Blogs

3-Strike and You’re Out!

By Karan TANK posted 3 days ago
Be the first person to like this.
The Three Strike Rule is like a digital referee—it kicks a user out after three back-to-back fouls of the same kind (think SQLi or XSS). Every request goes through the WAF: bad ones get blocked, good ones go through. But if someone keeps trying the same attack three times in a row, boom— they’re out. Doesn’t matter if the WAF was just set to alert or block; the rule still kicks in. It’s great for catching persistent attackers but be careful with shared or NATed IPs—one troublemaker could get the whole squad blocked. W hat Happens After Strike Three? Got Cookies? If the client supports cookies, the session ...
0 comments

Imperva Cloud WAF Technical Guide: How to Identify Non-SNI Traffic Before Enabling SNI-Only Mode

By Seana MURRAY-EXTERNAL posted 26 days ago
Be the first person to like this.
Overview SNI-only mode is the recommended configuration for all Imperva Cloud WAF sites. It enables full utilization of site certificates, custom cipher templates, and mutual TLS (mTLS) - features that don't work for non-SNI connections. However, before switching a site to SNI-only mode, it is important to understand how much of your current traffic actually relies on connections without SNI. Doing so can disrupt legitimate users running older TLS clients or non-standard HTTP libraries. This guide walks you through creating a custom rule in Imperva Cloud WAF that silently flags all Non-SNI requests as security events, without blocking any traffic. ...
0 comments

Manual Mitigation for CVE-2026-75650: Magento and Adobe Commerce - StyleSmuggler Unauthenticated RCE

By Joan MCGREGOR posted 27 days ago
Be the first person to like this.
Hi Community, Our Threat Research team shared the following update: A new vulnerability was discovered in Magento and Adobe Commerce , tracked as CVE-2026-75650 (StyleSmuggler). The vulnerability is unauthenticated and poses a risk for enterprises using affected Magento or Adobe Commerce deployments. Vulnerability Description: CVE-2026-75650: Magento and Adobe Commerce contain an unauthenticated remote code execution vulnerability, dubbed StyleSmuggler , involving unsafe processing of attacker-controlled style parameters. An unauthenticated remote attacker can submit specially crafted parameters to the GraphQL endpoint, potentially ...
0 comments

Action Required: Increase Azure VM Quotas Before 31 July 2026

By Idan COHEN posted 07-29-2026
Be the first person to like this.
Action Required: Increase Azure VM Quotas Before 31 July 2026 By Idan Cohen, Team Leader & Greg Zaoui, Technical Product Manager, WAF GW . Action Required: Increase Azure VM Quotas Before 31 July 2026 We would like to bring the following update to the attention of users of our On-premise cloud service. Microsoft Azure will introduce capacity growth restrictions for certain older-generation Azure Virtual Machine series starting 31 July 2026 . After this date, quota increase requests, new deployments, and scale-out activities requiring additional capacity may no longer be approved for the affected VM sizes. VM sizes relevant to your ...
0 comments

Recommendations for Defending Bad Bots in the Agentic Age Webinar Recording

By Joan MCGREGOR posted 07-23-2026
Be the first person to like this.
Hi Community, Check out this recent Recommendations for Defending Bad Bots in the Agentic Age webinar recording below. This insightful webinar explores the growing threat of AI-driven bot attacks and how organizations can automatically identify and mitigate malicious bot traffic to keep applications and APIs secure. As automated traffic now accounts for more than half of all web activity, businesses need deeper technical and analytical visibility to understand how bot operators target critical services and when attacks occur. In this session, our expert Atul Anvekar covers the current state of bots and the rapid rise of AI-powered attacks, the latest ...
0 comments

Why AI Needs a New Kind of Security

By Tal OVADIA posted 07-07-2026
Be the first person to like this.
By Michael Wright and Tal Ovadia | Imperva There is a moment every CISO is having right now, often without warning. A developer shows a working internal demo of an AI assistant trained on the company's own documents. The product team is already planning a customer-facing version. The board has signed off on the budget. And somewhere in the middle of the meeting, a quiet question lands: what is securing this? The honest answer, for most organizations today, is "nothing your existing stack was designed to do." This is not a critique of the security tools enterprises have spent years deploying. WAFs, EDRs, network firewalls, ...
0 comments

The 2026 Bad Bot Report is Here!

