AppCheck Ltd provides vulnerability scanning and security testing services for APIs, Single Page Applications (SPAs), and IT systems, with a focus on thorough examination for security flaws.

AppCheck Ltd

AppCheck Ltd | 7,986 followers on LinkedIn. Bridging the gap between manual and automated security testing.  | AppCheck is a Complete Enterprise Security Testing Solution that provides up to the minute vulnerability coverage for your entire estate. 

Whilst we provide extremely thorough infrastructure testing, our area of specialism lies within testing complex websites and applications. Not only do we detect vulnerabilities with known signatures, it’s our ability to detect some of the hardest to reach security flaws using a first principles methodology, is why we&#39;re trusted by some of the worlds most recognised brands.

Antony Semonella

Technical Director at AppCheck Ltd

Gary Oleary-Steele

Software Developer at AppCheck Ltd

Matthew Youds

CCSM | Cyber Security - Pen Testing/DAST/API/Automated Security/SecOps - SaaS @ AppCheck

Tom Evans

🚨 CISA is back with a vengeance this week, with a total of 8 active exploitation alerts affecting several top-tier vendors. Stay up to date and check the below: ◾ Following 'Patch Tuesday' earlier this week, Microsoft have understandably earned extra attention in this round-up as they take on the title of 'most exploited vendor in the wild' this week. ◾ One exploit to rule them all? A path traversal exploit within the niche webserver 'Nazgul Nostromo' sees widespread exploitation according to CISA, with the full attack surface not yet known. ◾ Other exploits this week include vulnerabilities within Cisco, Palo Alto, Atlassian and more! Read more: https://lnkd.in/eGwMNj_F Our article linked above covers recent & active exploitations. They are categorised based not only on the category of exploitation, but their impact, and versions affected. We've also included any official fix and remediation guidance for the listed exploits. #CyberSecurity #CVEs #Vulnerabilities #CISA #NazgulNostromo #Microsoft #Windows #TaskScheduler #GoogleTAG #NTLM #PaloAlto #Expedition #Cisco #AndrexGhost #GhostSec #Metabase #FortiGuard #Oracle #WebLogic #Atlassian #Jira #MSOffice #DLink #Shadowserver #Citrix

📣 Three critical flaws are amongst the 41 vulnerabilities that make up AppCheck's monthly coverage of the Palo Alto Networks Security Advisory Round-up. With CISA releasing an advisory regarding an active exploitation in the Expedition migration software, and Palo Alto themselves releasing an advisory about a '0-Day' in it's PAN-OS software, it's safe to say its been' a bumpy ride recently for Palo Alto Networks. Check out our blog below to see a run through of some of these critical & high severity vulnerabilities, as well as advice on how you can protect your organisation in this edition of the Palo Alto Networks Security Round-up. Read more here: https://lnkd.in/eRR_m_Si #CyberSecurity #PaloAltoNetworks #PaloAlto #Vulnerabilities

89 vulnerabilities make up AppCheck's November coverage of 'Patch Tuesday', including 2 'Zero-Day' critical vulnerabilities being actively exploited in the wild: ◾ An NTLM Hash Disclosure Vulnerability within Microsoft Windows has been confirmed as undergoing active exploitation, allowing attackers to pose as legitimate users to gain 'authorised' access. ◾ An elevation of privilege vulnerability is being leveraged in Task Scheduler by attackers (likely a highly sophisticated APT or nation-state group), so they can execute typically restricted functions. ◾ 8 highly exploitable but not exploited - yet! - vulnerabilities also found within products & platforms include the Windows Kernel, DWM Core Library, Win32K and more. Check out our blog below to see a run through of some of these critical patches to prioritise, as well as general statistics to be aware of for this month's edition of Patch Tuesday. Read more here: https://lnkd.in/egmKytBr #CyberSecurity #PatchTuesday #Microsoft #ZeroDays #Vulnerabilities

Enabling Rail Delivery Group’s Real-Time Vulnerability Insights 🚄 When Rail Delivery Group sought greater security control across their applications, they turned to AppCheck for a comprehensive vulnerability management solution. Our platform equipped RDG with streamlined, actionable insights across their digital assets. The result? Reduced risk exposure and enhanced visibility across vital platforms like Railcard. “AppCheck gives us the ability to quickly identify vulnerabilities... and provide assurance to the business,” RDG’s Head of Information Security shared. Discover how AppCheck transformed RDG’s security landscape: https://lnkd.in/euZABTMc #CyberSecurity #VulnerabilityManagement #ZeroDays #CaseStudy #RailDeliveryGroup #ApplicationSecurity

