35
Prisma Cloud WAAS Archives
Unit 42 archive page for Prisma Cloud WAAS, Palo Alto's web application and API security module; contains no new findings.
This is a product category archive page from Unit 42 describing Prisma Cloud Web Application and API Security (WAAS). It advertises protection spanning the OWASP Top 10, API protection, risk profiling, file upload and geolocation controls for cloud-native architectures. No new research findings, incidents, or vulnerabilities are reported.
10
60
30
30
60
60
12 Best CWPP Solutions Compared (2026): Features & Pricing
Editorial comparison ranks twelve CWPP vendors, with Sysdig leading K8s runtime depth, Prisma Cloud workload breadth, and Wiz agentless speed.
A 2026 buyer's guide compares twelve cloud workload protection platforms across features and pricing models. Sysdig is rated deepest for container/Kubernetes runtime via its Falco lineage, Prisma Cloud broadest across hosts, containers, and serverless, Aqua strongest on cloud-native lifecycle, and Wiz/CrowdStrike lead agentless speed and platform correlation. Category notes flag Illumio as microsegmentation and Fidelis as NDR/XDR rather than classic CWPP.
8
Threat Brief: Atlassian Confluence Remote Code Execution Vulnerability (CVE-2022
Unauthenticated Confluence RCE CVE-2022-26134 was exploited in the wild; Volexity observed intrusions and Cerber ransomware on unpatched servers.
Volexity identified exploitation of CVE-2022-26134, an unauthenticated remote code execution vulnerability in Atlassian Confluence Server and Data Center, during Memorial Day weekend 2022, with Atlassian issuing a patch. Cortex Xpanse found 19,707 potentially affected Confluence instances, concentrated in the US, Germany, China, and Russia, plus 1,251 end-of-life versions exposed. Unit 42 and Cortex Managed Threat Hunting observed successful exploitation leading to reconnaissance commands and a Cerber ransomware deployment that was blocked by Cortex XDR. A public PoC has increased exploitation risk.
80
30
Threat Brief: CVE-2022-41040 and CVE-2022-41082: Microsoft Exchange Server (ProxyNotShell)
60
30
30
30
60