Building secure IT infrastructure & helping newbies master cybersecurity | Founder @KillerVMs | Practical labs & real-world defense for African tech talent.
☁️
Joined November 2018
- Tweets17K
- Following652
- Followers3.5K
- Likes50.5K
Jeffrey P. retweeted
Networking upward is typically by invitation. Someone must like you well enough to bring you into the room, and you must bring enough to keep you there. It is more about giving than receiving, and this is where many miss it. Those at the top need more "proof of value" than others.
Jeffrey P. retweeted
STOP ALLOWING EMPLOYEES TO TREAT THEIR LAPTOPS LIKE AN ALL YOU CAN EAT BUFFET AND LOCK DOWN YOUR ENTRY POINTS.
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
Jeffrey P. retweeted
Nigerian institutions and announcing Audio policies that sound revolutionary on paper, but scratch beneath the surface and you realize they are nearly impossible for the average citizen to access:
- PenCom: Use 25% of your pension for a mortgage
- Police: "Bail is free"
- FG: Duty-free EV imports
- NERC: Selling excess solar power back to the grid
The bureaucracy, hidden bottlenecks, and gatekeeping around each of these make them practically useless in real life. Yet the government will pat itself on the back and gaslight citizens into believing the system is being reformed. – at Ikeja, Nigeria
Turn your excess solar energy into savings with NERC's Net Billing regulations! By exporting surplus electricity from your home or business to the grid, you can earn energy credits to reduce your monthly bill.
Read the Net-Billing Regulations 2026 on our website at nerc.gov.ng to learn if you qualify to generate, export and earn.
#NetBilling #NERC #SolarNigeria #renewableenergy #NESI
Jeffrey P. retweeted
Ghen Ghen 🌚🌚
🚨🇦🇪 Telegram zero-day can enable code execution through malicious animated content
A vulnerability in Telegram’s rlottie animation library can allow attackers to execute arbitrary code within the application process.
Tracked as CVE-2026-111105, the flaw carries a CVSS score of 7.0 and was publicly disclosed by Trend Micro’s Zero Day Initiative after remaining unresolved at the client-code level.
⠀
The vulnerability is caused by improper validation of attacker-controlled animation data, resulting in a write before the beginning of an allocated memory buffer.
⠀
Despite reports describing the flaw as a zero-click sticker attack, ZDI’s final advisory says user interaction is required. The victim must visit a malicious page or open a malicious file for exploitation to occur.
⠀
Telegram told ZDI that server-side sticker validation mitigates the vulnerability. However, ZDI continued seeking a client-side fix and ultimately published the issue as a zero-day advisory on October 15.
⠀
No affected client versions, patched versions or confirmed in-the-wild attacks have been disclosed.
Users should keep Telegram updated and avoid opening untrusted animated files, sticker packs or external links until a client-side fix is confirmed.
Jeffrey P. retweeted
The Bitcoin got stolen!!!!!!!
Someone finally did it.
Twenty hours of silence. Counter ticking. Nobody touching it.
Then someone actually figured out the exploit chain on a live server.
With real Bitcoin sitting there.
And took it.
The exploit works. Not in theory. Not in a lab. On a real vulnerable PHP server running in production.
Every security researcher who said "these are the worst vulnerabilities in decades" just got vindicated.
The government who told people to unplug their servers just got vindicated.
The NSA who published emergency mitigation guidance just got vindicated.
But mostly the attacker just got Bitcoin.
The counter on stealmybitcoin.com stopped ticking.
The challenge is over.
PHP 8.2 and 8.3 with patches. Still secure. Untouched.
PHP 8.1 and older. No patches available. Ever.
One just got exploited on a live server.
Now we know for certain. The hype is real.
The vulnerabilities work. The exploit chains chain.
And someone out there knows how to do it.
Which means everyone will know how to do it within a week.
Then every vulnerable PHP server gets compromised.
Then the attacks scale.
Then the infrastructure starts going dark again.
The developer created the perfect incentive structure.
Real money. Real vulnerability. Real challenge.
Someone won.
Everyone else just realized the danger was never academic.
Jeffrey P. retweeted
Cybersecurity Awareness Campaign 🧚♀️🧚♀️🧚♀️
It wasn’t just a carnival, it was an educational outreach and I’m so grateful to everyone and our amiable sponsors… the team 🔥 beautiful people mehn… Abuja team no do pass Lagos, we beat them hands down.
Thank you @EatsByThankGod for the free cup of spicy spaghetti.
@TheCyberPatron_ and @cabbagenode next year will be lit 🔥
Jeffrey P. retweeted
Dear @ngxgrp,
I think it is quite disappointing that the Corporate Disclosures page on your website has remained unresponsive for over three months.
This issue has been raised repeatedly by market participants. About two months ago, the Group CEO @TemiPopoola_, indicated that the problem had been resolved. Unfortunately, the situation remains unchanged.
Companies have until the end of this week to file their Q3 2026 financial reports, yet investors are being forced to rely on the website's mobile version to access these disclosures. This is unnecessarily cumbersome, particularly for those who need to download, review and analyse financial reports.
Corporate disclosures are fundamental to market transparency, information accessibility and investor confidence. Ensuring that investors can access them seamlessly should be one of the Exchange's most basic responsibilities.
Is this really such a difficult technical issue that it requires more than an entire quarter to resolve?
I believe investors deserve better. At the very least, the NGX should provide a clear explanation for the prolonged disruption and a definite timeline for resolving it.
This is simply not good enough for an Exchange of NGX's standing.
Jeffrey P. retweeted
A lot of the heroic deeds of our boys during the ECOMOG ops went undocumented. I remembered one of such stories which happened In 1997.