🚨 Third party researchers appear to have taken the reigns this past week, with the majority of alerts not reported by CISA. Stay up to date and check the below: ◾ Microsoft, ShadowServer and more threat intelligence sources have issued critical alerts over the ongoing exploitation of varied platforms. ◾ CISA have reported several models of network-enabled, high-fidelity video cameras from PTZOptics have been compromised by attackers via a pair of critical vulnerabilities. ◾ Other exploits this week include vulnerabilities within Sophos, Apple, Google and more! Read more: https://lnkd.in/e27GaqTk Our article linked above covers recent & active exploitations. They are categorised based not only on the category of exploitation, but their impact, and versions affected. We've also included any official fix and remediation guidance for the listed exploits. #CyberSecurity #CVEs #Vulnerabilities #CISA #PTZOptics #Sophos #SophosFirewall #Mallox #Microsoft #SQL #Splunk #ShadowServer #Apple #OSX #Google #AndroidOS #SteelFox #Windows

🚨 This week we cover off the emerging threats and renewed attacks that caused quite a scare in the build up to Halloween. Patch promptly and don't be haunted by the below: ◾ CISA report just one patch this week, but it's the notorious, device-targeting gift that keeps on giving - 'Ripple20'. ◾ The ghostly threat group 'IntelBroker' utilises flaws within Ivanti and Atlassian and steals sensitive data. ◾ Mass ransomware attacks effecting nearly 22,000 servers enabled thanks to publicly available exploit code released only days after the original advisory was published. ◾ Other exploits this week include vulnerabilities within Apple, Jenkins and more! Read more: https://lnkd.in/ePANMAaD Our article linked above covers recent & active exploitations. They are categorised based not only on the category of exploitation, but their impact, and versions affected. We've also included any official fix and remediation guidance for the listed exploits. #CyberSecurity #CVEs #Vulnerabilities #CISA #Ripple20 #Treck #Jenkins #CyberPanel #Ransomware #PSAUX #IntelBroker #Ivanti #Atlassian #Cisco #Confluence #PostGreSQL #Apple #iOS #LightSpy2

🚨 In our latest monthly feature, Cisco’s October update unmasks 4 critical vulnerabilities amongst 54 flaws - keeping threats from haunting your system. 👻 Check out our blog below to see AppCheck run through of some of the security fixes released by Cisco in the last month, as well as highlighting some of the most critical issues. Read more here: https://lnkd.in/eV7_x-Pu #CyberSecurity #Cisco #Vulnerabilities

🚨 This week we've seen a wide a range of exploits causing a scare as we approach Halloween next week! Check out the highlights: ◾ Tens of thousands of Fortinet's FortiManager devices across the internet find themselves vulnerable to an unpatched '0-day' authentication bypass flaw that as of now has left a two month window of opportunity for attackers. ◾ Exploits targeting Samsung and Google smartphone devices are being waved in the general direction of 'commercial spyware' operators. ◾ Rackspace has revealed that a recent outage was the result of unknown entities exploiting a vulnerability in a service used in their platform, but deployed across other organisations too. ◾ Other exploits this week include vulnerabilities within Microsoft, Roundcube, Cisco and more! Read more: https://lnkd.in/eRSh8xmJ Our article linked above covers recent & active exploitations. They are categorised based not only on the category of exploitation, but their impact, and versions affected. We've also included any official fix and remediation guidance for the listed exploits. #CyberSecurity #CVEs #Vulnerabilities #CISA #Rackspace #ScienceLogic #SharePoint #Microsoft #Samsung #Google #Fortinet #FortiManager #Roundcube #Webmail #Cisco #Talos #Akira #HyperFlex #PaloAltoNetworks #Java #Spring

🚨 National security agencies have identified new vulnerabilities being actively exploited by Chinese state actors ('Salt Typhoon'), targeting common server software and network appliances. Following last month's alert, additional flaws in Apache HTTPD, Fortinet FortiOS, and Microsoft Exchange are now being targeted by state-linked cyber actors. Read more: https://lnkd.in/dUePD_RJ

🛡️ Do you know your DAST from your SAST? 🛡️ Our unmissable back-to-basics webinar on vulnerabilities is just 24 hours away! This is your chance to join Graham Bacon and the teams at AppCheck Ltd and CommSec to learn how to Maximise your Enterprise Security with automated vulnerability scanning. 📈 Why join? - Learn the fundamentals of security scanning and why it is essential for your organisation. - Learn best practices for managing vulnerabilities across web apps, networks, servers, and cloud environments. - Learn How Dynamic Application Security Testing (DAST) fits into a proactive security strategy. 🎁 Plus, take part in the live quiz for your chance to win an Amazon Echo Show, and be one of the first 10 attendees and receive a €15 Just Eat Voucher! Secure your seat, register here 👉 https://buff.ly/3BhYnc9 #AppCheck #CommSec #CyberSecurity #VulnerabilityScanning #EnterpriseSecurity

APPC

COM:APPCHECK-NG

AppCheck Ltd