Sweet Virtual Patching Stops HTTP2Shell Vulnerability
Sweet Virtual Patching protects Node.js and other runtimes from HTTP2Shell until permanent Brotli fixes are released.
2
Stories per day · 30 days
2 RSS
Relatedbrotli3http2shell3sweet-security3envoy2nodejs2ai-agents1broadcom1check-point1cloud-security1esx1exposure-management1hyperarmor1ips1mfa1ot-security1remediation1runtime-protection1threat-modeling1
12 stories, newest first · one card per story
Stories tagged #virtual-patching
Check Point pitches safe remediation to move unused protections to enforce
The partner piece says 47% of measured organizations had under 50% protection enablement and cites a 99.5% remediation success rate.
1
Sweet offers free HTTP2Shell virtual patching amid claimed attacks
Sweet says exploitation attempts hit 88% of monitored environments and is giving any organization sensors for 30 days.
1
Weekly infosec releases add virtual patching, agent access and OT controls
Sweet Security, ThreatModeler, IDENTOS and AppGate shipped cloud, AI-agent and OT session controls this week.
1
Sweet Security ships one-click virtual patching for cloud workloads
A catalog policy blocks exploit attempts on running nodes until engineering deploys a permanent fix.
1
VMware is pushing so many patches, it thinks users need new tools to manage the flood
Broadcom will sell HyperArmor to virtually patch VCF, lock configurations, and add MFA.
AI Has Changed Attack Speed, Not Security Fundamentals
A SecurityWeek column says faster AI-driven exploits still require classic defense-in-depth, not virtual-patching hype.
1
Scans for Wordfence Protected Websites, (Tue, Sep 29th)
SANS sensors saw sparse scans for wordfence-waf.php, likely probing Wordfence-protected WordPress sites.
Securing the unpatchable in an age of AI-driven vulnerabilities
Cisco Talos argues AI-driven vulnerability discovery leaves unpatchable OT systems exposed, recommending virtual patching via NGFW/IPS and micro-segmentation.
12 Best Server Security Solutions Compared (2026): Features & Pricing
GBHackers ranks 12 server security solutions for 2026, naming CrowdStrike and SentinelOne as server EDR leaders and Trend Micro Deep Security top for virtual patching.
9
F5 speeds up virtual patching to counter AI-driven threats
F5 added anomaly detection and agentic threat intelligence to its AI-powered WAF, enabling virtual patch enforcement against exploits within minutes.
1
Case study: ManageWP Blocks 11.9M+ Threats in 6 Months with Patchstack
Patchstack case study says ManageWP blocked over 11.9M WordPress threats in six months, with top vulnerabilities weaponized in a median of five hours.