One of discoveries of this research was that it is possible to chain few functionalities and misconfigurations together in order to achieve Cross-Site (XS) leak with HTML injection, while strict Content-Security-Policy (CSP) is present.Sp
In the ever-evolving landscape of cybersecurity, one threat remains a persistent adversary - Cross-Site Scripting (XSS). Despite many efforts to mitigate XSS vulnerabilities, hackers continually find new ways to exploit them. In this blog post, we de
Infigo IS prides itself on recognizing great technologies and implementing them into our portfolio. Probably our greatest find was Splunk, today a multibillion-dollar company, but it was virtually unknown in Europe when we signed a contract with them
Windows Security Operations Center (WSOC from now on) was made a long, long time ago by our CTO, Bojan Zdrnja, a Splunk app that monitored and analyzed Windows logs. It was a time before Splunk Enterprise Security existed, so it was a real visionary
As part of the National Recovery and Resilience Plan, micro, small and medium-sized enterprises can receive grants to increase their digital maturity.One of the areas where this is possible is cybersecurity.Companies can receive 60
Today we have a twofer, two vulnerabilities in one package! Vulnerabilities can be found in 4D Server, and both were found by our intrepid hacker, Karlo Dautović.UPDATE: Official CVEs (Common Vulnerabilities and Exposures) have been assi
