NEWS AND EVENTS

Pen testing IoT devices at Infosek Expo 2020

Infigo's CTO and pen test team leader, Bojan Zdrnja, will give lecture about pen testing IoT devices – he will be featured at Infosek Expo 2020, aptly named Cyber & Infosecurity 2020, so check him out

Više News

Arbitrary variable read through Ignition for Laravel

Ignition is the default error page for PHP framework Laravel, and we discovered a critical security vulnerability that allows arbitrary variable read, which can lead to a potential sensitive information leakage

Više News

Infigo IS innovates in S3 area

Infigo IS has signed a contract with Croatian Agency for SMEs, Innovations and Investments, and The Ministry of Economy, Entrepreneurship and Crafts of the Republic of Croatia, for our project in the area of S3 innovation

Više News

Infigo IS at (virtual) FinConf 2020

Digital transformation of the financial services in the age of coronavirus is a current topic that many are dealing with. Our CTO, Bojan Zdrnja, is participating in the FinConf 2020 panel dedicated to this very issue

Više News

Scanning with Nmap scripts

Our CTO, Bojan Zdrnja, wrote an interesting new ISC diary about scanning with a whole range of scripts made for the popular port scanner Nmap

Više News

Trends in mobile application vulnerabilities in the region

From this year (virtual) conference HEK.SI 2020, we bring you slides from the lecture held by our information security specialist Jagor Cakmak

Više News

Cross-site Scripting (XSS) vulnerability in ErrorHandler for Symfony

No pandemic, earthquake or cold weather couldn't stop Infigo IS' pen testers from finding a bug in popular Symfony

Više News

Infigo IS COVID-19 business continuity plan

In this current climate, where WHO has declared COVID-19 to be a pandemic, it is understandable to feel anxious, about health and about business continuity practices. That is why we stress it is important to state in a clear language what Infigo IS' capabilities are in a time like this

Više News

CSV Excel Macro Injection in Password Manager Pro

After exposing the CSRF vulnerability, here we are with one more; this time the problem is in export function that allows injection of malicious payload in the input field

Više News

CSRF vulnerability in Password Manager Pro

During one of our many penetration tests, which Infigo IS does on a daily basis, our security expert found a vulnerability in web application Password Manager Pro

Više News

Bojan Ždrnja, SANS Certified Instructor

In this day and age, the title rarely says it all. But today is different. Our CTO has become a SANS Certified Instructor, a title that not many people have

Više News

Summing up Let's Decrypt vulnerability

The latest vulnerability to hit Windows got us all riled up. And rightfully so – a serious bug in the code prevents proper verification of ECC (Elliptic Curve Cryptography) certificates, and it took only few hours for people to release proof of concept certificates

Više News

Fresh from InfoSek 2019

We've marked seventeen years of InfoSek in Nova Gorica, Slovenia - not only did we hang out, but we also held an lecture about ways sophisticated attackers steal and exfiltrate data

Više News

Critical vulnerability in Currency Switcher for WooCommerce

During one of our penetration tests we have found a critical security vulnerability in Currency Switcher for WooCommerce

Više News

Getting the best value out of security assessments

Vulnerability scan, penetration test, red team assessment, what exactly are those, what do you need in your organization, and when do you need them

Više News

Getting ready for QuBit Sofia 2019

Infigo's CTO, Bojan Ždrnja, among all other activities he has, is preparing to attend a security conference QuBit Sofia 2019 and hold a lecture on emerging threats

Više News

Fresh from Splunk .conf19

A new strategy, new products, new improvements, new everything – in short, there was something for everybody

Više News

Infigo IS at Croatian Chamber of Economy

Infigo's senior consultant Saša Jušić delivered a lecture on cyber security at Hrvatska gospodarska komora, and later joined in the round table talks

Više News

Wargames at Infigo

One winner, zero casualties, four hours of nerve wrecking competition – all in all, great way to end the week

Više News

Testing TLS version 1.3

Our CTO Bojan Ždrnja is back with a SANS ISC blog post about testing TLSv1.3

Više News

Infigo at SmartCard 2019 conference

Infigo's senior consultant, Saša Jušić, gave a lecture "Third-party security – how weak is your weakest link?"

