Paul Arah 🐝🐝
14.3K posts

Paul Arah 🐝🐝
@ArahPaul
Security-focused Community Builder 🐝 l Cloud Native Networking, Observability, & Security with Tech Consultant • Cyclist🚴♂️

I emailed ByteToBreach, the threat actor behind the Sterling Bank, Remita, and now Corporate Affairs Commission breaches, with 10 accountability questions. He answered all of them. In my latest piece, I break down the Corporate Affairs Commission breach in full. How he got in. What he accessed. The scale of what was taken, a second access vector into the CAC's systems that he revealed directly to me, not in any published artefact and direct confirmation on whether any corporate records were modified. He also confirmed he was in active ransom negotiations with Sterling Bank for €250,000 before dumping their data. The CAC has since issued a public statement. I break down what it says and what it leaves unanswered. And he told me directly why Nigerian institutions have become his focus. Read the full piece here: securityintelligence.substack.com/p/i-spoke-with…




🚩New Axios Vulnerability Exposes Apps to Remote Code Execution cyberpress.org/axios-vulnerab… Unfortunately, Axios is in the news again. A critical flaw (CVE-2026-40175) enables remote code execution and full cloud compromise. Attackers can chain prototype pollution, SSRF, and request smuggling to bypass AWS IMDSv2 and steal credentials. A public PoC is already available, increasing risk. Just two weeks after the Axios npm compromise, another critical issue emerges. If you rely on Axios, patching and dependency auditing should be a priority. #Infosec #ThreatHunting #CyberSecurity

Unbelievable amount of work. That’s what’s required to change your life. Unbelievable.

U.S. evacuates staff from Nigeria, says insecurity under Tinubu deteriorating gazettengr.com/u-s-evacuates-…



what if oxygen is poisonous and it just takes 75-100 years to kill us

SOMEONE MADE A DIGITAL WHIP TO MAKE CLAUDE WORK FASTER 💀










