Open-source Web Application Firewall maintained by OWASP. Blocking threats since 2002. Free, community-driven, expert-led, and actively developed.
Earth
Joined April 2009
- Tweets1.6K
- Following18
- Followers4.6K
- Likes63
Please welcome the latest releases of ModSecurity.
github.com/owasp-modsecurity…
github.com/owasp-modsecurity…
And before you update, please read the relevant blog post:
modsecurity.org/20260928/sec…
Hi guys, we are pleased to present the revamped modsecurity.org website!
A new version of libmodsecurity3 has been released, please check the blog post and update your library:
modsecurity.org/20260629/abo…
"How big is too big" - a new blog post has been published on modsecurity.org - enjoy reading!
modsecurity.org/20260222/how…
ModSecurity retweeted
CRS will have its second community call on September 22, from 20:30 to 21:30 CEST (18:30 UTC / 2:30 p.m. ET) and will be moderated by former CRS co-leader Christian Folini. Check more details and register here: luma.com/8yc1p543
A new version of mod_security2 has been released, please check the blog post:
modsecurity.org/20250805/imp…
A new version of mod_security2 has been released, please check the blog post:
modsecurity.org/20250701/dos…
New version of mod_security2 have been released: github.com/owasp-modsecurity…
This versions includes a fix against a recently discovered (another) DoS vulnerability: modsecurity.org/20250602/dos…
Please upgrade your module!
New version has been released:
Nginx connector: github.com/owasp-modsecurity…
blog post: modsecurity.org/20250521/mod…
Please note that the log format has been changed!
New version have been released:
mod_security2: github.com/owasp-modsecurity…
This versions includes a fix against a recently discovered DoS vulnerability: modsecurity.org/20250521/pos…
Please upgrade your module!
Happy to announce OWASP Open WAF Day: owasp2025globalappseceu.sche…
Feel free to register yourself!
#modsecurity #coreruleset #crs #coraza #waf
Please take a look at this issue and share your opinions (on GH):
github.com/owasp-modsecurity…
ModSecurity retweeted
Running smooth is great, but running secure is essential. #EasyDCIM v1.15.0 now supports #ModSecurity on #Debian-based systems, giving you a critical edge against evolving cybersecurity risks.
See how else our platform helps you outpace threats: easydcim.com/blog/easydcim-v… #Firewall
Please update your libmodsecurity3 instances as soon as possible:
modsecurity.org/20250225/htm…
It's time to move to PCRE2 as default: modsecurity.org/20250217/use…
ModSecurity retweeted
CRS will have its first community call on March 17, from 20:30 to 21:30 CET (19:30 UTC / 2:30 p.m. ET) and will be moderated by former CRS co-leader Christian Folini. Register here: coreruleset.org/register/com…
CVE-2024-46292 was published related to ModSecurity:
cve.mitre.org/cgi-bin/cvenam…
Here is the team's resolution:
modsecurity.org/20241011/abo…
If you have any question you can ask here:
github.com/owasp-modsecurity…
ModSecurity retweeted
The CRS project has released version 4.6.0 for CRS 4 and version 3.3.6 for CRS 3.
The new releases tackle two multipart file upload bypass methods. All users are requested to update to the new releases.
Read more and get the new releases: coreruleset.org/20240829/crs…
New versions of ModSecurity have been released, see the blog post:
modsecurity.org/20240903/new…
modsecurity.org/20240830/mod…
After a long period, the modsecurity.org website is available again with renewed content and form.