Abdulmuiz| Cybersecurity

Web Application Security | API Security | Security Researcher| SOC & Detection Foundation

[Abdulmuiz| Cybersecurity @MuizRecon]

Okay, let me just say it:
I've been interning at one of Africa's biggest conglomerates, and I still can't fully process it, ngl.

[Abdulmuiz| Cybersecurity @MuizRecon]

https://t.co/gDTBPRY5Gu

[Abdulmuiz| Cybersecurity @MuizRecon]

A business owner spends $250 on a WordPress website.
Puts $0 into security.
Doesn’t care about updates or plugin checks.

Then one day, the site gets hacked.
Traffic drops, customers disappear, and recovery costs way more than maintenance ever would.

Full breakdown 👇

[Abdulmuiz| Cybersecurity @MuizRecon]

Good morning, tech X ☀️

One day, the late nights, failed projects, rejected applications, and endless learning will make sense.

Until then...

Keep showing up.

The person you want to become isn't coming to save you. 🚀

[Abdulmuiz| Cybersecurity @MuizRecon]

Good morning, tech X ☀️

One day, the late nights, failed projects, rejected applications, and endless learning will make sense.

Until then...

Keep showing up.

The person you want to become isn't coming to save you. 🚀

[Abdulmuiz| Cybersecurity @MuizRecon]

@the_Diamond_01 Bandits are already doing ads😂😂😂

[Abdulmuiz| Cybersecurity @MuizRecon]

Why does this sound like a bandit wrote it? 😭😂

[Abdulmuiz| Cybersecurity @MuizRecon]

Good morning to everyone grinding in tech. 🚀

May your applications get responses, your projects make progress, and your hard work open doors you never expected. 🙏

[Abdulmuiz| Cybersecurity @MuizRecon]

AI said my Kali VM is lagging because I'm in Ikorodu.
Is RAM now location-based? 😭💔

Justice for Ikorodu tech guys. We suffer enough already. 😂

[Dr Iretioluwa Akerele @ireteeh]

Dear hiring managers 👇🏾

Hire a Cybersecurity Intern
Hire a Cybersecurity Intern
Hire a Cybersecurity Intern
Hire a Cybersecurity Intern
Hire a Cybersecurity Intern

Give them a chance 💪

[Abdulmuiz| Cybersecurity @MuizRecon]

A lot of people will call it wrong at first. If you listen too much, you’ll never start.

One of the worst things he’s seen… turned into one of the most used tools today.

[Abdulmuiz| Cybersecurity @MuizRecon]

Me reporting a bug and seeing it already reported 😭

[Abdulmuiz| Cybersecurity @MuizRecon]

🚨🚨🚨 Finally, peace for people who quote tweets without knowing the full story 😂

[Elon Musk @elonmusk]

Users who interact with a misleading post that is subsequently corrected by @CommunityNotes will receive an 𝕏 Chat message of the CN to correct any misperception

[Abdulmuiz| Cybersecurity @MuizRecon]

@gabbytech01 Count me in 🤝

[Abdulmuiz| Cybersecurity @MuizRecon]

POV: You work in cybersecurity

[Cyber Security News @The_Cyber_News]

🚨 Microsoft Edge Vulnerability Allows Remote Attackers to Execute Arbitrary Code

Source: https://t.co/ucBHY0LbyF

Microsoft has released a security update addressing a critical vulnerability in Microsoft Edge that could allow remote attackers to execute arbitrary code on vulnerable systems.

An attacker who can trick a user into opening a malicious file or visiting a crafted page could exploit this flaw alongside other bugs to run code in the logged-in user's context.

📌 CVE-2026-45495 (CVSS 7.5): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge

📌 CVE-2026-45494 (CVSS 5.0): A navigation-handling weakness that can enable cross-origin script injection; user interaction required.

📌 CVE-2026-45492 (CVSS 4.3): Insufficient origin validation in cross-device managed sign-in, which can expose restricted functionality and be chained with other issues.

#cybersecuritynews #MicrosoftEdge

[International Cyber Digest @IntCyberDigest]

‼️🚨 A new npm supply-chain attack compromised 57 packages across over 286 malicious versions in under 2 hours. The attackers used self-replicating malware, a new version of the Miasma worm, which also used evasion techniques to stay under the radar.

The payload targets CI/CD and developer credentials, including GitHub Actions secrets, cloud credentials, Vault tokens, SSH keys, npm and GitHub tokens, and password-manager stores. This variant also injects AI coding assistant config files at `.claude`, `.cursor`, `.gemini`, and `.vscode` paths, a separate persistence and repo-poisoning angle.

[Abdulmuiz| Cybersecurity @MuizRecon]

@TheHackersNews This is why API keys and cloud credentials are now the real perimeter. Once they’re stolen, the attacker becomes a trusted user.

[Abdulmuiz| Cybersecurity @MuizRecon]

🚨 AWS, Azure, and Google Cloud servers are being compromised and turned into SMTP and SOCKS5 proxy networks 😳😱 It’s no longer just data theft.

Attackers are using stolen cloud accounts to quietly build hidden infrastructure.

Your cloud is now the weapon !🗡️

[The Hacker News @TheHackersNews]

🚨 Hackers turned hijacked cloud servers into a hidden email-sending network.

AWS. Google Cloud. Azure.

PCPJack tested which hosts could send mail, kept the working ones, and synced the proxy list every 5 minutes. What they planned to use it for is still unknown.

The setup was still live when found.

Learn more: https://t.co/avKbZCohkR

[Abdulmuiz| Cybersecurity @MuizRecon]

Good morning my Twitter fam ☀️
Stay consistent, stay focused, your effort will pay off even when it feels quiet 💪

[Abdulmuiz| Cybersecurity @MuizRecon]

📢 Not every Nigerian is a scammer.

When platforms block an entire country, it's not just access that's lost;
It's missed gigs, delayed careers, and dreams put on hold for people doing things the right way.

Fellow Nigerians in tech, how are you navigating this?