Delete WAF bypass vulnerabilities (out of scope)

pages/about.md

@@ -1,7 +1,7 @@
 # About
 ### Mission Statement
 
 Security bugs in cloud services tend to [fall between the cracks](https://www.wiz.io/blog/security-industry-call-to-action-we-need-a-cloud-vulnerability-database/), as they don’t fit well into the current [shared responsibility model](https://cloudsecurityalliance.org/blog/2020/08/26/shared-responsibility-model-explained/) of cloud security. As a result, remediation of cloud security vulnerabilities often requires a joint effort between both the CSP and their customers.
 
 There is currently no universal standard for cloud computing vulnerability enumeration – CSPs rarely issue CVEs for security mistakes discovered in their services, there are no industry conventions for assessing severity of cloud vulnerabilities, no proper notification channels and no unified tracking mechanism – this leads to a great deal of inefficiency and confusion surrounding cloud vulnerability management.
 
@@ -17,15 +17,17 @@
 4.	And required remediation actions on either side of the shared responsibility model.
 
 Examples include:
--	Security issues in default misconfigurations
+- Security issues affecting CSP-managed services
+-	Default misconfigurations of CSP-managed services
 -	Vulnerabilities in CSP-provided client software
 
 We consider the following cases to be out of scope of this project:
 -	Cloud vulnerabilities or security issues about which there is no publicly available information
 -	CSP customer security incidents
+-	WAF bypass vulnerabilities
 
 ### History
 This project was built on the foundations of [Scott Piper](https://twitter.com/0xdabbad00)’s [“Cloud Service Provider security mistakes”](https://github.com/SummitRoute/csp_security_mistakes), and as of June 28th, 2022, all content included here originally appeared in that repository.
 
 ### Next Steps
 Besides continuing to document newly discovered cloud vulnerabilities and security issues, we would also like to achieve the following:
@@ -36,12 +38,12 @@
 
 ### Project Maintainers
 * [Scott Piper](https://twitter.com/0xdabbad00)
 * [Amitai Cohen](https://twitter.com/amitaico)
 * [Alon Schindel](https://twitter.com/41thexplorer)
 
 ### Related Efforts
 -	[CSA Global Security Database](https://globalsecuritydatabase.org/)
 -	[Cloud Security Notification Framework](https://onug.net/blog/multi-cloud-security-gets-a-decorator/)
 
 ### Contact Us
 * Join our [Slack group](https://join.slack.com/t/cloud-cve-db/shared_invite/zt-y38smqmo-V~d4hEr_stQErVCNx1OkMA)