Public-interest cybersecurity & digital trust initiative. Advancing digital safety, rights, and security capacity across Africa.websecuritylab.orgJoined January 2024
I emailed ByteToBreach, the threat actor behind the Sterling Bank, Remita, and now Corporate Affairs Commission breaches, with 10 accountability questions.
He answered all of them.
In my latest piece, I break down the Corporate Affairs Commission breach in full.
How he got in. What he accessed. The scale of what was taken, a second access vector into the CAC's systems that he revealed directly to me, not in any published artefact and direct confirmation on whether any corporate records were modified.
He also confirmed he was in active ransom negotiations with Sterling Bank for €250,000 before dumping their data.
The CAC has since issued a public statement. I break down what it says and what it leaves unanswered.
And he told me directly why Nigerian institutions have become his focus.
Read the full piece here:
securityintelligence.substack.com/p/i-spoke-with…
5. 3,009 employee records enumerated via an unauthenticated API endpoint.
6. Cardinal Stone Partners’ investment database accessed via phpMyAdmin with no network isolation.
The report is written for security professionals, CISOs, incident responders, and regulators.
We’ve published Volume I of our ByteToBreach campaign analysis: a full technical post-mortem of the Sterling Bank Plc breach.
This report reconstructs the complete attack chain from initial access (March 18, 2026) through to the Cardinal Stone pivot.
The affected subdomains were used for SEO spam hosting and redirect-based monetisation infrastructure for an extended period prior to remediation.
We found no evidence of intrusion into core NIMC systems.
Internal impact assessment remains the responsibility of NIMC.
Web Security Lab has identified and documented coordinated subdomain abuse affecting multiple hosts under the National Identity Management Commission (NIMC) domain namespace.
The incident was identified and responsibly disclosed.
Following escalation to the authoritative DNS operator, the affected subdomain was taken offline.
📝 Read the full report here:
websecuritylab.org/wp-content/upl…
Hundreds of indexed pages were identified, generating search visibility under a trusted government domain and increasing the likelihood of public exposure.
Web Security Lab has published a technical incident report on a subdomain takeover involving the Nigeria Police Service Commission website infrastructure.
As a certified cybersecurity professional, Jack brings emerging professional capability to Africa’s growing cybersecurity workforce.
He represents a new generation of practitioners supporting secure digital growth across the continent.
Big congratulations to @Cy_berJack, one of our Fellows, on passing the CompTIA Security+ certification.
Jack is a Fellow of the Web Security Lab Professional Security Fellowship, a structured program focused on developing practical security capability & professional readiness.
Mariam Ibrahim, a corps member, was arrested in October 2025 after the Nigerian Police claimed that a number tied to a January 2024 kidnapping case was linked to her National Identity Number (NIN).
There was just one obvious problem: she bought the SIM card in April 2025.
I spoke to The Punch Newspaper about how Nigeria’s MSISDN lifecycle management allows new SIM owners to inherit the digital footprint and criminal exposure of previous owners, and why our identity verification infrastructure needs stronger procedural safeguards around number reassignment and investigative protocols.
punchng.com/marked-identit…
That’s why conversations like this matter, and why we’re proud to contribute our voice to the broader ecosystem work shaping Africa’s digital future and strengthening a safer, more accountable internet for everyone.
This Saturday, our Founder David Odes joins industry leaders at the Global Data Protection Tech Summit in Lagos.
Stronger digital ecosystems grow when people understand how their data is collected, used, and protected—and when organisations act responsibly.
25K Followers 27K FollowingA Hacker who is A Lover of People, and Life @RetroTwinz @Secbsd, @GrumpyHackers, @NovaHackers, @deadpixelsec @hacknotcrime Advocate @PositivelyBlue_ OSCP, OSWP
2K Followers 1K FollowingSocial Scientist | Alternative Therapist | Chronic unlearner | Serial Disruptor | Seeker of universal truth | Advocate of Nigeria Restructured
146 Followers 2K FollowingAutomation Specialist. Certified Nail Tech. Building a location independent life from NC to beyond. Story and Soul. Nails and journey: @jleighstorysoul✨💅
249 Followers 322 FollowingBrand Designer | I help clothing, hair & food brands look professional and attract customers with consistent identity.
Packages ranging from 15k+ | DM to Start
139 Followers 1K FollowingAspiring financial freedomist 😁 through trading 📈📉
if you see any mistake or want to make an insights on my trades pls do i am hungry for knowledge😭
394 Followers 4K FollowingCybersecurity | Risk Management | Threat Intelligence | Digital Trust Advocate | The real world runs on invisible systems. My job? Keep them alive. 💻
111 Followers 2K FollowingLateral thinking births creativity; critical thinking uncommon; analytical thinking for great minds while traditional thinking is no thinking at all.
3 Followers 382 FollowingWhichever way the world spins, face the other and walk slowly, reaching the end before the beginning; the finish before the start.
18K Followers 1K FollowingLoves Jesus, loves others | Husband, father of 4, security solutions architect, love to learn and teach | Microsoft MVP | @TribeOfHackers | 🦋@nathanmcnulty.com
811 Followers 977 FollowingCultural Storyteller & Heritage Digital Archivist. Helluo Librorum📚
I also manage social media accounts and write for fun.
📧 [email protected]
220 Followers 259 Followingbeliever//
data scientist//
Chemical Engineer//
in all things i love football and i love manchester united❤//
co_founder @gentlemenseries.com at Choba PH
442 Followers 992 FollowingiSell
Phones, Tablets and iPads📱
Laptops💻
BT Speakers🔊
Headphones 🎧
Keyboards⌨️
Mouse🖱️
and give tips on picking the best gadget to suit your needs.
134K Followers 247 FollowingUpdates on the latest news and events from the Cisco Networking Academy, an IT skills-to-jobs program offering digital skills training.
116K Followers 0 FollowingDaily drops of open-source code building Collective AI.
Open source models • agents • RL envs • datasets.
Follow for the best of Potentially* AGI ⚡