The Trivy Supply Chain Attack and the Visibility Gap

Recent reports of a supply chain attack involving Trivy, a widely used open-source security scanner, reveal a concerning evolution in open-source threats: self-propagating malware spreading […] The post The Trivy Supply Chain ...

The AI Visibility Gap Is Real – And It Lives on Your Website

Not a single CISO has full visibility into how AI is operating across their organization. Not one. That’s the headline finding from Pentera’s AI Security […] The post The AI Visibility Gap ...
How AI Is Already Reshaping Retail Security Threats (And What’s Next)

How AI Is Already Reshaping Retail Security Threats (And What’s Next)

The e-commerce landscape is facing a paradox that should alarm every security leader. While 80% of CISOs identify web protection as their top priority, only […] The post How AI Is Already ...
Image 1 Screenshot

How to Comply with PCI DSS 4.0 Requirements 6.4.3 and 11.6.1

The countdown to compliance is in its final stretch. With the third and final phase of PCI DSS 4.0 requirements taking effect on March 31, 2025, organizations are under increasing pressure to ...

Imperva Client-Side Protection Mitigates the Polyfill Supply Chain Attack

The recent discovery of a website supply chain attack using the cdn.polyfill.io domain has left many websites vulnerable to malicious code injection. Once a trusted resource for adding JavaScript polyfills to websites, ...

The Dark Side of Web Development: Why You Should Be Prioritizing Shadow Code

In the fast-paced world of web development, staying ahead of the curve is paramount, as developers are frequently under pressure to deliver products and functionalities quickly and efficiently. To meet accelerated timelines, ...

Imperva Offers New Features to Simplify PCI DSS Compliance

The Silent Threat of Client-Side Attacks As more transactions move online, a silent threat is lurking in the deepest, darkest shadows of websites, threatening to steal your sensitive data. This rapidly evolving ...
client-side security

Safeguarding Web Browsing: 5 Reasons to Prioritize Client-Side Security

Individuals continuously generate data, and much of it is about themselves and can be accessed by businesses and government entities. However, there is also the looming threat of unauthorized access to personal ...
Never Trust Your Application’s Supply Chain with Security

Never Trust Your Application’s Supply Chain with Security

To understand why the application supply chain is an area that should not be overlooked, we must first understand the current cyber threat landscape and how modern applications are built. The post ...
API Definition

Everything You Need To Know About The Latest Imperva Online Fraud Prevention Feature Release

It’s a new year and we have lots of fresh features for Imperva Online Fraud Prevention solution, which encompasses Advanced Bot Protection, Account Takeover Protection, and Client-Side Protection. We have been busy ...