A coup in Sierra Leone left about 30 Nigerian Air Force personnel stranded at Lungi International Airport. Besieged by Sierra Leonian Army loyalist to the coup plotters, they were dangerously low on food and ammunition.
Nigerian Air Vice Marshal Lucky Ararile. Piloting the C-130 Hercules from Liberia with a crew of nine, he executed a high risk landing of the plane using half the required runway (since the other half was held by hostile forces) by hitting maximum brakes to halt the plane in just half the distance to land.
To buy time on the tarmac, the crew pulled off a brilliant psyOps by convincing the rebel troops surrounding the airport that they had direct clearance from the coup leader to land.
Before the rebels realised they have been tricked, the C-130 rapidly unloaded a full company of Nigerian reinforcements led by Lt. Col. Kwaskebe, two Mowag, & Piranha APCs, four jeeps, and two weeks of combat supplies.
When the Sierra Leonean Army finally attacked that night, the newly reinforced troops crushed them, overran their barracks, and permanently secured Lungi.
This operation allowed Nigeria to establish a bridgehead which Brig. Gen. Maxwell Khobe used to launch the operations that eventually ousted the junta.
A game-changing mission that saved the entire operation, yet rarely discussed because, as Ararile later noted, it isn't in the military's nature to advertise.
Thankfully this story was captured and documented by the of Nigerian Military historian Oga @beegeaglesblog in his blog beegeagle.wordpress.com/2013…
Jeffrey P. retweeted
Google says your Gmail, Drive, and Photos data could influence the ads you see.
The catch? This can happen when you opt to share that data with AI-powered Search features.
Google's updated privacy policy spells out the trade-off.
Here's what you need to know: thehackernews.com/2026/10/go…
Jeffrey P. retweeted
Reposting the POC for the PHP thing (Proof-of-Concept for those not in my industry and unfamiliar with this term) of the exploit.
For those of you who are not technical, note the time it takes for full exploitation of the website which is why we are telling you to patch immediately today.
Please do NOT be abusive to the researcher I am retweeting here. That kind of behavior helps no one.
The sharing of knowledge no matter its source is critical to what we do and helps us learn and address problems.
Keep nasty opinions and comments to yourself.
Bookmark the PHP foundation's website and watch it all day until the patch drops.
Then update your sites.
That is today's order of business.
Re-upload, this time with a cleaner poc & proof
> jackalsyn.com/posts/php-up-2…
> We got it working & parsed out the bugs
> Major thanks to @acd421 for helping to push past the final point...
> [pump]: pump.fun/coin/Cbkg5w7V7W2J2s…
#CyberSecurity #infosec
Jeffrey P. retweeted
❗️ An iPhone 17 restarted itself mid-use and came back covered in red glitch art, its owner says on Reddit. A force restart turned it blue, and it got stuck there.
The warranty had just run out and Apple's service provider blamed the logic board and quoted about $480.
Readers added context they thought people might want to know
The images show a full-screen glitch with an unaffected normal Dynamic Island (pill cutout with rendering), inconsistent with real iPhone 17 hardware failure or boot behavior as the area would be impacted or absent.
support.apple.com/guide/iphone/a…
x.com/EDMIRE2k/statu…
x.com/ethvmir/status…
Jeffrey P. retweeted
I’m confused. Was he supposed to share the hackathon winnings with you or give you a cut?
It’s a hackathon, not a giveaway. It’s like someone seeing a job vacancy you reposted and getting the job.
It’s great that they’re coming to thank you, but you shouldn’t be expecting a part of their salary because they used information you posted.
So someone won $5k from a hackathon he stumbled upon on my page 3 months ago.
In excitement, he entered my DM.
“Thank you boss, I won $5k from a hackathon on your page. Keep up the good work.”
And that was it from him.
He came back today asking me to help him repost his content that he’s participating in a contest.
I first shake my head.
Jeffrey P. retweeted
‼️ BREAKING: Security firm Calif unveiled an untethered iPhone 18 Pro jailbreak on stage in Paris.
Its Hexacon demo shows the phone on iOS 27.0.1, Apple's latest, giving up a root shell within 2 minutes of boot.
Jeffrey P. retweeted
Little did I know this message to @fabian_bader would lead me to resigning from Microsoft, birth what we now call Maester and build one of the largest community contributed open source projects in the Microsoft security ecosystem.
Jeffrey P. retweeted
Took over an hour to get a simple data purchase done on Glo yesterday during the MTN outage… guess what? The internet didn’t work!
Even till now e no Dey work😭😭😭
Jeffrey P. retweeted
Hear that?
Microsoft Entra brings MFA to
LEGACY ON-PREM
not my words.
Microsoft's 👇
Bring Conditional Access and MFA to your on-prem resources with Microsoft Entra.
Get started. youtu.be/LaDSrwAOszQ
Connect users to on-premises resources while enforcing Conditional Access policies, including MFA, and eliminate the need for VPNs using Secure Access Service Edge with Microsoft Entra.
Route authentication through Microsoft Entra before granting resource access, even within legacy on-premises systems. #SASE #MicrosoftEntra #GlobalSecureAccess
Jeffrey P. retweeted
❗️ Samsung's Galaxy S26 was remotely hacked three times on Day One of Pwn2Own Ireland, while Google's Pixel 10 survived a $300,000 attempt.
Researchers earned $388,500 for 32 zero-days and also broke LiteLLM, Sonos, Philips Hue, Oracle's Autonomous AI Database and OpenAI Codex.
VinSOC leads with $97,500 as Day Two gets underway with KAIST targeting the Pixel 10 over USB.
