D3Mi

Red Teamer | Penetration Tester | Ethical hacker

[APIsecUNigeria @APIsecUNigeria]

APIsec U-Nigeria is LIVE 🇳🇬🔥
A community to learn, practice, and master API Security.
🎯 Taking API Security to every corner of Nigeria

Hands-on labs • Weekly sessions • Real-world skills

👉 Join us: https://t.co/eVrSpuz4K7
#CyberSecurity #APISecurity #APIsec @apisecu

[AWS Student Builder Group BellsTech @aws_sbg_bells]

It’s happening tomorrow at Bells University of Technology.
Are you interested in cloud computing with AWS, or are you currently building with it?
Let's come together as we launch the AWS Cloud Clubs in Bells University☁️

📍 Venue: LT2
🕒 Time: 6 pm
#AWSCloudclubs #StudentsAtAWS

[D3Mi @D3Mi_0]

@_0b1d1 PDF

[D3Mi @D3Mi_0]

@akintunero Omo, make me sef come spread my socks

[Altered Security @AlteredSecurity]

Final Black Friday Giveaway!

Win FREE access to:
• 1 CRTP seat
• 1 CRTE seat

How to participate:
1. Like
2. Comment which course you’re interested in and why
3. Repost

If you've already availed the Black Friday offer, you're still eligible.
Winners will be announced on Dec 15, 2025.

Few days left to grab your Black Friday deals:
• Up to 25% OFF Labs & Bootcamps
• No coupon code needed
• Use anytime within 6 months

For More details: https://t.co/hp0GLwrqy7

[D3Mi @D3Mi_0]

@AlteredSecurity CRTE🐐

[Expedier @ExpedierHq]

Congratulations! You’ve made it through The Digital Dozen: 12 Steps to Cyber-Proofing! You now have the fundamental knowledge to protect yourself in the digital world.
But cybersecurity isn’t a one-time thing, it’s a journey. As technology evolves, so do the tactics of cybercriminals.

Our final, most important tip is to commit to continuous learning:
🔹Stay Updated: New scams and threats emerge every week. Stay current with cybersecurity news.
🔹Follow Verified Sources: Continue to follow our page for weekly tips and insights on how to keep your money safe in the digital world.

We hope this series has empowered you to take control of your digital life.
Keep practicing these 12 steps, and together, we can build a safer digital environment.

#DigitalDozen #CyberSecurityMonth #StayEducated #CyberAwareness #expédier #fintechnews #CyberProofed

[Dr Iretioluwa Akerele @ireteeh]

I will be speaking at Tech Hive Advisory’s webinar tomorrow. Here is the link to register 👇🏾

https://t.co/WbabpWczDv

[Expedier @ExpedierHq]

Tip #11: you’ve got your defenses up, but if something slips through, your speed in reporting it is the final critical step to protecting your finances.

If you notice any unusual activity,an unauthorized transaction, a strange email, or a suspicious request related to your fintech app or bank,don’t hesitate!

Why immediate action matters:

🔹Limit Losses: The faster you report fraud, the higher the chance your financial institution can stop further fraudulent transactions.

🔹Freeze Accounts: Quick reporting allows the institution to freeze or block the compromised account or card, securing your money.

🔹Aid Investigation: Your timely report helps customer support investigate the issue and potentially prevent the scammer from targeting others.

Don’t wait. Don’t second-guess. If it seems suspicious, contact support right away! Speed can truly save your money.

#DigitalDozen #ReportFraud #ActFast #CyberVigilance #expédier #fintechnews #cybersecuritymonth

[D3Mi @D3Mi_0]

@tryhackme A laptop. Fuzzing takes a lot time🥲

[Dr Iretioluwa Akerele @ireteeh]

Day 27/31 The Vault’s Silent Raid (LastPass, 2022)

In 2022, attackers gained access to LastPass’s development environment through a compromised developer account, stealing portions of source code and internal technical information.

Few months later, the attackers used the details stolen during the first incident to gain access to LastPass’ third-party cloud storage service used to archive backups of production data.

The attackers obtained a copy of customer vaults, along with unencrypted information such as customer names, billing addresses, and email addresses. They also took website URLs that users had stored.

The fallout was immense, lawsuits were filed, customer trust eroded, and LastPass faced tough questions about developer endpoint security, credential rotation, and encryption practices.

Community Challenge:
Would you prefer to patronize an organization that has never been breached or an organization that was breached multiple times within one year? Give reasons

[Expedier @ExpedierHq]

Digital Dozen Tip #10: The convenience of saving your payment information for quick checkout is tempting, but on a shared or public device, it’s a huge security risk.

The Golden Rule:

🔹NEVER allow a public computer (like at a library, hotel, or internet cafe) to “Remember Me” or save your payment information.

🔹Even on family-shared tablets or computers, be cautious. You can’t control who accesses the device next.

🔹Always log out of any account after making a purchase, especially if you had to enter sensitive information. Clear your browsing data and history for extra caution.

Keep your sensitive information private and under your control. Security over convenience, every time!

#DigitalDozen #CardSecurity #SharedDevices #DataProtection #expédier #fintechnews #cybersecuritymonth

[Expedier @ExpedierHq]

It’s a new week! Send money home, pay your bills, and swap funds easily, all in one place and start building credit with Expédier.

Available on the App Store and Google Play. Visit https://t.co/6xgxgJMAUF to get started.

