News for hackers. Stuff that matters.
Re:Drupal Core – Highly Critical Public Service announcement by daviddede on Wednesday October 29, 2014 @07:46PM (#8530624)
Virtual patching is the main benefit on WAFs for cases like this.

We were able to issue a virtual patching signature for our clients in less than 2 hrs after the disclosure.

Plus, our generic SQL injection signatures were already blocking this attack even without it.

That gives our clients more time to test and deploy patches without worrying about being compromised in the middle.

There are no comments on this comment yet.