Skip to content
  • About
  • Our Services
  • Our Methodology
    • Attacks & Tests
    • Testing modes
  • Blog

Contact us

Have a question or comment? Submit your message through our contact form and a member of our team will get back to you within 24 hours.

Edit Content

    Blog

    • Home
    • Blog
    Hacking

    Is Your AI Secure? The Dark Reality of LLM Vulnerabilities

    February 23, 2026 AppSec Labs No comments yet

    Cyber attacks targeting large language model (LLM) based applications are increasing in both frequency and sophistication. Misconfigured chatbots, exposed APIs, and weak integrations with web, cloud, and mobile systems can quickly lead to data breaches, ransomware incidents, or service disruptions. To prevent these issues, organizations need focused cyber security services that understand how AI behaves […]

    Hacking

    Securing the Lifeline: A Guide to Medical Device Penetration Testing

    February 15, 2026 AppSec Labs No comments yet

    Medical devices now sit at the center of hospital networks, cloud platforms, and mobile apps, which makes them attractive targets for cyber attackers. A successful attack can expose sensitive medical data, disrupt life critical treatments, and put healthcare providers at risk of regulatory penalties. This article explains why medical device penetration testing is vital, what […]

    Brute Force

    What Is Real-Time Penetration Testing And Why It Matters

    January 25, 2026 Lior Gershon No comments yet

    One quiet vulnerability can be tomorrow’s headline, and the clock is always in the attackers’ favor. IBM’s 2025 Cost of a Data Breach Report just discovered the average global breach cost, not surprisingly, is $4.44 million, which obviously highlights how expensive “later” can be. Penetration testing mitigates that risk by imitating actual attacks so that exploitable holes crop […]

    Hacking

    AI-Driven Penetration Testing For Evolving Threats: A CISO Guide

    January 11, 2026 AppSec Labs No comments yet

    Cyber threats don’t wait for next quarter’s test cycle. Verizon DBIR 2025 coverage shows attackers exploit vulnerabilities in about 5 days on average, while organizations take a median of 32 days to fully remediate key edge and VPN issues, which leaves a dangerous exposure gap. AI-Driven Penetration Testing blends smart automation with expert validation, and […]

    White Box Testing

    Beyond the Password: Advanced Authentication Testing Techniques for Modern Applications

    July 3, 2025 AppSec Labs No comments yet

    Why Authentication Needs to Evolve In today’s threat landscape, relying solely on usernames and passwords is no longer sufficient to protect sensitive systems. Authentication mechanisms have become increasingly complex, driven by the need to support Single Page Applications (SPAs), mobile-first platforms, third-party integrations, and hybrid cloud environments. While this evolution has brought greater user convenience, […]

    Web Services Testing
    White Box Testing

    Web Services Testing: Safeguarding Your Web Applications Against XXE Attacks

    June 8, 2025 AppSec Labs No comments yet

    As organizations increasingly rely on web services, particularly SOAP-based services, ensuring robust security through meticulous Web Services Testing has become critical. One common and significant vulnerability in these services is XML External Entity (XXE) Injection. This guide will demonstrate how comprehensive Web Services Testing can identify and mitigate such risks. What is XML External Entity […]

    Software Security Testing
    White Box Testing

    The Ultimate Guide to Securing Applications Through Software Security Testing

    June 8, 2025 AppSec Labs No comments yet

    Software application security testing is essential in safeguarding applications against vulnerabilities and potential cyber-attacks. With increasing threats, ensuring the security of applications through thorough testing is crucial for protecting sensitive data and maintaining user trust. Common Types of Software Security Hacks and Vulnerabilities 1. Injection Attacks Injection attacks involve inserting malicious code into applications, often […]

    PHP Security Code Review Cheat Sheet
    Code Review

    PHP Security Code Review Cheat Sheet

    February 10, 2025 Michael Yermakov No comments yet

    In today’s development landscape among our customers, it’s rare to encounter production PHP code. However, when we do, the story is always the same. Typically, such code is riddled with numerous high and critical-level vulnerabilities. Reviewing and testing this kind of code feels like being transported back in time about 20 years when all the […]

    Still Using SSRF to Take Over Cloud Deployments Once Again
    Brute Force

    Still Using SSRF to Take Over Cloud Deployments Once Again

    January 16, 2025 Michael Yermakov No comments yet

    How Server-Side Request Forgery Can Lead to Full Cloud Compromise – and What You Can Do About It Introduction Server-Side Request Forgery (SSRF) is a powerful exploit that enables attackers to trick a vulnerable server into making arbitrary HTTP requests on their behalf. While some view SSRF as merely a method to force the server […]

    Black Box Testing, Hacking

    ReDoS

    December 29, 2024 Nathan Touati No comments yet

    How a Simple Test Brought Down a Server You sanitized your input fields for XSS? You might have opened a new door for attackers… Imagine this: You’re a developer at your company. After a penetration test, several issues were found in your app, some input fields have no limits on length or content. This leaves […]

    Posts pagination

    1 2 3 Next

    Search

    Categories

    • Black Box Testing (5)
    • Brute Force (6)
    • Code Review (1)
    • Hacking (11)
    • White Box Testing (4)

    Recent posts

    • Is Your AI Secure? The Dark Reality of LLM Vulnerabilities
    • Securing the Lifeline: A Guide to Medical Device Penetration Testing
    • What Is Real-Time Penetration Testing And Why It Matters

    AppSec Labs offer rapid, modern security penetration testing, utilizing smart solutions to protect against evolving cyber threats.

    Features
    • Home
    Resources
    • Blog
    Company
    • About us
    Get in touch
    • Guy Nachum (CRO):
    • guy@appsec-labs.com
    • +972 52-433-9393
    • Sales:
    • sales@appsec-labs.com
    • General Requests:
    • info@appsec-labs.com

    © AppSec Labs 2024. All Rights Reserved.

    • Terms & Conditions
    • Privacy Policy