Blog
One-Line Change to RCE: How Easily a Java Deserialization Flaw Is Introduced
A one-line move in an Apache Tomcat refactor made cluster encryption fail open, exposing unfiltered readObject() sink to unauthenticated RCE (CVE-2026-34486).
Blogs | News | Papers
Blog posts, company news, and discussion papers on runtime security from the Waratek team.
Blog
AI Broke the Deserialization Threat Model
AI now discovers Java deserialization gadget chains in seconds, breaking blocklist and allowlist defenses. Learn why runtime …
News
Attackers Bypass WAFs With a Single Character to Exploit Critical Oracle PeopleSoft Flaw
UNC6240 bypasses WAFs with a URL-encoded character to exploit Oracle PeopleSoft CVE-2026-35273, showing why perimeter defenses …
News
September CSPU: Patch Volume Drops Sharply, but Six Vulnerabilities Reach Maximum Severity
Oracle's September 2026 CSPU delivers 673 patches across 17 product families, down 29% from August, with six CVSS 10.0 flaws …
More Stories
Blog
Turning Your QA Team into Security Heroes (Without Adding a Single Task)
How Waratek IAST runs inside existing JUnit and Selenium test suites to evaluate enterprise Java …
News
Oracle Ships Its Largest Monthly Security Update
Oracle's August 2026 CSPU delivers 943 patches across 23 product families, with 467 exploitable …
News
Waratek Launches Reflection Protection, a Zero-Configuration Defense Against Known and Zero-Day Unsafe Java Reflection and Class-Loading Attacks
Waratek releases Reflection Protection, a zero-config RASP rule that blocks known and zero-day …
Blog
Can We Secure the Code Pipeline in an Era of Autonomous AI Vulnerabilities?
Explores how AI models can autonomously insert vulnerabilities into code and how Waratek IAST and …
Paper
Securing Oracle E-Business Suite: The 2026 Guide to EBS Threats, Best Practices, and Automated Runtime Protection
A 2026 guide to Oracle EBS security covering recent critical CVEs, common vulnerability classes, …
Blog
Is Autonomous Security The Fuel for AI Innovation?
IAST and RASP let organizations pair fast AI development with continuous security rather than …
News
Oracle Releases the July 2026 Critical Patch Update
Blog
Can We Bridge the 42% Perception Gap? Aligning the C-Suite and the SOC
News
Oracle Releases Significant June Security Update
News
Waratek Appoints Apostolos Giannakidis as Chief Technology Officer
Blog
Remediation Crisis: Why 62% of AI Flaws Go Unfixed
News
Oracle Launches Monthly Security Patching
Blog
Waratek IAST + RASP is Insurance Against AI Risk
Blog
Mythos Doesn’t Need CVEs: Defending against AI Zero-Days
Blog
Runtime Reality vs AI Hallucinations in AppSec
Blog
Is Your Security Blind to the Party Inside Your App?
Blog
Why Your Security Team Needs to Move at AI Speed
Blog
Oracle Releases April 2026 Critical Patch Update
Blog
Moving at the Speed of Thought & No Security Debt
Blog
Goldilocks Security: The “Just Right” AppSec Tool
News
Waratek Redefines Secure Development with Launch of Waratek IAST at JavaOne 2026
Blog
Trust, but Verify: AI Code Supply Chain Security
News
Waratek Selected for Ireland INC US 250 Index 2024