By Tim Chang posted 05-05-2026
1 person likes this.
Hi Community, It is with great pleasure to announce that the 2026 Bad Bot Report is now available. This marks our 13th consecutive edition, highlighting how automation is reshaping the internet. The statistics uncovered this year are compelling and urgent: AI-driven bot attacks surged 12.5x, signalling a dramatic acceleration in automated threats. Bots now dominate the internet, accounting for over 53% of all web traffic, with 40% classified as malicious. APIs and identity systems have become primary targets, with 27% of attacks focused on these critical business systems. The research is presented to help organizations understand what’s ...
0 comments

Closing Coverage Gaps and Removing Security Bottlenecks in Modern Dev Environments

By Daniel Sedaka posted 04-01-2026
Be the first person to like this.
The Friday Afternoon Wall: Why "Process" is Killing Your Security Daniel Sedaka Technical Product Manager It’s 4:00 PM on a Friday. You’ve got the fix. It’s tested, it’s solid, and it’s ready to go. All you need is a quick subdomain for the new service, and you can head into the weekend with a clean slate. Then, reality hits. You open the service desk and realize you need a security ticket. That ticket needs an approval. That approver is already OOO for the weekend. The window slams shut, and that "safe" fix stays on your machine until Monday morning. We’ve all lived this loop. It’s not that anyone is trying to be difficult - it’s that the way ...
0 comments

Important: New Denial-of-Service Vector in React Server Components

By Joan MCGREGOR posted 02-18-2026
Be the first person to like this.
Recently, a new denial-of-service (DoS) attack vector targeting React Server Components was disclosed. This discovery highlights a potential risk where an attacker can exploit the way server components process user inputs, causing excessive resource consumption on the server. The result can be degraded performance or even complete service outages. While work is underway, Imperva customers are continuing to be protected against this issue. This work carried out by our teams, highlights the necessity of continuous security assessments and emphasizes the value of implementing multiple layers of protection to prevent attacks. If you have any further questions, ...
0 comments

New Resource: Data Activity Monitoring (DAM) v15 Platform Changes and Planning Guidance

By Joan MCGREGOR posted 02-03-2026
3 people like this.
Hi everyone I'm Joan, the new Digital Community Manager, working alongside my colleagues Sarah Lamont and Seana Murray. I just wanted to share the following important document regarding ' Data Activity Monitoring (DAM) v15 Platform Changes and Planning Guidance' . This document is available for you to download here . Join us on 26th February for our webinar on 'Database Activity Monitoring (DAM) V15.3 Release Update and Roadmap 2026' . In this webinar, we will also be joined by Tal Hausman who will walk us through these platform changes. If you have any questions in the meantime please reach out and I will be happy to help. #Database ...
1 comment

Customer Support Portal Update: Your New Single Sign-on Webinar Recording

By Seana MURRAY posted 12-18-2025
Be the first person to like this.
Hi Community, I’m sharing this insightful webinar we held yesterday, led by Arik Ben-Zaken, Sarit Levy, and Rocio Rodriguez, which provided an update on the customer support portal SSO. The session ensured all community members were fully informed about the recent changes to accessing the Imperva Support Portal and Community. This transition reflects Imperva’s ongoing commitment to enhancing the overall user experience, strengthening security, and simplifying the authentication process. Snapshot of what was included: Overview of the New SSO Experience Step-by-Step Registration Guidance Details on the Thales OneWelcome Identity Platform Support Resources ...
0 comments

Too Many Emails? Here’s an Easy Way to Manage Your Product Notifications

By Liz Rossi posted 11-20-2025
Be the first person to like this.
Hi Community, We’re excited to announce that in January 2026 , on-premise product notifications for DSF and WAF Gateway are being updated to be part of the Thales Support Portal . This update gives you easy access to all of your product updates and information in one place: · Customize your product emails : Do you want updates daily on your favorite products, and weekly or monthly on others? Now you can adjust your email subscriptions according to the notification type, product family, and frequency that meets your needs. · View Past Notifications : Product notices are listed on the product ...
0 comments

Community's Birthday Webinars - All in One Place

By Sarah LAMONT posted 11-11-2025
Be the first person to like this.
Hi Community, Catch up on our community's birthday webinars here. This blog post is a central hub for all the recent sessions, perfect for revisiting a favourite or checking out one you missed! Cloud WAF Office Hours: Getting Started . Data Security Fabric: Health Check - Ensuring DSF Delivers, Quarter After Quarter . Know Your Grey-Matter API: Best Practices to Secure Unmanaged APIs . Cloud WAF Workshop: Website Onboarding and TLS Implementation Demo . DSF Working Session: Integrating with Service ...
0 comments

Cloud WAF Workshop: Website Onboarding and TLS Implementation Demo Webinar Recording