#NigeriansInCanada #SendMoneyHome #Diaspora #Remittances #Expedier #FinancialFreedom #Nigeria #Canada #GlobalMoney #securetransfers

[Expedier @ExpedierHq]

Tip #4: This is a crucial rule for all your online interactions: NEVER share sensitive personal or financial information without verifying the request and the identity of the person asking for it.

Remember:
🔹We will NEVER ask you for your PIN, full password, or a One-Time Password (OTP) via phone, email, or SMS. If someone claiming to be from your financial institution asks for this, it's a scam.
🔹 Be suspicious of anyone asking for account numbers or personal details over unsecured channels.
🔹 Verify the identity of the caller/sender. If you receive a call that seems suspicious, hang up and call the institution back using a verified number from their official website.

Your personal data is valuable. Treat it like gold and protect it from prying eyes.

When in doubt, don't share!

#DigitalDozen #VerifyBeforeShare #DataProtection #NoToScams #expédier #fintechnews #cybersecuritymonth

[Expedier @ExpedierHq]

Huge congratulations to all the winners:

Each of you has won $10! We loved celebrating Customer Service Week with you.
Leave a comment if you’ve received your $10⬇️⬇️

Download the Expédier app today to get your money in your hands! Click the link in our bio.

#CustomerServiceWeek #Expédier #Winners #Giveaway #CustomerAppreciation

[Expedier @ExpedierHq]

Tip #3:🎣 Cybercriminals are constantly trying to trick you into giving up your personal information. One of their favorite tactics? Phishing!

What is Phishing? It’s when attackers send you deceptive messages (via email, SMS, WhatsApp, social media, etc.) that look legitimate, often pretending to be from your bank, a service provider, or a trusted company. Their goal is to get you to click on a malicious link.

What to watch out for:

🔹Suspicious Links: Never click on links in unsolicited messages, especially those asking for personal details, login credentials, or financial information.

🔹Urgent Language: Phishing attempts often create a sense of urgency or fear (“Your account will be suspended!”, “Immediate action required!”).

🔹Grammar & Spelling Errors: Official communications rarely have obvious mistakes.

🔹Generic Greetings: If it doesn’t address you by name, be wary.

Always remember: When in doubt, go directly to the official website of the organization (type the address yourself) or contact them via a verified phone number, rather than clicking a link in a message.

Stay vigilant and protect yourself from these digital traps!

#DigitalDozen #PhishingAwareness #CyberSecurityTips #DontClick #expédier #fintechnews #cybersecuritymonth

[Dr Iretioluwa Akerele @ireteeh]

Day 16/31 When the Market’s Gatekeeper Fell (SEC, 2016)

In 2016, the U.S. Securities and Exchange Commission (SEC) discovered that its EDGAR (Electronic Data Gathering, Analysis, and Retrieval) filing system, a core platform for corporate disclosures was compromised.

Attackers exploited a vulnerability in a custom software component related to the test filing process of the system.

This allowed them to access non-public, market-sensitive information, including test filings containing details about upcoming earnings announcements from publicly traded companies.

The attackers then traded on this material non-public information, profiting once the information became public.

Community Challenge
What implication does this breach have on public trust?

[Expedier @ExpedierHq]

Tip #2: if 2FA is the lock on your digital front door, your password is the key. Make sure it’s one that a burglar (or a hacker) can’t easily guess or crack!

Follow the golden rules:

Be Unique: 🚫 NEVER reuse passwords. If one account is compromised, every account with that same password is at risk.

Be Strong: Use at least 12 characters with a mix of letters (both upper and lower case), numbers, and symbols. The longer and more complex, the better.

Stay tuned tomorrow for Tip #3! Protect your digital life, one step at a time.

#digitaldozen #strongpasswords #passwordsecurity #cybersecurityawarenessmonth #cybersecuritytraining #expédier #technews #cybersecuritymonth

[Expedier @ExpedierHq]

It’s Cybersecurity Awareness Month! 🔒 Protect your digital life with The Digital Dozen: 12 Steps to Cyber-Proofing.

Over the next 12 days, we’ll be dropping essential tips, and we’re starting with the non-negotiable step: Two-Factor Authentication (2FA).
This is your most powerful defense against unauthorized access. Always activate 2FA on your banking, wallet, and critical social media apps for an extra layer of protection. Even if a hacker steals your password, they won’t be able to get in without that second code.

Follow along daily and make your online security a priority!

#cybersecurity #cybersecuritytraining #cybersecuritynews #expédier #fintechnews #cybersecuritymonth

[Dr Iretioluwa Akerele @ireteeh]

Day 6/31 When trust becomes the weakest link (M&S, 2025)

This spring, Britain’s high street giant, Marks & Spencer, found itself at the center of a cyber storm.

By tricking employees of M&S’s trusted third party, the attackers gained the foothold they needed. They used social engineering to deceive helpdesk staff into handing over access. The attackers posed as internal IT, obtaining credentials, resetting passwords, and then infiltrating M&S network.

Once inside, the attackers deployed ransomware, encrypting data and stealing customer records.

The operational impact on M&S was severe. With core IT systems offline, stores could not scan or automatically track millions of products, forcing staff to rely on manual workarounds.

The stock market reacted badly, at one point, the attack wiped roughly £750 million off M&S’s market value.

Recovery was slow and painful. What stings most? The attackers simply walked in through a side door left open by human trust.

Community Challenge
What is your biggest takeaway from the M&S breach?