Mod Security: Multipart XML fails with Message: "XML parser error: XML: Failed parsing document."

The CRS Rule 200000 seems to hit and I didn’t found the exact problem yet.
Versions:

owasp-modsecurity-crs-3.2.0
Apache/2.4.38

The Log looks like this:
[30/Mar/2021:14:28:57 +0200] YGMZiY3fnzEmfTyS-ahEbwAAAA8 secretIP 31385 secretIP 443
Continue reading Mod Security: Multipart XML fails with Message: "XML parser error: XML: Failed parsing document."

Validity of a WAF as a Compensating/Alternative Control for CSP, X-XSS-Protection, etc

I would like to know peoples’ thoughts as to whether a WAF is a perfectly acceptable compensating/alternative control to things like CSP, X-XSS-Protection, etc. I know WAF is suppose to protect against XSS and etc, but I been using Mozilla… Continue reading Validity of a WAF as a Compensating/Alternative Control for CSP, X-XSS-Protection, etc

How Akamai Can Help You Fight the Latest Exploitation Attempts Against Microsoft Exchange

On March 2, 2021, the Microsoft Security Response Center alerted its customers to several critical security updates to Microsoft Exchange Server, addressing vulnerabilities currently under attack. Continue reading How Akamai Can Help You Fight the Latest Exploitation Attempts Against Microsoft Exchange

How Akamai Can Help You Fight the Latest Exploitation Attempts Against Microsoft Exchange

On March 2, 2021, the Microsoft Security Response Center alerted its customers to several critical security updates to Microsoft Exchange Server, addressing vulnerabilities currently under attack.
The post How Akamai Can Help You Fight the Latest Explo… Continue reading How Akamai Can Help You Fight the Latest Exploitation Attempts Against Microsoft Exchange

What’s New in AppTrana? – A look into The Most Noteworthy WAF Updates In 2020

The year 2020 came with a whole new level of security incidents due to the sudden push to acceleration of digital transformation. While the digital assets faced dark trends, we.
The post What’s New in AppTrana? – A look into The Most Noteworthy WAF Upd… Continue reading What’s New in AppTrana? – A look into The Most Noteworthy WAF Updates In 2020

A Close Call Prompts Security Reassessment

Having worked in the industry for over 10 years, I consider myself a veteran cybersecurity professional. Still, that didn’t protect me against (almost) becoming a victim of malware-based credential theft. What looked like a formatting issue on m… Continue reading A Close Call Prompts Security Reassessment

Edge Computing Growth Drives New Cybersecurity Concerns

Edge computing is proving to be more than just a trend. Research giant Gartner predicts that by 2025, some 75% of enterprise-generated data will be created and processed outside of the traditional data center or cloud. Simply put, the edge is poised t… Continue reading Edge Computing Growth Drives New Cybersecurity Concerns