ACFW firewall test prologue – still failing at the basics

ACFW firewall fails

The results of our soon-to-be-published Advanced Cloud Firewall (ACFW) test are hard to ignore. Some vendors are failing badly at the basics like SQL injection, command injection, Server-Side Request Forgery (SSRF) and API abuse with block percentages under 20%, sometimes way under. Those are just the application-based threats, never mind the vulnerability-based attacks.  While it’s […]

More AI security noise – chatbots going rogue

AI security risks from chatbot prompt injection

People rush to AI bots for their most sensitive tasks these days without security leading the way. The Moltbot frenzy reminds us we just wrote about this recently – the difference between AI security noise and high-impact threats.  AI Security Lessons from the MoltBot Incident For folks who jumped in early and got the Github […]

Signature-based firewalls are dead

firewall attack

Advanced evasion firewalls are here to stay Firewalls of yesterday were largely static devices: routing rules, security zones, and databases of known-bad signatures. That model worked when threats were noisy, predictable, and exploit-driven—teardrop attacks, ping-of-death, and similar patterns that could be matched and dropped. Modern attacks no longer cooperate with that model. Modern threats, however, […]

SecureIQLab Establishes APAC Office in Kathmandu, Nepal

APAC office Kathmandu

SecureIQLab has officially established its Asia-Pacific (APAC) office in Kathmandu, Nepal, marking a significant milestone in expanding independent cybersecurity validation and advisory services across the region.  The new APAC office strengthens SecureIQLab’s ability to support regional enterprises, government institutions, and cybersecurity vendors with objective, outcome-based cybersecurity validation aligned with real-world threats and operational requirements.  Why […]