Articles & Insights
Discover tutorials and insights on CDN performance, edge security, and web infrastructure.
Latest Articles
How the JSON API and XMLRPC are used for Brute Force Attacks Against WordPress
How attackers enumerate users via WP-JSON and brute force credentials through XMLRPC (including system.multicall), plus practical hardening tips.
How to Improve the Largest Contentful Paint (LCP) – Web Core Vital Metrics
Where LCP fits in Core Web Vitals, what hurts it (images, render-blocking assets, slow backends), and practical fixes—plus how CDNs help.
Open-Source CMS and Software Bill of Materials (SBOM)
Why SBOMs matter for open-source CMS ecosystems (WordPress, Drupal, Joomla, Magento) and how CycloneDX helps manage software supply-chain risk.
WordPress 5.8.3 Security Release
PSA for WordPress 5.8.3: four security fixes affecting versions 3.7–5.8, including stored XSS, object injection, and SQL injections in WP_Query and WP_Meta_Query. Update now.
Cloud-based Web Application Firewalls (WAF) & The Log4J Vulnerability
How cloud WAFs help mitigate evolving Log4Shell payloads with rapid virtual patches and off-prem inspection.
Does DNSSEC Matter?
A practical look at what DNSSEC actually secures, where it helps, and why many teams still avoid deploying it.
Active Exploits against CVE-2021-41773 (Apache)
What we observed during active exploitation and how WAF + DNS automation reduces risk fast.
Web Applications / Assets Led the Charge in Breaches in 2020 According to the Verizon DBIR
Key takeaways from the 2021 Verizon DBIR: web apps and servers dominated 2020 breach vectors, with many incidents tied to old CVEs and access abuse. Practical guidance on patching, prioritization, and WAF virtual hardening.
Recovering a Business From a Cyber Attack
A practical framework to help small and mid-sized organizations recover after a cyber incident—what to ask, who should lead, and how to communicate.
Arbitrary File Vulnerabilities And Why They Matter to Your Website
Explains arbitrary file vulnerabilities (read, download, upload, execute), how attackers chain them, why GET-based probing is common, and how a WAF can virtually patch at the edge.
Evolving the CDN / WAF Stack
How NOC’s architecture combines Anycast Authoritative DNS, CDN, and WAF to balance performance, flexibility, and security.
WordPress Forced Updates vs Auto-Updates and Abusing User Defined Intent
This article talks about forcing updates in the WordPress platform, and provides opinions on how that affects user-defined intent.
Get
Started