Hamzah 'Lateef

Cyber | Security Operations & Engineering. coordinating @ngwhitehat, building @cyberplural.

CISO of Nigeria 🇳🇬

[Hamzah 'Lateef @password_ng]

Every little piece of #information or #data you dropped somewhere on the Internet is a piece of the puzzle named YOU. When the time is right, they can always be brought together.

Don't forget
You are your data!

#CyberAware

[John Hultquist @JohnHultquist]

Google Threat Intelligence Group is dropping our latest AI Threat Tracker report today, which covers several threats we are watching through a variety of means. The report includes some details of the first 0day exploit we've found developed with AI. 1/x https://t.co/klvOrX31xv

[Hamzah 'Lateef @password_ng]

What can you see? Restrategizing or on the run?

[Hamzah 'Lateef @password_ng]

@Xymbiz It is in you ma. You will tackle it like always 💪 😉

[Hamzah 'Lateef @password_ng]

You can keep your vulnerable applications behind your firewall all day, all year.

You will not like it the day one of them give up on your bad behaviour.

PATCH UP

It will be like movie but it won't be view once.

[ngCERT @ngCERTofficial]

🚨 CVE-2026-41940

Active exploitation attempts targeting vulnerable cPanel/WHM systems have been observed globally with thousands of potentially compromised IPs scanning for exposed servers.

Delayed response can increase the risk of unauthorized access & service disruption.

[Hamzah 'Lateef @password_ng]

Just imagine, Team 313.

[Ubuntu @ubuntu]

Canonical’s web infrastructure is under a sustained, cross-border attack and we are working to address it.

We will provide more information in our official channels as soon as we are able to.

[Hamzah 'Lateef @password_ng]

I find it funny with a setup where people doing stuff don't want to talk or are not allow to talk, and people doing nothing take the center stage.

Is that a strategy too 🤔

We will be alright 👍

[Hamzah 'Lateef @password_ng]

To potential or operating Ryan Goldberg out there, you can see where it will end already.

[International Cyber Digest @IntCyberDigest]

🚨 Two US cybersecurity professionals have been sentenced for moonlighting as ALPHV BlackCat ransomware affiliates.

Ryan Goldberg, 40, of Georgia, and Kevin Martin, 36, of Texas, deployed BlackCat ransomware against multiple US victims between April and December 2023. They paid the operators a 20% cut for access to the platform, hit medical and engineering firms, leaked patient data to pressure payment, and split a $1.2 million Bitcoin ransom three ways with co-conspirator Angelo Martino.

Martino had a second job. He worked as a ransomware negotiator for victims, and used that role to leak confidential victim information to the attackers to push ransom prices up.

When Goldberg tried to flee abroad, the FBI tracked him through 10 countries before he was caught.

Both men were sentenced yesterday. Martino is sentenced July 9.

[Hamzah 'Lateef @password_ng]

They have started posting again. When you do things to want to show the other side that you truly can do all of the work and don't need help, the sustainability test is where you will fail.

We are watching, but why are those messages not even addressing what is happening !

And please make it human, don't just post and drop it there. That is not what we need right now.

[Hamzah 'Lateef @password_ng]

Your handwriting 😀😁😁

[Hamzah 'Lateef @password_ng]

@Shabosec @ngwhitehat @lostsec_ Welldone @Shabosec, keep 👍 the work 👏 coming

[Hamzah 'Lateef @password_ng]

ConnectWise ScreenConnect path traversal vulnerability CVE-2024-1708 & Microsoft Windows protection mechanism failure vulnerability CVE-2026-32202 added to KEV

[Hamzah 'Lateef @password_ng]

ATT&CK v19

[Hamzah 'Lateef @password_ng]

Flexible muscle

[Hamzah 'Lateef @password_ng]

Zhang et al. 😁😅

[Hamzah 'Lateef @password_ng]

New additions to KEV Catalog

[Hamzah 'Lateef @password_ng]

If you can see very well, you will see no surprise!

[Hamzah 'Lateef @password_ng]

This day and age, a team that is not knowledge-seeking, driving on a self-defeating governance structure with zero action-backed engagements to innovate, cannot and will not DEFEND anything.

We often say update the technology, change legacy and vulnerable systems, and setup adequate controls.

But we forget the people manning these stuff and those responsible for the administration can be a "walking vulnerabilities" for a defense team too, especially when they refuse to up their game, grow up, jump on empowering trend, and augument new realities to attain new phases of possibilities in their outcomes.

May we not be left behind doing shows 🙏 when others are showing "capabilities" and "possibilities".

[Hamzah 'Lateef @password_ng]

The mandate thing is good on paper, but the mandate thing is taken far beyond what it should be- mandate, people are now worshiping EGO and calling it MANDATE!

EGO is the enemy, since a team felt when they come down, off their shining horse to work with others, then it will diminish their authority and it must always be the other way round, others must come to them.

When others take up the work to filled the "gap" this politically motivated behaviour has created, they throw the mandate card.

When we are all ready we know what to do.