November 18, 2025
CVE-2025-55752: Apache Tomcat Path Traversal Vulnerability
Apache Tomcat’s CVE-2025-55752 allows encoded path traversal through rewrite rules, risking sensitive file access and possible RCE in specific configurations
Listen to the latest episode of Guardians of the Enterprise for insights from cyber leaders - click here
Apache Tomcat’s CVE-2025-55752 allows encoded path traversal through rewrite rules, risking sensitive file access and possible RCE in specific configurations
Discover key risks, attack trends, and best practices in API security for finance to protect digital services, ensure compliance, and stop emerging threats.
Discover how MSSPs can achieve continuous compliance and client trust across frameworks like ISO 27001, SOC 2, PCI DSS, HIPAA, and GDPR, powered by Indusface AppTrana.
Modern apps use more than 80 and 443. Learn why WAF support for custom ports matters, risks of gaps, and how to test vendor coverage
Discover how to achieve API compliance with PCI DSS, NIST, GDPR, and other standards to ensure security and protect your digital assets.
Two critical Django vulnerabilities CVE-2025-64459 (SQLi) and CVE-2025-64458 (DoS) could let attackers manipulate databases and disrupt app availability.
Learn how SessionReaper (CVE-2025-54236) impacts Adobe Commerce & Magento stores, with key mitigation steps plus AppTrana WAAP protection insights.
Track key API security metrics like authentication strength, vulnerability exposure, MTTR, and attack detection rate to ensure measurable, continuous protection.
A comprehensive checklist for CISOs on how to evaluate an API security platform. Assess discovery, threat protection, integration, and TCO to choose the right solution.
Achieve HITRUST CSF v11.6.0 compliance with AppTrana WAAP through continuous risk management, deep visibility, and adaptive protection for web apps and APIs.
Protect your e-commerce platform with robust API security solutions that safeguard transactions, customer trust, and brand reputation from evolving threats.
Managed rules are not a managed WAF. Learn the difference, why false positives persist, and how to evaluate real managed protection.
Indusface is the only cloud WAAP (WAF) vendor with 100% customer recommendation for 4 consecutive years.
A Customers’ Choice for 2024, 2023 and 2022 - Gartner® Peer Insights™