Case Study
Case Study: Saving Time and Costs with No-Downtime Virtual Patching
A global financial services company applies virtual patches without code changes while vulnerable applications continue to run in production.
Blogs | News | Papers | Case Studies
Blog posts, company news, discussion papers, and customer case studies on runtime security from the Waratek team.
Case Study
Case Study: Healthcare Technology Company Thwarts Crypto-Miners Attacking Oracle ERP
A leading provider of IT and mobility applications for US hospitals and health systems stops an active WebLogic deserialization …
Blog
One-Line Change to RCE: How Easily a Java Deserialization Flaw Is Introduced
A one-line move in an Apache Tomcat refactor made cluster encryption fail open, exposing unfiltered readObject() sink to …
Blog
AI Broke the Deserialization Threat Model
AI now discovers Java deserialization gadget chains in seconds, breaking blocklist and allowlist defenses. Learn why runtime …
More Stories
News
Attackers Bypass WAFs With a Single Character to Exploit Critical Oracle PeopleSoft Flaw
UNC6240 bypasses WAFs with a URL-encoded character to exploit Oracle PeopleSoft CVE-2026-35273, …
News
September CSPU: Patch Volume Drops Sharply, but Six Vulnerabilities Reach Maximum Severity
Oracle's September 2026 CSPU delivers 673 patches across 17 product families, down 29% from August, …
Blog
Turning Your QA Team into Security Heroes (Without Adding a Single Task)
How Waratek IAST runs inside existing JUnit and Selenium test suites to evaluate enterprise Java …
News
Oracle Ships Its Largest Monthly Security Update
Oracle's August 2026 CSPU delivers 943 patches across 23 product families, with 467 exploitable …
News
Waratek Launches Reflection Protection, a Zero-Configuration Defense Against Known and Zero-Day Unsafe Java Reflection and Class-Loading Attacks
Waratek releases Reflection Protection, a zero-config RASP rule that blocks known and zero-day …
Blog
Can We Secure the Code Pipeline in an Era of Autonomous AI Vulnerabilities?
Explores how AI models can autonomously insert vulnerabilities into code and how Waratek IAST and …
Paper
Securing Oracle E-Business Suite: The 2026 Guide to EBS Threats, Best Practices, and Automated Runtime Protection
Blog
Is Autonomous Security The Fuel for AI Innovation?
News
Oracle Releases the July 2026 Critical Patch Update
Blog
Can We Bridge the 42% Perception Gap? Aligning the C-Suite and the SOC
News
Oracle Releases Significant June Security Update
News
Waratek Appoints Apostolos Giannakidis as Chief Technology Officer
Blog
Remediation Crisis: Why 62% of AI Flaws Go Unfixed
News
Oracle Launches Monthly Security Patching
Blog
Waratek IAST + RASP is Insurance Against AI Risk
Blog
Mythos Doesn’t Need CVEs: Defending against AI Zero-Days
Blog
Runtime Reality vs AI Hallucinations in AppSec
Blog
Is Your Security Blind to the Party Inside Your App?
Blog
Why Your Security Team Needs to Move at AI Speed
Blog
Oracle Releases April 2026 Critical Patch Update
Blog
Moving at the Speed of Thought & No Security Debt
Blog
Goldilocks Security: The “Just Right” AppSec Tool
News
Waratek Redefines Secure Development with Launch of Waratek IAST at JavaOne 2026
Blog
Trust, but Verify: AI Code Supply Chain Security
News
Waratek Selected for Ireland INC US 250 Index 2024