Manuel Cianci

Managing Partner at @cyllective

[Manuel Cianci @cianci_m]

Happy New Year to everyone! 🥳🎇 Another year passed, and so did another #HACKvent. It was a very busy December - I am excited to finally share my write-ups for the #CTF with all of you.
https://t.co/H7HAjWj7gy

@hackvent @TheHackingLab @compasssecurity @Twitt3rKuyaya

[cy//ective @cyllective]

🚀 New blog post: How to Audit Plugin Ecosystems 🔧🔥
Our reusable 4‑step method helped us navigate 600+ Nextcloud/ownCloud plugins & find some vulns.

https://t.co/uboJdDHwHx

#CyberSecurity #AppSec #Nextcloud #ownCloud #infosec #pentest #SAST

[cy//ective @cyllective]

Our 2025 yearly recap is live 🚀
https://t.co/sANOsHDCY4
This year we promoted a former intern to a full time engineer and extended our physical presence with new offices. In parallel, we worked on many interesting internal projects and research. 🏢🔬💣
#infosec #pentesting

[cy//ective @cyllective]

👾🔥🎉 Vulnerabilities in Swiss tax apps uncovered by Manuel Kiesel (@rtfmkiesel) made it to mainstream media! Huge congrats and thanks, Manuel. 🤝🥷🏻🤓
📄 Read the 20min article: https://t.co/b1Gtzilycx
#Cybersecurity #ITSecurity #Switzerland #TaxSoftware #cyllective

[cy//ective @cyllective]

👾 During his personal research @rtfmkiesel has discovered an XXE vulnerability in a Java library affecting tax applications used across 11 cantons in Switzerland. 💥🚀
https://t.co/9gUIOu0vRe
#CyberSecurity #PenTesting

[cy//ective @cyllective]

Creating a Malicious Atlassian Plugin 📦
In our latest post, we dive into the dark side of Atlassian plugins. Discover how we created a malicious plugin capable of hiding from admins, exfil. data, and even running a reverse shell. 🔍
https://t.co/rOzPYcKY0K
#Atlassian #infosec

[cy//ective @cyllective]

🚨 New Blog Alert! 🚨
We've found 53 zero-day vulnerabilities in Atlassian plugins! Discover how to safeguard your environment.
Read more: https://t.co/5vf021tIhy
#CyberSecurity #Atlassian #ZeroDay #Infosec #Cyberraum

[cy//ective @cyllective]

🚀 Verstärkung gesucht! 🚀
Wir suchen eine Person, die uns im Backoffice unterstützt und eine Schlüsselrolle im Unternehmen übernimmt. 🤝 Bist du interessiert dich in einem KMU im Bereich Cybersicherheit zu verwirklichen? 🤖 👾
https://t.co/hR86bYwfrq 👈
#Cyber #Hiring #Job

[cy//ective @cyllective]

🚨 New Blog Post! 🚨
🕸️ Discover our journey of identifying a critical stored XSS vulnerability in Collabora Online, CVE-2024-29182🐞💻
Our latest blog post provides an in-depth analysis of how @_cydave found the flaw. #web #cve #collabora ➡️ https://t.co/JEuAUomsl6

[Area41 Security Con @a41con]

We are excited to have Cyllective as a Silver sponsor supporting the AREA41 conference - Thank you🥳
See you 6-7.June in Zürich @defconch
@cyllective

[Manuel Cianci @cianci_m]

@_cydave Absolutely! 😃

[cy//ective @cyllective]

#CyberSecurity #SwissTech #ForwardTogether

[hackbar @hackbar_ch]

same procedure as every year 🙇
the https://t.co/ooWgYbsvwE event in Bern, Bahnstrasse 44 - 27.-30.12.2023:
streaming the CCC talks, lockpicking, hacking on CTFs and having fun 💖
for more details visit https://t.co/ooWgYbsvwE 💻📡🛰️♾️🧑‍🔬🍹🎵🤖🌃🎩🌭💖🚀📟🔐✅

[cy//ective @cyllective]

A heartfelt thanks to our customers, partners, häckers, and like-minded friends for a fantastic year! 🤝🖖 We look forward to creatively (mis)using hardware and software again in the coming year. 🤖 👾 Happy Holidays and a happy New Year 2024! 🎄🎁🎉

Best regards,
cyllective

[cy//ective @cyllective]

During a #DLP (Data Loss Prevention) audit, we had to find a way to copy files off a computer with restricted USB functionality. Using microcontrollers, software engineering skills, and a neat browser feature called #WebSerial, we developed #COMfiltrat0r.
https://t.co/sWLumgxgdD

[sỎ͖͈̞̩͎̻̫̫̜͉̠phus @sophus]

Hiring at @cyllective \o/
"hacking all day and helping customers to secure their systems" 🦾 Does that sound like fun to you? We'd be happy to hear from you. 👋
➡️ https://t.co/GwLvf9nmwM
#pentesting #job #switzerland

[cy//ective @cyllective]

cyllective is #hiring! We seek a skilled Security Engineer / Penetration Tester, primarily focusing on white box penetration testing of web apps. Hack the application process with the CTF challenges provided💻🪓➡️https://t.co/T4OaiFQzpt
#pentest #job #cybersecurity #switzerland

[cy//ective @cyllective]

Kudos to our own @_cydave for finding severe vulnerabilities in the 'Canto Extension' of TYPO3! His keen skills made the digital world a safer place by preventing potential #SSRF and #RCE. We're proud of you, Dave! <3 🎉 #TYPO3 #RCE #SSRF #Exploit
➡️https://t.co/WS4G2J5v0s

[cy//ective @cyllective]

Thank you Florian Schütz @flschuetz for the insightful exchange and invitation to the National Cyber Security Centre - NCSC @GovCERT_CH! 🙏 Fascinating to understand the challenges of #CyberSecurity from a federal perspective.

[Manuel Cianci @cianci_m]

@ant0inet @PhilSoupart @julientercier @droethlisberger Where was @ant0inet ? 👀

[cy//ective @cyllective]

🚀 #hackbar - Easter Edition - 07.-08.04.2023 in Bern
👾 #Demo-streams directly from ➡ @revision_party
🚩 #CTF fun with ➡ @HackyEaster
Everybody is welcome to join the festivities 🤩🐇🥚
For more details check out https://t.co/W3nvmk8Zrm