Norman Mkhwanazi

While they struggle with Maths Lit, we are solving Boolean expressions...(TRUE or FALSE, REAL or FAKE)

[Norman Mkhwanazi @NormanLMkh]

@elijah_ayanfe1

[Norman Mkhwanazi @NormanLMkh]

@ZuluCbu Steve Lekoelea

[Norman Mkhwanazi @NormanLMkh]

Just RSA

[Norman Mkhwanazi @NormanLMkh]

@NUFC @premierleague The kit 🔥

[Norman Mkhwanazi @NormanLMkh]

@pmcafrica Flaimachini 🤣🤣

[Jos 🇿🇦👨🏿‍💻 🚗 @JosiahThobejane]

I am paying over R1,000 for this @rainSouthAfrica 🤣🤣??????

[GhanaBoy Ni3🇬🇭 @ghanaboynie]

Wait a minute, How do people think, So the Igbos and Nigerians at Large wanted Indigenous Ghanaians to see and hear this and keep quiet?

instead of thanking God the Man and His chiefs are still in Ghana you are Calling Ghanaians Racist . Seems they want another round of Heat in Ghana 🇬🇭.

#Nigeria #Ghana #migrants #fixthesystem #Durban

[Vuvu Videos @VideosVuvu]

It was at this point where she asked the instructor if he knows someone from inside 😭😭😭
#videosvuvu

[tsheg_r @tsheg_r]

@MokoenaDee I doubt folks understand the extent of damage and dysfunction we have in RSA. It's bad bad.

[Dark Web Intelligence @DailyDarkWeb]

🇿🇦 A threat actor operating under the name “Nullsec” is claiming responsibility for compromising State Information Technology Agency (SITA), the government-owned IT agency responsible for providing technology services to multiple South African state institutions.

According to the underground post, the alleged leak contains:
• names
• Gmail addresses
• password hashes
• plaintext/non-hashed passwords
• platform access information

The actor also references a downloadable leak package, suggesting the data is being publicly distributed rather than used solely for private extortion.

This is particularly significant because SITA plays a critical role in South Africa’s governmental digital infrastructure and supports numerous public-sector services and departments.

If authentic, even limited credential exposure tied to SITA environments could create risks including:
• government account compromise
• credential stuffing across public-sector systems
• phishing against officials
• lateral movement into connected agencies
• intelligence collection operations
• impersonation attacks targeting government personnel

The mention of both:
• hashed passwords
• non-hashed passwords
is especially concerning because it may indicate:
• poor credential storage practices
• plaintext credential exposure in logs/configurations
• legacy systems
• improperly secured exports

Another notable detail:
the actor specifically references “platform of entry,” which may imply:
• initial access vectors
• exposed panels
• compromised portals
• reused credentials
• third-party vendor access

From a geopolitical and cyber-intelligence perspective, government IT agencies remain extremely high-value targets because they often act as centralized technology hubs connecting:
• ministries
• citizen services
• procurement systems
• government email infrastructure
• identity systems
• interdepartmental platforms

Compromising a centralized IT provider can create cascading downstream exposure across multiple agencies.

At this stage, the authenticity and scope of the claims remain unverified.

Possible scenarios include:
• partial credential leak
• recycled datasets
• old credential dumps
• third-party contractor compromise
• phishing-derived access
• exposed development systems
• limited internal panel exposure rather than full infrastructure compromise

Still, organizations connected to public-sector ecosystems should immediately review:
• password reuse exposure
• MFA enforcement
• privileged account activity
• SSO integrations
• VPN access logs
• credential rotation policies
• exposed admin portals
• government contractor access
• suspicious authentication attempts

This incident also reflects a broader trend:
threat actors increasingly target centralized government technology providers because compromising one operational hub can potentially provide access paths into multiple institutions simultaneously.

🇿🇦 #DDW #Intelligence #CyberSecurity #SouthAfrica #SITA #DarkWeb #ThreatIntelligence #GovernmentSecurity #DataLeak #OSINT #Infosec #CyberThreats #CredentialLeak #PublicSectorSecurity

[ParrotOS @MokoenaDee]

Do you you guys understand we’re in Tatters?!

The whole country is actually breached at this point.

[Norman Mkhwanazi @NormanLMkh]

@JonathanFalcons @SSBN611Sailor @rodriQuez @Beno10_MFC Or 992

[T @Uncle_Thaps]

Why StarLink is desperate to enter South Africa, despite Elon Musk hating the country.

[Sibu Mabena @sibumabena]

Shem today @CityofJoburgZA I want to give you flowers for a call center agent named Kgopotso and her mom’s name is Kgadi. I know this cos I asked her ukuthi njengoba ahelpful so ukhuliswe ubani. Yaz umntana kaKgadi talked me through every step of sorting out my late mom’s account that was confused in the system with some other person’s and then fixing my own account as well and nje she was so patient and so kind and what she didn’t know she went to find out and came back with constructive advice!

What a brilliant experience and now all is sorted!!! ✔️

Some public servants serve better than others ❤️🫶🏼🙏

[Norman Mkhwanazi @NormanLMkh]

@elcabony178511 @FirstHalfYT Change formation to 4-3-3

[Norman Mkhwanazi @NormanLMkh]

@AmogelangRSA3 @ZANewsFlash Compare

[Norman Mkhwanazi @NormanLMkh]

@JustJosh132 This one for me

[Norman Mkhwanazi @NormanLMkh]

@BoikhutsoMoitsi @Patriot_S_A 🤞🏽

[Norman Mkhwanazi @NormanLMkh]

@festus1718 @fcmobileguide Show off 🤣🤣

[Norman Mkhwanazi @NormanLMkh]

@VideosVuvu "Kwena motho o" 🐕