Logo
Picture

Core Rule Set @CoreRuleSet

coreruleset.org Joined May 2017
  • Tweets
    560
  • Followers
    1K
  • Following
    32
  • Likes
    397
CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

2 months ago

Open WAF Day Vienna 2026 recap is up 🇦🇹 Talks on the new Coraza/Envoy connector, blazing-fast WAF log analysis, Coraza Center + GitOps, life after Ingress NGINX, and CRS-powered adaptive honeypots. Thanks to everyone who joined us! 📖 coreruleset.org/20260629/open-… #OWASP #WAF #AppSec

CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

6 months ago

Part 2 of the CRS 3→4 migration series: configuration. Don't reuse your old crs-setup.conf — variables were renamed, split, and added. Post includes a full checklist and an interactive migration tool. coreruleset.org/20260406/migra… #OWASP #CRS #WAF #AppSec

CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

6 months ago

Migrating from OWASP CRS 3.3 to 4.25 LTS? Part 1 of a 7-part series is out — covering what changed, what breaks, and how to plan your upgrade. ~500 changes, new plugin architecture, RE2/Hyperscan compat, and more. coreruleset.org/20260330/migra…

CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

6 months ago

🔒 Security Advisory: OWASP CRS file upload extension checks could be bypassed using whitespace padding in filenames (e.g. shell. php). CVE-2026-33691, Moderate severity. Upgrade to CRS v4.25.0 or v3.3.9. Thanks @HackingRepo for the report! github.com/coreruleset/co…

CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

6 months ago

OWASP CRS v4.25.0 LTS is out! First Long-Term Support for CRS 4 — stable foundation with security patches through Q3 2027. Formal backport policy, lessons from 3.3 applied, and crslang on the horizon. coreruleset.org/20260321/annou…

CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

7 months ago

📢 Open WAF Day 2026 — Vienna, June 24th! 🇦🇹 A free, full-day event on WAFs, @coreruleset, and open-source security. CFP is open! 🎟️ Register: forms.gle/UckehAUPdR8xZV… 🎤 Submit a talk: forms.gle/PoBKhza7YcRLFd… See you there! 🚀 #OWASP #WAF #AppSec #CRS

CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

7 months ago

🔥 OWASP CRS is evolving! Introducing #CRSLang — a new YAML-based rule language replacing Seclang. Cleaner syntax, multi-engine support, bidirectional translation, and a lower barrier for new contributors. Check it out 👉 coreruleset.org/20260122/intro… #WAF #AppSec #OWASP #ModSecurity

CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

8 months ago

📦 CRS v4.23.0 released! New CVE detection, SSRF improvements, PHP session upload prevention & more. Thanks to our amazing contributors: @touchweb_vincent, @azurit, @RedXanadu, @EsadCetiner, @Xhoenix & welcome @disisto! 🎉 Upgrade now 👇 github.com/coreruleset/co…

CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

8 months ago

🎉 Introducing seclang_parser - a unified ANTLR-based parser for SecLang! One grammar, multiple languages (Go & Python), endless possibilities for WAF tooling: linters, IDE integration, config management & more. 🔗 coreruleset.org/20260122/intro…

CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

10 months ago

CRS3→CRS4 migration made easy! 🚀 🧩 New GPL plugin lets you: • Run CRS4 in monitor mode over CRS3 • Weed out false positives • Gradually enable blocking or sampling github.com/netnea/netnea-… #OWASP #CRS #Security

CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

11 months ago

🚀 OWASP CRS v4.20.0 is out! ✨ New: Enhanced file restrictions, PrestaShop/Magento configs, Expect header blocking 🛠️ Multiple fixes reducing JSON false positives + better detection 👉 github.com/coreruleset/co… #OWASP #CRS #WebSecurity #AppSec

CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

a year ago

CRS will have its second community call on September 22, from 20:30 to 21:30 CEST (18:30 UTC / 2:30 p.m. ET) and will be moderated by former CRS co-leader Christian Folini. Check more details and register here: luma.com/8yc1p543

CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

a year ago

A critical vulnerability in Microsoft Sharepoint was recently discovered, allowing remote code execution -- in many cases, leading to persistence for the attackers, exfiltration of data, and more. Users of CRS were already covered from day zero using PL2.

CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

2 years ago

CRS will have its first community call on March 17, from 20:30 to 21:30 CET (19:30 UTC / 2:30 p.m. ET) and will be moderated by former CRS co-leader Christian Folini. Register here: coreruleset.org/register/commu…

CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

2 years ago

A somewhat diminished OWASP⁩ CRS core team at the annual developers retreat / the ⁦@owasp⁩ project summit 2024 in Woburn Forest (group photo without squirrels and deer).

CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

2 years ago

Meet the CRS team: Whether it's work or hobbies, Max – the Kiwi-German software developer from the Swiss Alps – wants to enjoy what he does. For him, the most important thing about the CRS project is the people. Read his portrait: coreruleset.org/20240903/meet-…

CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

2 years ago

See also the blog post on @uspag‘s website: united-security-providers.ch/united-securit…

CoreRuleSet Profile Picture

Core Rule Set @CoreRuleSet

2 years ago

We are excited to announce United Security Providers as Gold Sponsor of @CoreRuleSet. USP has been using CRS for a long time as an important component of its web access management solution. Support from sponsors is of great importance for the CRS project. coreruleset.org/20240903/unite…

Core Rule Set retweeted
ModSecurity Profile Picture

ModSecurity @ModSecurity

2 years ago

New versions of ModSecurity have been released, see the blog post: modsecurity.org/20240903/new-v…

Trends for United States

Breaking Bad
The Wire
Fleetwood Mac
Sopranos
Mad Men
Bill Gates
Saul
Man City
Fleabag
Bosa
Band of Brothers
Peele
#OlandriaxBlumarineSS27
Chappelle
Bo Derek
The Supreme Court
Game of Thrones
#FursuitFriday
Manchester City
Marcus Smart

You might like

Researcher @SpecterOps. Coding towards chaotic good while living on the decision boundary.
Will Schroeder
@harmj0y
50K Followers
I'm also @taviso@social.sdf.org
Tavis Ormandy
@taviso
130K Followers
A leading provider of #offensivesecurity solutions & contributor to the #infosec community. #pentesting #hacking VC @forgepointcap @carrickcapital @WestCap8
Bishop Fox
@bishopfox
26K Followers
Official announcements (low vol) for ZAP by @Checkmarx - the worlds most popular web app scanner. Free and open source. https://t.co/pxO8zZ6usH
Zed Attack Proxy
@zaproxy
15K Followers
🛡️ Leading Cyber at @OpenAI 📚 Creator of https://t.co/xwtIAI0CuJ newsletter
Clint Gibler
@clintgibler
26K Followers
AI Security Researcher @nvidia | Prev: @Microsoft @awscloud | Founder of the @OTR_Community
Roberto Rodriguez �...
@Cyb3rWard0g
27K Followers
Official account of WSTG, the most comprehensive open source guide for testing web apps and services since 2004. That's right, I was around before Twitter.
OWASP Web Security Te...
@owasp_wstg
4K Followers
Corelan | Infosec Researcher&Trainer, Hacker | Outgoing Introvert (INFJ-A) | Book lover | Fountain pen affictionado | Chess amateur | Foodie | 🖤
ς๏гєɭคภς0�...
@corelanc0d3r
26K Followers
Hosts dig into the stories of AppSec experts and the tools, tactics, and tricks that make them successful.
The Application Secur...
@AppSecPodcast
3K Followers
Tech Director / Threat Intelligence at Microsoft. Previously, Director of Incident Response & Intel Research at Mandiant. Former Chief Technical Analyst at CISA
Nick Carr
@ItsReallyNick
39K Followers
Founder @rev3rsesecurity / I ❤️ to break application firewalls.
theMiddle
@AndreaTheMiddle
1K Followers
Cutting-edge security research by @SonarSource to educate the world about code security across all software. We're also at @SonarResearch@infosec.exchange 🦣
Sonar Research
@Sonar_Research
11K Followers
| CTO @specterops | Host @dcpthepodcast | Ex PowerShell MVP | USAF Vet | FC Bayern Supporter | Language Learner 🇳🇴 🇮🇹 🇧🇷 |
Jared Atkinson
@jaredcatkinson
10K Followers
inventor of Uncoder IO & AI, #threatbounty #sigma and @MITREattack addict, founder & CEO @SOC_Prime personal account, all opinions are my own. he/him 🇺🇦
Andrii Bezverkhyi
@andriinb
3K Followers
#ThreatModeling Trainer. PhD Space Cybersecurity candidate @captechu. 17x @MVPAward. @AppSecPodcast co-host.
Robert Hurlbut
@roberthurlbut
2K Followers