Web Security Lab @WebSecurityLab

Public-interest cybersecurity & digital trust initiative. Advancing digital safety, rights, and security capacity across Africa. websecuritylab.org Joined January 2024

Tweets

130
Followers

127
Following

41
Likes

31

David Odes @chiefdavidsays

2 months ago

I emailed ByteToBreach, the threat actor behind the Sterling Bank, Remita, and now Corporate Affairs Commission breaches, with 10 accountability questions. He answered all of them. In my latest piece, I break down the Corporate Affairs Commission breach in full. How he got in. What he accessed. The scale of what was taken, a second access vector into the CAC's systems that he revealed directly to me, not in any published artefact and direct confirmation on whether any corporate records were modified. He also confirmed he was in active ransom negotiations with Sterling Bank for €250,000 before dumping their data. The CAC has since issued a public statement. I break down what it says and what it leaves unanswered. And he told me directly why Nigerian institutions have become his focus. Read the full piece here: securityintelligence.substack.com/p/i-spoke-with…

48 263 609 64K 682

View Details

Web Security Lab @WebSecurityLab

2 months ago

It is free, open, and published at websecuritylab.org/sterling-bank-…

0 0 0 134 0

View Details

Web Security Lab @WebSecurityLab

2 months ago

5. 3,009 employee records enumerated via an unauthenticated API endpoint. 6. Cardinal Stone Partners’ investment database accessed via phpMyAdmin with no network isolation. The report is written for security professionals, CISOs, incident responders, and regulators.

1 0 0 179 1

View Details

Web Security Lab @WebSecurityLab

2 months ago

We’ve published Volume I of our ByteToBreach campaign analysis: a full technical post-mortem of the Sterling Bank Plc breach. This report reconstructs the complete attack chain from initial access (March 18, 2026) through to the Cardinal Stone pivot.

1 3 8 784 6

View Details

Web Security Lab @WebSecurityLab

3 months ago

You can read more here: websecuritylab.org/coordinated-su…

0 0 0 52 0

View Details

Web Security Lab @WebSecurityLab

3 months ago

The affected subdomains were used for SEO spam hosting and redirect-based monetisation infrastructure for an extended period prior to remediation. We found no evidence of intrusion into core NIMC systems. Internal impact assessment remains the responsibility of NIMC.

1 0 0 52 0

View Details

Web Security Lab @WebSecurityLab

3 months ago

Web Security Lab has identified and documented coordinated subdomain abuse affecting multiple hosts under the National Identity Management Commission (NIMC) domain namespace.

1 0 0 89 1

View Details

Web Security Lab @WebSecurityLab

4 months ago

The incident was identified and responsibly disclosed. Following escalation to the authoritative DNS operator, the affected subdomain was taken offline. 📝 Read the full report here: websecuritylab.org/wp-content/upl…

0 0 0 49 0

View Details

Web Security Lab @WebSecurityLab

4 months ago

Hundreds of indexed pages were identified, generating search visibility under a trusted government domain and increasing the likelihood of public exposure.

1 0 0 37 0

View Details

Web Security Lab @WebSecurityLab

4 months ago

Web Security Lab has published a technical incident report on a subdomain takeover involving the Nigeria Police Service Commission website infrastructure.

1 0 0 76 0

View Details

Web Security Lab @WebSecurityLab

6 months ago

From all of us at Web Security Lab, we wish everyone a Merry Christmas and a safe, secure, and uninterrupted holiday season.

0 1 0 78 0

View Details

Web Security Lab @WebSecurityLab

6 months ago

As a certified cybersecurity professional, Jack brings emerging professional capability to Africa’s growing cybersecurity workforce. He represents a new generation of practitioners supporting secure digital growth across the continent.

0 0 1 52 0

View Details

Web Security Lab @WebSecurityLab

6 months ago

Big congratulations to @Cy_berJack, one of our Fellows, on passing the CompTIA Security+ certification. Jack is a Fellow of the Web Security Lab Professional Security Fellowship, a structured program focused on developing practical security capability & professional readiness.

1 2 6 153 0

View Details

David Odes @chiefdavidsays

6 months ago

Mariam Ibrahim, a corps member, was arrested in October 2025 after the Nigerian Police claimed that a number tied to a January 2024 kidnapping case was linked to her National Identity Number (NIN). There was just one obvious problem: she bought the SIM card in April 2025. I spoke to The Punch Newspaper about how Nigeria’s MSISDN lifecycle management allows new SIM owners to inherit the digital footprint and criminal exposure of previous owners, and why our identity verification infrastructure needs stronger procedural safeguards around number reassignment and investigative protocols. punchng.com/marked-identit…

0 14 15 15K 7

View Details

Web Security Lab @WebSecurityLab

7 months ago

That’s why conversations like this matter, and why we’re proud to contribute our voice to the broader ecosystem work shaping Africa’s digital future and strengthening a safer, more accountable internet for everyone.

0 0 0 36 0

View Details

Web Security Lab @WebSecurityLab

7 months ago

This Saturday, our Founder David Odes joins industry leaders at the Global Data Protection Tech Summit in Lagos. Stronger digital ecosystems grow when people understand how their data is collected, used, and protected—and when organisations act responsibly.