Više News

Infigo opens a Slovenian office in Ljubljana

We’ve opened a Slovenian branch and had a great time introducing it at Infosek Expo 2019 in Ljubljana

Više News

The art of verifying SSL/TLS configuration

One of very important steps when performing penetration tests is to verify SSL/TLS services configuration - here is how it's done

Više News

How the end of secure communication was exaggerated

If you've heard catastrophic tales of SSL/TLS vulnerabilities, we have a great SANS webcast about that topic by our own CTO Bojan Zdrnja

Više News

Impressions after NIS conference

On 9. May 2019., in The Westin Zagreb, we held a conference about the NIS Directive. We welcomed over 100 people from all essential industries, drank more than 20 liters of coffee (mostly people from Infigo who were there at the break of dawn), held five lectures and one round table...

Više News

Information Security Specialist at Infigo, together with her teammates won the first place in the CTF competition in Netherlands

If you are interested in security, there is a big chance you were at this year’s annual HITB (Hack In The Box) Security conference held in Amsterdam. And if you are a woman in cyber security, there is a big chance you were interested in Women in Cyber Security CTF Competition that was ran by Cyber Talents.

Više News

NIS Directive - Strengthening national cyber defense capabilities

On May 9th, 2019, in Westin Hotel Zagreb, INFIGO IS organizes a one-day conference related to the NIS Directive, the EU legislation on cybersecurity. The main objective of the NIS Directive is to ensure a legal framework which will boost the overall level of cybersecurity in the EU. Besides many interesting presentations related to cyber security and appreciated guests from Information Security Bureau, the conference will be concluded with a round table where representatives from various industries affected by the NIS Directive will share their experiences about the cyber security challenges.

Više News

NATO Cyber Coalition 2018

Last week, from 26 to 30 November 2018, the 11th NATO and national computer systems defense exercise called "Cyber Coalition 2018" was held. INFIGO IS participated as one of the private sector representatives.

Više

CERT-EU 2018 Conference

On Wednesday, September 5th 2018, our penetration testing team leader and SANS ISC handler Bojan Ždrnja will deliver a keynote at the CERT-EU 2018 Conference.

Više Conferences

INFIGO IS at SmartCard 2018

On September 26, 2018, Grand Hotel Adriatic, our software engineer Ivan-Dominik Ljubičić, delivered a talk titled “Automation of regulatory compliance processes” at the SmartCard 2018 international conference.

Više Conferences

Next-Gen Endpoint Security with Carbon Black and INFIGO

INFIGO IS d.o.o in cooperation with CARBON BLACK, Inc. is organizing the launch of CARBON BLACK products, leading new generation programs for end-point protection. The conference will be held on November 21, 2017, at the Double Tree by Hilton in Zagreb, on Vukovarska Street 260.

Više

Directory Traversal vulnerability in the Foxit MobilePDF app

New vulnerability discovered by our pen test team member Antonio Zekić. Simple but cool. Another proof that old school stuff is still around. The vulnerability allows unauthorized directory listing as well as reading of arbitrary files as long as the Foxit MobilePDF server can read the file on the affected iOS device.

Više

INFOSEK EXPO 2017

For the 12th consecutive year, INFOSEK EXPO business fair is being organized. The fair will be held on October 5, 2017 in Ljubljana, at Gospodarski razstavišča.

Više Conferences

SANS webcast "Exploiting esoteric SQL injection vulnerabilities" with Bojan Ždrnja

On Tuesday, February 20th 2018, our penetration testing team leader and SANS ISC handler Bojan Ždrnja will live stream a webcast on exploiting esoteric SQL injection vulnerabilities. If you are a red team member focused on web applications, or a blue team focused defender and which to see how these attacks work, we invite you to join us.

Više

INFIGO IS at DevFest Siberia 2017

The largest Russian Devfest conference organized by the Google Developer group Novosibirsk and Omsk is being held on 23rd and 24th September in Novosibirsk. The conference is devoted to various trends and events in the field of program engineering, in particular to the development and security of Android mobile applications and Machine Learning (ML) and Augmented Reality (AR) technology.

