Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

In November 2025, AppTrana detected 227 zero-days and blocked every single one. Explore the full report to see how complete coverage looks.

India’s DPDP Rules 2025 are now enforceable. Failures like zero-day attacks or bot abuse can trigger penalties up to ₹250 crore. See how organizations stay audit-ready with AppTrana WAAP protection.

A critical stored XSS vulnerability (CVE-2025-10573) in Ivanti Endpoint Manager lets attackers poison the admin dashboard with malicious scripts, leading to session hijacking and device compromise. AppTrana blocks these malicious scan submissions at the edge, preventing stored XSS payloads from ever reaching the EPM dashboard, even before patching.

About Indusface: Indusface is a leading application security SaaS company, securing over 6,500 customers across 95 countries with its award-winning platform. Backed by leading institutional investors, Indusface is a category leader in cloud WAAP, with repeated recognition from top analysts and industry platforms including Gartner, Forrester, GigaOm, and G2. The industry's only AI-powered, all-in-one AppSec platform helps businesses discover, detect, remediate, and protect web applications and APIs at internet scale, backed by a 100% uptime guarantee.

In Episode of Guardians of the Enterprise, Dr. Pawan Chawla (CISO and DPPO, Tata AIA Life Insurance) joins Ashish Tandon (Founder and CEO, Indusface) to discuss the emerging cyber challenges facing the insurance industry. He highlights how cybercrime marketplaces are lowering barriers for attackers, the rise in third-party and internal risks, and other evolving threats shaping security priorities for insurers.

In this episode, Dr. Pawan Jawla, Chief Mission Security Officer at Tata AIA, shares what truly keeps security leaders awake at night while protecting mission-critical insurance systems. From the rise of low-cost ransomware and evolving fraud techniques, to meeting Government of India, DCI, and insurance-specific compliance standards. We also explore why security audits should be treated as gap-finding, not fault-finding, the persistent confusion around data ownership inside enterprises, and why, despite massive investment, 95% of organizations still struggle to see ROI from AI.

A critical XXE vulnerability, CVE-2025-66516, has been discovered in Apache Tika, putting any workflow that processes PDFs at serious risk. A malicious PDF can trigger the exploit through any Tika workflow, silently giving attackers access to sensitive files, internal URLs, cloud metadata, and your internal network. AppTrana blocks these malicious PDFs at the edge, keeping your data and internal systems secure.

New XSS vulnerability in Apache SkyWalking! CVE-2025-54057 enables stored script injections that steal sessions and manipulate dashboards. Fix + protection steps inside.

With over 32,000 security incidents reported by U.S. federal agencies in the past year, cyber risks are growing in scale and complexity. NIST SP 800-53 r5 provides a comprehensive framework of security and privacy controls to help organizations manage risk, protect critical systems, and maintain regulatory compliance.

Achieving FedRAMP compliance is complex, but AppTrana WAAP simplifies it. This video explains how AppTrana delivers continuous vulnerability scanning, attack prevention, SIEM-friendly audit logs, real-time incident response, and automated remediation through SwyftComply. Perfect for CISOs, compliance teams, and cloud security leaders preparing for FedRAMP audits.