🛡️ Open WAF Day Vienna 2026 — full agenda is live!
📅 Wed June 24 · Austria Center, Vienna
🎤 5 talks: Coraza on Envoy, GitOps, Ingress NGINX migration, adaptive honeypots & more
💸 Free
Register 👇
CRS v4.30.0 and v4.25.2 LTS are out!
Both fix 3 advisories: an RCE bypass via the URL path, a mixed-case CHARSET bypass (HIGH), and multipart charset shadowing. Plus a shell.php/ upload bypass.
Please update:
Open WAF Day Vienna 2026 recap is up 🇦🇹 Talks on the new Coraza/Envoy connector, blazing-fast WAF log analysis, Coraza Center + GitOps, life after Ingress NGINX, and CRS-powered adaptive honeypots. Thanks to everyone who joined us!
📖 coreruleset.org/20260629/open-…#OWASP#WAF#AppSec
Part 2 of the CRS 3→4 migration series: configuration. Don't reuse your old crs-setup.conf — variables were renamed, split, and added. Post includes a full checklist and an interactive migration tool.
coreruleset.org/20260406/migra…#OWASP#CRS#WAF#AppSec
Migrating from OWASP CRS 3.3 to 4.25 LTS? Part 1 of a 7-part series is out — covering what changed, what breaks, and how to plan your upgrade. ~500 changes, new plugin architecture, RE2/Hyperscan compat, and more.
