@cydave.bsky.social // retweeted
Creating a Malicious Atlassian Plugin 📦
In our latest post, we dive into the dark side of Atlassian plugins. Discover how we created a malicious plugin capable of hiding from admins, exfil. data, and even running a reverse shell. 🔍
cyllective.com/blog/posts/at…
#Atlassian #infosec
@cydave.bsky.social // retweeted
🚨 New Blog Alert! 🚨
We've found 53 zero-day vulnerabilities in Atlassian plugins! Discover how to safeguard your environment.
Read more: cyllective.com/blog/posts/at…
#CyberSecurity #Atlassian #ZeroDay #Infosec #Cyberraum
@cydave.bsky.social // retweeted
📢📢📢#TICKETS, #SAVETHEDATE:
we will have two batches of ticket sales for #BSidesBE opening soon:
- Monday, August 5th 11:00 (UTC+2/CEST)
- Friday, August 23rd 11:00 (UTC+2/CEST)
Price: 20 CHF
#PleaseRT #InfoSec #DFIR #ThreatIntel Cc @SecurityBSides
bern.bsides.ch/registration/
@cydave.bsky.social // retweeted
🚨 New Blog Post! 🚨
🕸️ Discover our journey of identifying a critical stored XSS vulnerability in Collabora Online, CVE-2024-29182🐞💻
Our latest blog post provides an in-depth analysis of how @_cydave found the flaw. #web #cve #collabora ➡️ cyllective.com/blog/posts/cv…
@cydave.bsky.social // retweeted
🚀 #hackbar - Easter Edition - 07.-08.04.2023 in Bern
👾 #Demo-streams directly from ➡ @revision_party
🚩 #CTF fun with ➡ @HackyEaster
Everybody is welcome to join the festivities 🤩🐇🥚
For more details check out hackbar.ch
@cydave.bsky.social // retweeted
We are very proud to be an official sponsor of the impactful cybersecurity conference @BlackAlpsConf 🗻
We are thrilled to meet you there and look forward to all the workshops, presentations & discussions. 🤓
#ITSecurity #BlackAlps22 #cybersecurity #conference
@cydave.bsky.social // retweeted
WPHash: New web project for fingerprinting installed WordPress plugins is seeking support from the open source community
portswigger.net/daily-swig/w…
@cydave.bsky.social // retweeted
Big thanks to @maddiestone and @mdowd for insight into the value of leveraging CVEs in research.
New post introducing CVE North Stars. clearbluejar.github.io/posts…
@cydave.bsky.social // retweeted
📣 Upcoming #infosec conferences 📣
👉 nahamcon.com - 30.04.22 // Online
👉 area41.io - 16.-17.06 22 // Zürich, CH
👉 bsideszh.ch - 17.09.22 // Zürich, CH
👉 swisscyberstorm.com 25.10.22 // Bern, CH
#NahamCon2022 #BSidesZH #AREA41 #SCS22
@cydave.bsky.social // retweeted
a re-🐦 and ❤️ would go a long way.
if you want us to continue posting about our research in this form, please show us some ❤️ and re-🐦 - thank you sincerely 🙏
Another one 🔁 - the hunt for vulnerabilities continues. 👀 As one bug is fixed, another two might appear. 🐛🐛
Read our latest blog post on how #OctoberCMS had another #security #vulnerability exterminated, with the help of yours truly... 😽
cyllective.com/blog/post/oct…
@cydave.bsky.social // retweeted
Another one 🔁 - the hunt for vulnerabilities continues. 👀 As one bug is fixed, another two might appear. 🐛🐛
Read our latest blog post on how #OctoberCMS had another #security #vulnerability exterminated, with the help of yours truly... 😽
cyllective.com/blog/post/oct…
@cydave.bsky.social // retweeted
Hey there ✌️ do you like #RCE #exploits? 💣
We'd like to share a detailed write-up 📖 of a #security #vulnerability found in #OctoberCMS, from back in May 2021. Read how we got from a faulty blocklist🚦to
remote code execution 🎯 in our latest blog post:
cyllective.com/blog/post/oct…
@cydave.bsky.social // retweeted
Our latest blog post describes how we at cy//ective keep our motivation and technical expertise up. 🤓
There might even be an 💥 exploit PoC 💥 or two included... #research #exploit #cve #infosec #CyberSecurity
cyllective.com/blog/post/con…
@cydave.bsky.social // retweeted
ANNOUNCEMENT: "BSides Zürich 2021: Stay Home edition", a Limited Edition Printed Book in 4 different sections:
1-Personal Research
2-Historical + Influential research
3-Swiss Confs “Hall of Fame”
4-Art
Read More @ bsideszh.ch/call-for-papers/ @SecurityBSides #InfoSec #CfP #DFIR #CTI
@cydave.bsky.social // retweeted
During a recent security audit, we've uncovered an authenticated 💥RCE💥 💣 vulnerability within the #Plone CMS, checkout our write-up for CVE-2021-32633 - PoC included.
cyllective.com/blog/post/plo…
If you would like to see more h4ckZ, please follow/retweet/like to show us some love💞
@cydave.bsky.social // retweeted
Reminder of a Plone security hotfix to patch various vulnerabilities. This hotfix is recommended for Plone 4.3, 5.0, 5.1 and 5.2. plone.org/security/announcem… #plone #security #hotfix









