IT Security Services - 🇨🇭🤖👨‍💻 https://cyllective.comhttps://bsky.app/profile/cyllective.bsky.socialhttps://bsky.app/profile/cyllective.bsky.social/post/3mig5c6yz5c23🎉 Our Burp Suite extension Quick-Update-Headers is now in the BApp Store - huge props to @rtfmkiesel.bsky.social! Instantly refresh Cookie, Authorization, + other headers in Repeater/Intruder using the latest values from your Proxy history. No more manual copy/paste ⚡️ Happy hacking! [contains quote post or other embedded content]01 Apr 2026 07:12 +0000at://did:plc:nuiibbbjs6lahfathd7a7hrf/app.bsky.feed.post/3mig5c6yz5c23https://bsky.app/profile/cyllective.bsky.social/post/3mgrm77xl4c2xLenovo released all patches for the #Lenovo #Vantage #vulnerabilities, which we've reported earlier this year. Our blog now includes the full write‑ups for CVE-2025-13154, CVE-2026-1715, CVE-2026-1716, and CVE-2026-1717. 🔗 https://cyllective.com/blog/posts/lenovo-vantage/11 Mar 2026 09:48 +0000at://did:plc:nuiibbbjs6lahfathd7a7hrf/app.bsky.feed.post/3mgrm77xl4c2xhttps://bsky.app/profile/cyllective.bsky.social/post/3mfomdpybj22pNo budget for an internal security team, but too complex for “we’ll just do it on the side”? 🔴 Have you met cyAssist? ✅ Dedicated cybersecurity experts ✅ Fair‑play & flexible time mgmt ✅ Scalable starting from 2h/month Security without the overhead 👉 https://cyllective.com/blog/posts/introducing-cyassist25 Feb 2026 11:47 +0000at://did:plc:nuiibbbjs6lahfathd7a7hrf/app.bsky.feed.post/3mfomdpybj22phttps://bsky.app/profile/cyllective.bsky.social/post/3meqsstljmc2tTwo great follow‑ups expanding on our CVE‑2025‑13154 write‑up: 🔹 Manuel Kiesel (@rtfmkiesel.bsky.social)- "Roll with Advantage" 👉 https://mkiesel.ch/posts/lenovo-vantage/ 🔹 Compass Security (@compass-security.com) - "From Folder Deletion to Admin" 👉 https://blog.compass-security.com/2026/02/from-folder-deletion-to-admin-lenovo-vantage-cve-2025-13154/ [contains quote post or other embedded content]13 Feb 2026 15:23 +0000at://did:plc:nuiibbbjs6lahfathd7a7hrf/app.bsky.feed.post/3meqsstljmc2thttps://bsky.app/profile/cyllective.bsky.social/post/3mdxgskexw222🚀 New blog post: How to Audit Plugin Ecosystems 🔧🔥 Our reusable 4‑step method helped us navigate 600+ Nextcloud/ownCloud plugins & find some vulns. https://cyllective.com/blog/posts/how-to-audit-plugin-ecosystems #CyberSecurity #AppSec #Nextcloud #ownCloud #infosec #pentest #SAST03 Feb 2026 13:12 +0000at://did:plc:nuiibbbjs6lahfathd7a7hrf/app.bsky.feed.post/3mdxgskexw222https://bsky.app/profile/cyllective.bsky.social/post/3mcmq72wz322n🚨 New blog post! Read about CVE-2025-13154, a privilege-escalation vulnerability in a Lenovo Vantage add-in called SmartPerformance. https://cyllective.com/blog/posts/lenovo-vantage #windows #cve #infosec #pentest17 Jan 2026 13:36 +0000at://did:plc:nuiibbbjs6lahfathd7a7hrf/app.bsky.feed.post/3mcmq72wz322nhttps://bsky.app/profile/cyllective.bsky.social/post/3ligyycy4m22qThe first CVEs of 2025 are live!🚨 We discovered ~10 vulnerabilities in Cordaware bestinformed, leading to 4 CVEs. They can be chained for an unauthenticated compromise of the server and all connected clients.👾 CVE-2025-042{2..5} https://cyllective.com/blog/posts/cordaware-bestinformed/ #blogpost #cybersecurity #CVE #infosec18 Feb 2025 10:02 +0000at://did:plc:nuiibbbjs6lahfathd7a7hrf/app.bsky.feed.post/3ligyycy4m22qhttps://bsky.app/profile/cyllective.bsky.social/post/3lcft6t5lks2i🚀 New from cyllective: 𝐎𝐀𝐮𝐭𝐡 𝐋𝐚𝐛𝐬 🔒 🔑 Master OAuth 2.0 with hands-on Docker-based labs: - JWT signature flaws - Open redirect risks - Claim validation issues 💻 Devs & pentesters: sharpen your skills! 👉 https://cyllective.com/blog/posts/oauth-labs #OAuth #Cybersecurity #Training #InfoSec #Security03 Dec 2024 14:14 +0000at://did:plc:nuiibbbjs6lahfathd7a7hrf/app.bsky.feed.post/3lcft6t5lks2i