IT Security Services - 🇨🇭🤖👨💻
Joined August 2012
- Tweets1K
- Following2.8K
- Followers532
- Likes1K
After the annual Hacktober CTF, it was time for some popcorn and a classic. 🍿 🎬
cyllective rented a cinema, and roughly 80 security enthusiasts joined us to watch the movie Hackers. What a blast! 🔥 Stay tuned for next year. 👀
Hack the planet! 🥷 👾
#Hacktober #CTF #cyllective
cy//ective retweeted
✨ We’re excited to welcome @cyllective as a SilverSponsor for the AREA41 security conference 2026 🛸 👽
Thank you for supporting the infosec community‼️
➡️ Check them out at: cyllective.com/
📅 June 18-19. 2026, Zürich - area41.io
🎉 Our Burp Suite extension Quick-Update-Headers is now in the BApp Store - huge props to @rtfmkiesel!
Instantly refresh Cookie, Authorization, + other headers in Repeater/Intruder. No more manual copy/paste ⚡️
portswigger.net/bappstore/4b…
Happy hacking! 👋😜
This quoted post is unavailable.
Lenovo released all patches for the #Lenovo #Vantage #vulnerabilities, which we've reported earlier this year.
Our blog now includes the full write‑ups for CVE-2025-13154, CVE-2026-1715, CVE-2026-1716, and CVE-2026-1717.
🔗 cyllective.com/blog/posts/le…
No budget for an internal security team, but too complex for “we’ll just do it on the side”?
🔴Have you met cyAssist?
✅ Dedicated cybersecurity experts
✅ Fair‑play & flexible time management
✅ Scalable starting from 2h/month
👉cyllective.com/blog/posts/in…
Two great follow‑ups expanding on our CVE‑2025‑13154 write‑up:
🔹 Manuel Kiesel (@rtfmkiesel) - "Roll with Advantage"
👉 mkiesel.ch/posts/lenovo-vant…
🔹 Compass Security (@compasssecurity) - "From Folder Deletion to Admin"
👉 blog.compass-security.com/20…
🚨 New blog post!
Read about CVE-2025-13154, a privilege-escalation vulnerability in a Lenovo Vantage add-in called SmartPerformance.
cyllective.com/blog/posts/le…
#windows #cve #infosec #pentest
🚀 New blog post: How to Audit Plugin Ecosystems 🔧🔥
Our reusable 4‑step method helped us navigate 600+ Nextcloud/ownCloud plugins & find some vulns.
cyllective.com/blog/posts/ho…
#CyberSecurity #AppSec #Nextcloud #ownCloud #infosec #pentest #SAST
🚨 New blog post!
Read about CVE-2025-13154, a privilege-escalation vulnerability in a Lenovo Vantage add-in called SmartPerformance.
cyllective.com/blog/posts/le…
#windows #cve #infosec #pentest
The final stage would not have been possible without John Ostrowski from @compasssecurity thanks for the Swiss infosec collaboration! 🫕🤝
Our 2025 yearly recap is live 🚀
cyllective.com/blog/posts/ye…
This year we promoted a former intern to a full time engineer and extended our physical presence with new offices. In parallel, we worked on many interesting internal projects and research. 🏢🔬💣
#infosec #pentesting
The first CVEs of 2025 are live! 🚨
We discovered ~10 vulnerabilities in Cordaware bestinformed, leading to 4 CVEs. They can be chained for an unauthenticated compromise of the server and all connected clients. 👾 CVE-2025-042{2..5}
cyllective.com/blog/posts/co…
#blogpost #CVE #infosec
🚀 New from cyllective: 𝐎𝐀𝐮𝐭𝐡 𝐋𝐚𝐛𝐬 🔒
🔑 Master OAuth 2.0 with hands-on Docker-based labs:
-JWT signature flaws
-Open redirect risks
-Claim validation issues
💻Devs & pentesters: sharpen your skills!
👉cyllective.com/blog/posts/oa…
#OAuth #Cybersecurity #Training
👾🔥🎉 Vulnerabilities in Swiss tax apps uncovered by Manuel Kiesel (@rtfmkiesel) made it to mainstream media! Huge congrats and thanks, Manuel. 🤝🥷🏻🤓
📄 Read the 20min article: 20min.ch/story/cybersicherhe…
#Cybersecurity #ITSecurity #Switzerland #TaxSoftware #cyllective
👾 During his personal research @rtfmkiesel has discovered an XXE vulnerability in a Java library affecting tax applications used across 11 cantons in Switzerland. 💥🚀
mkiesel.ch/posts/swiss-tax-a…
#CyberSecurity #PenTesting
Huge thanks to @riskydotbiz for mentioning the #ghmlwr project! 🎉
📰 news.risky.biz/risky-biz-new…
🔗 ghmlwr.0dave.ch - @_cydave
#Infosec #GitHub #ThreatIntelligence
Wrote a short post on how ghmlwr.0dave.ch works.
Nothing too crazy, but if you're interested, read on:
0dave.ch/posts/ghmlwr/
Creating a Malicious Atlassian Plugin 📦
In our latest post, we dive into the dark side of Atlassian plugins. Discover how we created a malicious plugin capable of hiding from admins, exfil. data, and even running a reverse shell. 🔍
cyllective.com/blog/posts/at…
#Atlassian #infosec
🚨 New Blog Alert! 🚨
We've found 53 zero-day vulnerabilities in Atlassian plugins! Discover how to safeguard your environment.
Read more: cyllective.com/blog/posts/at…
#CyberSecurity #Atlassian #ZeroDay #Infosec #Cyberraum
🚀 Verstärkung gesucht! 🚀
Wir suchen eine Person, die uns im Backoffice unterstützt und eine Schlüsselrolle im Unternehmen übernimmt. 🤝 Bist du interessiert dich in einem KMU im Bereich Cybersicherheit zu verwirklichen? 🤖 👾
cyllective.com/de/jobs 👈
#Cyber #Hiring #Job
cy//ective retweeted
We are excited to have Cyllective as a Silver sponsor supporting the AREA41 conference - Thank you🥳
See you 6-7.June in Zürich @defconch
@cyllective
🚨 New Blog Post! 🚨
🕸️ Discover our journey of identifying a critical stored XSS vulnerability in Collabora Online, CVE-2024-29182🐞💻
Our latest blog post provides an in-depth analysis of how @_cydave found the flaw. #web #cve #collabora ➡️ cyllective.com/blog/posts/cv…