By Seana MURRAY posted 10-28-2025
Be the first person to like this.
Hi Community, Just want to share this insightful webinar with you all. The Cloud WAF Workshop provided a hands-on learning experience focused on the essential steps of onboarding a website to the Imperva Cloud Web Application Firewall (WAF) and implementing Transport Layer Security (TLS) for optimal protection. In this interactive session, Chaithra Ravichander guided participants through a step-by-step demonstration that simplified the onboarding process and showcased how to securely configure TLS to safeguard web applications against modern cyber threats. The session also detailed DNS record management, emphasized the importance of SSL certificate validation, ...
0 comments

The API Battleground: Why APIs are the new frontline—and how to stop the stealthiest attacks

By Tim Chang posted 10-20-2025
Be the first person to like this.
Hi Community, I hope you all enjoyed the API Security session last week, or have had a chance to view the recording here: Know Your Grey-Matter API: Best Practices to Secure Unmanaged APIs Webinar Recording . API Security is a major focus in the current threat landscape which is why produced Imperva’s API Threat Report. Check out my recent blog for the highlights, key takeaways and a link to the full report. . Here is a sneak preview for Community… That’s why this report matters . It’s not just telemetry — it’s a playbook: how to find forgotten or shadow endpoints, how to validate actions at runtime (not just the shape of a request), ...
0 comments

Know Your Grey-Matter API: Best Practices to Secure Unmanaged APIs Webinar Recording

By Seana MURRAY posted 10-17-2025
1 person likes this.
HI Community, In this insightful session, Levin Cheng and Luke Barbarinde delve into the critical aspects of API security, shedding light on the growing challenges organizations face in managing both known and unknown APIs. Through real-world examples and expert analysis, they explore what truly defines an API and why that matters in the context of security. This webinar will help you will gain a deeper understanding of the threats targeting APIs and learn about practical strategies to mitigate them through a multi-layered security approach. Snapshot of what’s Included: Defining what an API is and why clarity matters for security Common ...
0 comments

In The Know: Cloud WAF Podcast

By Michael Wright posted 10-02-2025
Be the first person to like this.
Hi Community, Check out my latest podcast where I welcome Like Babarinde, Global Solutions Architect and Ziv Rika, Principle Product Manager for Cloud WAF. The discussion focuses on Cloud WAF features that protect against sensitive information leakage, cross site scripting, file upload scanning, and post quantum cryptography. Protecting sensitive data and ensuring compliance with regulations are crucial and automated solutions are highlighted for reducing operational overhead and addressing future risks. I have added some notes on the key takeaways, below the video. These emphasize the importance of these security measures in the current digital ...
0 comments

Your Cloud WAF is Watching the Door, but Who is Protecting the Gate? Network-Layer DDoS Protection Webinar Recording

By Seana MURRAY posted 10-01-2025
Be the first person to like this.
Hi Community, I’m excited to share this engaging webinar, where Ofir Shaham and Alex Bakshtein discussed the growing threat of large-scale Distributed Denial of Service (DDoS) attacks and the importance of protecting your network infrastructure. This session emphasized why even existing Imperva Cloud WAF customers need to consider additional layers of defense to safeguard their digital assets. Here is a snapshot of what was covered in the webinar: • The rising risk of DDoS attacks and their impact on network infrastructure • Recent DDoS incidents and what they reveal about evolving attack strategies • The role of AI in both executing and mitigating cyber ...
0 comments

Cloud Application Security Release Notes September 28, 2025

By Seana MURRAY posted 09-29-2025
Be the first person to like this.
Hi Community, Take a look at the latest release notes below, and feel free to share any questions or feedback in the comments! These release notes provide information on changes and enhancements in each release. Unless otherwise specified, the changes described here are rolled out throughout the week and may not be immediately available in all accounts. You can also view the customer-facing release notes online here . Replacement of the Imperva Data Center in London We are starting to roll out a new data center (PoP) in London which will replace the current London 1 PoP. The rollout and migration to the new PoP is expected to be fully completed within ...
0 comments

Cloud Application Security Release Notes September 21, 2025

By Seana MURRAY posted 09-22-2025
Be the first person to like this.
Hi Community, Check out latest release notes below and feel free to ask any questions or make any comments in the comment section below! These release notes provide information on changes and enhancements in each release. Unless otherwise specified, the changes described here are rolled out throughout the week and may not be immediately available in all accounts. You can also view the customer-facing release notes online here . Heads up - Advanced Bot Protection: Deprecation of Internet Explorer support Effective date: December 20, 2025 This serves as a 90-day notice. To ensure optimal performance and security, Advanced Bot Protection will no longer ...
0 comments