies the testing process and provides the following key benefits.

Vulnerabilities are an unfortunate inevitability. However, when using a WAF there are options for your security teams while waiting for a patch.

Check out this collected guide on cybersecurity best practices to survive the holiday season with Fastly's Next-Gen WAF.

Downtime during peak shopping seasons can be detrimental to businesses, but with Fastly's Next-Gen WAF you can set yourself up for success.