Više

INFIGO IS at Mreža Smart Day

Today in a in a cozy atmosphere of auditorium Muller, at cinema Europe in Zagreb, members of a round table tried to answer one question - does machine learning solves security threats

Više Conferences

INFIGO IS at F2 - Future of Fintech

September 14, 2017., Kaptol Boutique Cinema & Bar in Zagreb was teeming with bankers and other financial experts. All of them flocked to the sold-out conference F2 - Future of Fintech to discuss whole range of technical questions and burning trends in financial sector

Više Conferences

Infigo meetup Skopje – Infosec and Big Data Analytics

INFIGO IS is pleased to announce the organization of the Infigo meetup – Infosec and Big Data Analytics conference in Hotel Marriott in Skopje, on Wednesday, 7th June 2017.

Više Conferences

INFIGO IS at SANSFIRE 2017 event in Washington, DC

SANSFIRE is information security training in Washington DC from SANS Institute, the global leader in information security training. At SANSFIRE 2017, July 22-29, SANS offers more than 45 hands-on, immersion-style security training courses taught by real-world practitioners. It’s the biggest SANS’s event with more than 1300 participants all over the world. The event offers the greatest opportunity to meet ISC handlers from around the world.

Više

Infigo meetup Tirana – Infosec and Big Data Analytics

INFIGO IS, with the support of The Albanian Association of Banks, is pleased to announce the organization of the Infigo meetup – Infosec and Big Data Analytics conference in Hotel Rogner in Tirana, on Thursday, 8th June 2017.

Više Conferences

Infigo meetup Tirana – Big Data driven CRM analytics

INFIGO IS, with the support of The Albanian Association of Banks, is pleased to announce the organization of the Infigo meetup – Big Data driven CRM analytics workshop in Hotel Rogner in Tirana, on Thursday, 8th June 2017.

Više Conferences

FRAUD PREVENTION IN FINANCIAL INSTITUTIONS

We are proud to announce that INFIGO IS has become a Bronze sponsor at the FRAUD PREVENTION IN FINANCIAL INSTITUTIONS conference which will be held February 2-3, 2017 in Vienna, Austria.

Više

INFIGO IS at the HEK.SI conference in Slovenia

The HEK.SI conference about ethical hacking will be held in Ljubljana on 14th and 15th of April. As one of the golden sponsors, INFIGO IS will participate on this conference with a contributed talk titled "An unexpected journey: From XSLT injection to a shell ", to be delivered by Saša Jušić, a senior consultant on information security in INFIGO IS.

Više Conferences

INFIGO IS at the 8th Infocom World Albania conference

Infigo IS will be sponsoring the 8th Infocom World Albania conference “The Leading Path to Innovation”. Mr.Davor Marić, M.Eng, MBA, Infigo’s Business Development Leader, will be holding the presentation “Grow your business with big data driven CRM“.

Više Conferences

Thales e-Security cryptography solutions

On May, 12th 2016, INFIGO IS and Thales e-Security are organizing a half day seminar on enterprise cryptography and data protection solutions. The seminar will introduce Thales e-Security, a leading global provider of data protection solutions to Albanian market as well as Infigo IS as a local partner.

Više Conferences

INFIGO IS at SANSFIRE 2016 event in Washington, DC

SANSFIRE is information security training in Washington DC from SANS Institute, the global leader in information security training. At SANSFIRE 2016, June 11-18, SANS offers hands-on, immersion-style security training courses taught by real-world practitioners. It’s the biggest SANS’s event with more than 1300 participants all over the world. The event offers the greatest opportunity to meet ISC handlers from around the world.

Više

INFIGO IS at FSec 2016 in Varaždin

FSec is the biggest, vendor neutral technical information security symposium in Croatia. It takes place in Croatian National Theatre Varaždin, Croatia, 14th—15th September 2016. It is the conference where professionals meet on neutral ground and exchange ideas and knowledge, and discuss current topics, trends and problems in the broad topic of information security.

