AppCheck Security Blog
Featured post
What is Cross-Site Scripting and how to prevent it
/ Posted March 25, 2020
Cross-Site Scripting or “XSS” is one of the most common vulnerabilities found in web applications. XSS made up nearly 40 per cent of all attacks logged by security researchers in recent years, who also noted that almost 75 per cent of large companies across Europe had been targeted over the last year.
read moreFilter by:
What is Cross-Site Scripting and how to prevent it
Research / Posted March 25, 2020
Cross-Site Scripting or “XSS” is one of the most common vulnerabilities found in web applications. XSS made up nearly 40 per cent of all attacks logged by security researchers in recent years, who also noted that almost 75 per cent of large companies across Europe had been targeted over the last year.
Read moreCOVID-19 Update
News / Posted March 18, 2020
During this time of uncertainty around the impacts related to COVID-19 we would like to reassure our customers, partners and employees that we anticipate minimal disruption to services and that staff well-being and helping keep customers secure remains our top priority.
Read moreAn Introduction to SQL Injection (SQLi)
Research / Posted March 12, 2020
Injection attacks are the most common type of fault found in web applications, they are usually the result of unfiltered user input being directly included into command executions or database queries.
Read moreWeb cache poisoning explained
Research / Posted March 09, 2020
A cache in computing is a temporary store of any content that has been retrieved from its original (master) source. Caches are typically used so that the data can be served faster the next time it is requested, since it needs only be retrieved from the local cache rather than the original source. The problem from a security point of view is that any response that is successfully cached will by design be stored and served to other users, and in some circumstances this can lead to problems.
Read moreWebinar: Cross-Site Scripting (XSS)
Events / Posted March 04, 2020
Cross-Site Scripting (XSS) is by far the most widespread high impact vulnerability, present even in the best of web applications, regardless of the framework or programming language employed - a burly steadfast member of the OWASP Top Ten.
Here at AppCheck the client-side nature of typical XSS has led to a general underappreciation of its exploitation potential, though a good understanding of the vulnerability and its subtle variations will show how it can be used to devastating effect... and more importantly: how it can be avoided.
In this seminar we will build up piece-by-piece an understanding of XSS that spares no detail.
AppCheck Vulnerability Scanner Release Notes - 03.03.2020
Product / Posted March 03, 2020
A short summary of recent work on the product and an insight into the development of AppCheck.
Read moreGhostCat Vulnerability - CVE-2020-1938
Security Alerts / Posted February 27, 2020
Aside from being a – by all accounts truly terrible – direct-to-TV movie about a recently deceased cat who comes back from the dead to try and stop scammers and wealthy businessmen from making unnecessary land-development deals, “Ghostcat” is also the fond nickname for vulnerability CVE-2020-1938.
Read moreCloud & Cyber Security Expo 2020
Events / Posted February 20, 2020
AppCheck will be attending the Cloud & Cyber Security Expo 2020 in March and we hope to see you there.
Of course you can expect talks from our Head of Research & Development, Nick Blundell across both days in the 'Application Security and DevSecOps' theatre.
Read moreAppCheck Wins Prolific North Tech Awards 2020
News / Posted February 14, 2020
The Prolific North Awards represent 'the very best tech companies' across the North, judged by an esteemed panel of industry leaders and experts. This year AppCheck took the win for 'Best Application of Tech - Security' due to the way we have applied our automated vulnerability scanning tool to the industry and our advances in application scanning.
Read moreWebinar: Cross-Site Scripting (XSS)
Events / Posted February 04, 2020
Cross-Site Scripting (XSS) is by far the most widespread high impact vulnerability, present even in the best of web applications, regardless of the framework or programming language employed - a burly steadfast member of the OWASP Top Ten.
Here at AppCheck the client-side nature of typical XSS has led to a general underappreciation of its exploitation potential, though a good understanding of the vulnerability and its subtle variations will show how it can be used to devastating effect... and more importantly: how it can be avoided.
In this seminar we will build up piece-by-piece an understanding of XSS that spares no detail.