ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “virtual patching”

2,365 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllVulnerability 898Exploit / PoC 483Ransomware 465Malware 166Data breach 128Threat actor 71Policy & legal 69Phishing & fraud 35Industry 19Advisory 18AI safety & security 11Tools 8Research 5AI tools & infra 3
SeverityAllcritical 1610high 424medium 297low 19info 35

F5 speeds up virtual patching to counter AI-driven threats

F5 added anomaly detection and agentic threat intelligence to its AI-powered WAF, enabling virtual patch enforcement against exploits within minutes.

F5 announced enhancements to F5 WAF for Distributed Cloud, adding anomaly detection that builds per-application traffic baselines and agentic threat intelligence built on technology from the Fletch acquisition. The AI-powered WAF scores each request in real time with a neural network risk engine, and internal testing claims 98% threat detection efficacy with false positives reduced to 1%. Automated virtual patching via Distributed Cloud Web App Scanning extends to F5 WAF for BIG-IP, letting teams block actively exploited vulnerabilities at the request level in minutes; agentic features are rolling out over coming months.

Help Net Security · 14d agoTools

12 Best Server Security Solutions Compared (2026): Features & Pricing

GBHackers ranks 12 server security solutions for 2026, naming CrowdStrike and SentinelOne as server EDR leaders and Trend Micro Deep Security top for virtual patching.

The guide scores 12 server security platforms across five weighted criteria, with detection and response depth and Linux parity weighted 25% each. CrowdStrike and SentinelOne lead server EDR, Trend Micro Deep Security is highlighted for virtual patching of unpatchable estates, and Microsoft Defender for Servers is noted for Azure and hybrid economics. It is an editorial assessment comparing features and pricing models rather than a lab test.

GBHackers · 4d agoIndustry 10 sources1

Top 10 Best Server Security Solutions in 2026

Cyber Security News ranks 2026 server security platforms, favoring Trend Micro for hybrid estates, CrowdStrike for detection, Defender for Azure economics.

Cyber Security News published an editorial ranking of ten server security platforms for 2026, favoring Trend Micro for hybrid estates, CrowdStrike for detection quality, and Microsoft Defender for Servers for Azure-centric economics. The guide stresses that server security licensing differs (per server, per core, or per cloud-hour) and flags hypervisor protection as a commonly missed coverage gap.

Cyber Security News · 5d agoIndustry1

Top 10 Best Cloud Workload Protection (CWPP) Solutions in 2026

Editorial scorecard ranks 2026 cloud workload protection platforms, placing Prisma Cloud first, Sysdig second, and CrowdStrike third on detection quality.

A research-based scorecard rates ten cloud workload protection (CWPP) platforms across runtime depth, container/Kubernetes support, coverage breadth, cloud context, and value. Palo Alto Prisma Cloud leads at 8.9, followed by Sysdig at 8.8 and CrowdStrike at 8.6, with Aqua Security tying CrowdStrike at 8.6. The piece argues agent-versus-agentless is a false choice, with leaders now pairing agentless visibility with eBPF-based runtime sensors. Scores are editorial assessments, not lab benchmarks.

Cyber Security News · 4d agoIndustry1

12 Best CWPP Solutions Compared (2026): Features & Pricing

Editorial comparison ranks twelve CWPP vendors, with Sysdig leading K8s runtime depth, Prisma Cloud workload breadth, and Wiz agentless speed.

A 2026 buyer's guide compares twelve cloud workload protection platforms across features and pricing models. Sysdig is rated deepest for container/Kubernetes runtime via its Falco lineage, Prisma Cloud broadest across hosts, containers, and serverless, Aqua strongest on cloud-native lifecycle, and Wiz/CrowdStrike lead agentless speed and platform correlation. Category notes flag Illumio as microsegmentation and Fidelis as NDR/XDR rather than classic CWPP.

GBHackers · 17h agoIndustry 2 sources

New infosec products of the week: September 4, 2026

Weekly roundup covers F5's AI-powered WAF enhancements, Ping Identity's personal AI agent access, Superna 2.15 cyberstorage, and BugBase Pentest Copilot Enterprise.

This week's product roundup features releases from BugBase, F5 Networks, Ping Identity, and Superna. F5's WAF for Distributed Cloud adds anomaly detection and agentic threat intelligence for real-time virtual patching, Ping Identity launched Enterprise Personal Agent Access for securing personal AI agents, Superna 2.15 adds guided event-closing workflows for cyberstorage operations, and BugBase's Pentest Copilot Enterprise automates black-box pentesting across 100 vulnerability types using real Chromium browsers.

Help Net Security · 12d agoTools

WordPress Security Plugins: How to Choose the Right One

Sucuri's guide breaks WordPress security plugins into hardening, malware scanning, integrity monitoring, and filtering types, and explains how to evaluate and layer them.

The Sucuri guide explains that WordPress security plugins bundle five capabilities - hardening, malware detection, integrity monitoring, activity logging, and application-level filtering - and that plugins run only after WordPress loads, unlike server-level firewalls. It lists leading causes of compromise: outdated plugins and themes, weak or reused credentials, nulled premium software, insecure configuration, and shared-hosting cross-contamination. It concludes with evaluation criteria and a post-installation security checklist for owners without dedicated security teams.

Sucuri Blog · 10d agoIndustry

Top 10 Best Container Security Tools in 2026

2026 roundup ranks Aqua, Sysdig, Prisma Cloud, Wiz, Snyk and CrowdStrike among the ten best container security tools across build-ship-run.

Buyer's guide compares ten container security products by lifecycle fit: Aqua leads full lifecycle, Sysdig leads runtime detection via Falco and eBPF, Wiz offers agentless graph visibility, Snyk covers developer-first shift-left. It notes Trivy and Falco as free production-grade open-source foundations. The guide argues standalone container security is increasingly absorbed into CNAPP platforms from Palo Alto, Wiz and CrowdStrike.

Cyber Security News · 17h agoTools1

Building a risk-based vulnerability management program that scales

Asimily CEO Shankar Somasundaram outlines a risk-based vulnerability management approach using inventory, attack paths, KEV and EPSS data.

In a Help Net Security video, Asimily CEO Shankar Somasundaram argues patching everything is infeasible as AI-driven attacks inflate vulnerability counts, with one customer finding a thousand unknowns for each known one. He recommends building a full inventory of devices, applications, and data flows, mapping attack paths for reachability, and prioritizing with KEV, EPSS, and business impact. Mitigations include patching, virtual patching via NACs and firewalls, segmentation, and configuration snapshots to detect drift.

Help Net Security · 22d agoIndustry