Više Conferences

Project Wonderland -

INFIGO IS, in partnership with the Polytechnic of Međimurje in Čakovec, has signed a contract on 17 October 2014 about financing a scientific project named “Wearable system of extended reality in outer space for enrichment of touristic content“, shortly named "Project Wonderland". The project is financed as part of the project “Strengthening the capacity for research, development and innovation” by the Ministry of Science, Education and Sports, and within the operational program Regional Competitiveness 2007-2013.

Više

INFIGO MEETUP 2016 – Infosec and Big Data challenges

On November 3rd, 2016, at the Double Tree Hotel in Zagreb, INFIGO IS will be organizing a one-day conference entitled “Infigo Meetup 2016 – Infosec and Big Data Challenges”. The aim of the conference is to introduce the market to innovations in business activities in the field of information security, as well as in other fields where INFIGO IS has completed interesting projects and achieved significant results.

Više Conferences

INFOSEK 2014. security conference in Nova Gorica, Slovenia

The 12th INFOSEK conference on latest trends, events and issues in information security will traditionally take place on November 19-21 in Nova Gorica, Slovenia. A special section of the conference, „CIO FORUM“, intended for IT and security managers will address relevant information security topics from a management perspective. INFIGO IS will participate in the INFOSEK conference, as well as at the CIO FORUM, with two presentations on security of mobile applications.

Više Conferences

INFIGO IS at the "Seminar on Good Practices in IT Supervision on Financial Institutions"

On October 13 and 14 2014, INFIGO IS will participate in the "Seminar on Good Practices in IT Supervision on Financial Institutions", organized by the Croatian National Bank and European Banking Authority. As a part of this seminar, Mr. Bojan Ždrnja and Mr. Saša Jušić will give presentations on the following topics: "Fraud monitoring" and "Security of mobile banking applications".

Više Conferences

Digital Guardian acquires Armor5

One of the biggest challenges for DLP vendors is the control over access to sensitive information via mobile devices and access to information stored in the cloud. Digital Guardian, as a leading DLP tool on the market, has recognized this problem and decided to improve its solutions through the acquisition of the Armor5 company. Armor5 uses a unique way to control access to corporate information via mobile devices, as well as business information stored in the cloud, which will give additional breadth and coverage to Digital Guardian solution in the field of business information.

Više

INFIGO IS at the 5th Splunk Worldwide Users' Conference .conf 2014.

The 5th Annual Splunk’s Worldwide Users' Conference, with close to 4000 participants, is taking place on October 6-9 in Las Vegas. INFIGO participates in the conference by presenting INFIGO Fraud Monitoring – solution for fraud detection and prevention in banking systems. A presentation by Sanja Zeljković, a fraud analyst from Erste&Steiermarkische bank Zagreb and Bojan Ždrnja, INFIGO’s CTO will explain business challenges that a comprehensive fraud monitoring solution must address, as well as technology which supports it. More information about the conference and the presentation is available at http://conf.splunk.com.

Više Conferences

INFIGO IS at the e-biz 2015 conference

The E-biz 2015 conference on e-commerce organized by Case d.o.o. will be held between March 30th and April 1st in the HYPO EXPO Center in Zagreb. As every year, the conference program is devoted to the use of information technologies in electronic business, and this year, special emphasis is put on the development of e-commerce business in Croatia.

Više Conferences

INFIGO IS and ALFATEC GROUP in Tirana

On October, 29th 2014, INFIGO IS and Alfatec Group are organizing a one-day information security seminar in Tirana, where they will present some of their products and services in the Albanian market. The seminar will be held in Tirana International Hotel starting at 9AM. INFIGO IS will present their solutions based on Splunk as well as penetration testing services.

Više Conferences

INFIGO IS at SmartCard 2014 conference in Opatija

From September 29th to October 1st, INFIGO IS attended the SmartCard 2014 international conference on technologies, standards and Smart Card applications in financial, trade and other sectors, which took place in Opatija. At the conference, Jušić Saša, a senior information security consultant, gave presentation on „Security of mobile payment applications“.

Više Conferences