Security Blog - Page 13

Exploiting SNI SSRF to access the AWS IDMSv2 service

March 17, 2023

In this post we look at a unique method of delivering a SSRF payload and review how this could be leveraged to fully compromise a cloud environment. We will also dive into the potential risks and impact of SSRF and highlight the importance of a secure cloud deployment.

VPN Security

February 24, 2023

In this blog post we look at some of the common risks associated with VPN deployment, and how they can best be avoided so that technical services and functions can be delivered to the required audiences with greater security assurance.

What is a trust boundary and how can I apply the principle to improve security?

February 10, 2023

In this blog post we look at what trust boundaries are, how they are commonly utilised, and what simple processes teams can take in order to begin the process of implementing trust boundaries in order to better manage cybersecurity risk.

Hacking in The Movies: What They Get Wrong (And What They Occasionally Get Right…)

January 19, 2023

In this blog post we take a step back from some of our more serious and informational content and dive instead into the world of entertainment, taking a light-hearted look at some of the most common tropes found in movie portrayals of hacking.

Database Hardening

January 17, 2023

In this blog post we take a look at the wider context of database security by briefly surveying the various scenarios surrounding database configuration, deployment and maintenance that can lead to security weaknesses. We then take a look at what measures organisations can take to harden their database systems to better resist attacks or exploits by adversaries.

DNS Security

November 9, 2022

We will look at how the DNS system developed, as well as how some of the decisions taken in establishing the protocols used for DNS, leave it vulnerable to certain exploits. Finally, we will cover some of the more esoteric exploits using the protocol that have since been discovered or developed by researchers and hackers, as well as what can be done to ensure that DNS implementations and usages are suitably secured wherever possible.

AppCheck Security Blog

FEATURED POST

Security Advisory: Duplicate Post WordPress Plugin SQL Injection Vulnerability (CVE-2021-43408)

Filter by:

Exploiting SNI SSRF to access the AWS IDMSv2 service

VPN Security

What is a trust boundary and how can I apply the principle to improve security?

Hacking in The Movies: What They Get Wrong (And What They Occasionally Get Right…)

Database Hardening

DNS Security

Services

Company

Resources

Keep in touch

Get in touch

Start your free trial