Application Security Engineer | OWASP @CoreRuleSet Developer | #CISSP | #OPST | https://xitter.cf/t.co/E365ZhtL2R
Schweiz
Joined April 2014
- Tweets807
- Following989
- Followers1.2K
- Likes2.7K
Franziska Bühler retweeted
Congratulations to @CoreRuleSet co-lead Felipe Zipitría, winner of this year's WASPY Award! "Project Person of the Year" – you earned it.
Don't know Felipe? Read here: coreruleset.org/20231130/mee…
Congrats to the other winners Martin Knobloch and Shruti Kulkarni. And thanks to @owasp!
Franziska Bühler retweeted
Meet the CRS team: Programming and entrepreneurship run in Jozef Sudolsky's family. When not working for his company or the @CoreRuleSet, he's in the gym or his garden. His office is his daughter's playroom. Read the portrait: coreruleset.org/20240507/mee… #waf #crs #itsecurity #owasp
Franziska Bühler retweeted
Today, the @CoreRuleSet has released #CRS v4.1.0. The new release is the first according to the new monthly release schedule and brings a couple of new features and fixes.
Read the changelog here: github.com/coreruleset/corer…
#waf #CyberSecurity #owasp
Franziska Bühler retweeted
Let CRS4 be your valentine!
The @OWASP CRS / @CoreRuleSet team is proud to release CRS 4.0.
Years in the making, it brings your WAF the best detection ever and a new plugin architecture.
Read more at coreruleset.org/20240214/let…
#CRS4 #CRS3 #WAF
no more #WAFBypass
#bugbountytips
Franziska Bühler retweeted
Valentine’s Day present from the first @CoreRuleSet chat of 2024: #CRS v4 to be released on Wednesday, February 14! In other news: due to a lack of capacity, CRS will skip this year’s Google Summer of Code. See the chat agenda with decisions here: github.com/coreruleset/corer…
Franziska Bühler retweeted
This is fantastic. I started to build ModSecurity in 2002, full time in 2004. Twenty years later, it’s not only open source but open governance. I couldn’t have imagined a better outcome.
.@ModSecurity is becoming an @OWASP project!
After years in limbo, @Trustwave just announced the transition.
This is to a new life for the software! 🍾🎉
Franziska Bühler retweeted
Exciting @owasp news! Trustwave Transfers ModSecurity Custodianship to OWASP
Cc @ChrFolini
@bufrasch @ModSecurity @CoreRuleSet
owasp.org/blog/2024/01/09/Mo…
Franziska Bühler retweeted
On November 5–12, the @CoreRuleSet core team met in #Budapest for the annual retreat. Much work was done in that week, but, of course, there was a lot of fun activities, too. Read our blog:
Day 1: coreruleset.org/20231105/uni…
Days 2–7: coreruleset.org/20231128/dis…
#ModSecurity #waf #crs
Franziska Bühler retweeted
Meet the CRS team: As a South American, Felipe Zipitra has a special status in the @CoreRuleSet core team. The Uruguayan played basketball which taught him all about the value of teamwork. Read Felipe‘s portrait on the CRS blog: coreruleset.org/20231130/mee…
#waf #crs #itsecurity
Franziska Bühler retweeted
A new portrait of one of the @CoreRuleSet core team's member: in an interview we published recently on our blog, @AndrewXanadu talks about how he came to join the project.
coreruleset.org/20231109/mee…
#OWASP #ModSecurity #waf #crs #itsec #itsecurity
Franziska Bühler retweeted
It’s finally here: the @CoreRuleSet Retreat 2023 in #Budapest, #Hungary! For the next week, we have a lot to discuss and to work (and to drink). Egészségére!
Franziska Bühler retweeted
After a detour lasting 18 months, the CRSv4 RC2 is out.
The @OWASP #ModSecurity @CoreRuleSet team is proud to bring you detection capabilities exceeding everything else on the planet. Please test this throughly and help us with false positives.
coreruleset.org/20231026/crs…
#CRS4
Franziska Bühler retweeted
libModSecurity3 is affected by DoS vulnerability CVE-2023-38285. This also affects OWASP CRS / @CoreRuleSet users. Here is our take: coreruleset.org/20230802/lib…
Note: Users of the ModSec2 release line a (-> Apache) are not affected.
Franziska Bühler retweeted
The #OWASP #ModSecurity @CoreRuleSet team is pleased to announce the release of #CRS3 version 3.3.5. This is a security release that mitigates CVE-2023-38199: a potential impedance mismatch vulnerability from requests with multiple Content-Type headers. coreruleset.org/20230724/crs…
Franziska Bühler retweeted
Depending on the platform, CRS fails to detect multiple HTTP Content Type Headers. This can lead to impedance mismatch and a #WAF bypass.
Here is our blog post with rules to avoid the problem on affected platforms / CVE-2023-38199.
coreruleset.org/20230717/cve…
Franziska Bühler retweeted
Die Berner Firma @fidentity_ch bietet eine Lösung zur automatisierten Überprüfung von Identitäten mittels Scan von Identitätskarten und Pässen an. Wir durften die Firma in Sachen IT-Security unterstützen:
puzzle.ch/referenzen/vertrau…
Franziska Bühler retweeted
Watch the video of our Keynote by Laurence Kozera & Arjanna Van Der Plas about «Building High-Performing Teams: The crucial Role of Psychological Safety». 🎬 📹
bit.ly/43z55E3
#DevOpsDaysZH #dodzh #devops #devopsdays
Franziska Bühler retweeted
@CoreRuleSet has opened a #YouTube channel. Contact us if you think you have fitting content. And don’t forget to give a thumbs up to the videos and subscribe to the channel if you don’t want to miss any new content. youtube.com/@owaspmodsecurit… #crs #modsecurity #owasp #appsec #waf
Franziska Bühler retweeted
Wir sind davon überzeugt, dass wir unserer #ITSecurity nur vertrauen können, wenn wir sie ständig von einer Community von #EthicalHackers testen lassen. Aus diesem Grund starteten wir vor einem Jahr ein #BugBountyProgramm mit @bugbounty_ch. 💻🔒
puzzle.ch/de/blog/articles/2…
Franziska Bühler retweeted
Anfang Mai stellten unsere Systemengineers fest, dass die Firewalls unserer Cloud-Server alle Pakete einfach durchliessen. Grund dafür ist ein Bug von Ansible 🐛. Die Lösung für das Problem gibt es hier: puzzle.ch/de/blog/articles/2…
#Cybersecurity #BugFix #AnsibleBug
