Cybersecurity, cloud, engineering & everything in between ☁️
127.0.0.1 but root
Joined March 2020
- Tweets7.2K
- Following490
- Followers1K
- Likes105K
Tory☁️ retweeted
Day 91/100
I completed the Android Application security fundamentals on @MobileHackLab
@commando_skiipz @ce3nerd @ife0x01 @KoredeSec @DefendWithFelix
Day 90/100
Android security where i learnt about system security , Network security , software isolation and Anti exploitation
@commando_skiipz @ce3nerd @KoredeSec @ife0x01 @DefendWithFelix
Tory☁️ retweeted
I'm officially AWS Certified Cloud Practitioner! 🎉
Some months ago, I joined the AWS re/Start program with lil knowledge of cloud. Look at how far I've come
Also thankful to @CyberRealm_HQ for providing access to the AWS Academy courses & labs. Really helped
More to build! 🚀
Tory☁️ retweeted
besides the occasional disappearance, selective communication and inability to explain myself, i’m actually a very intentional man.
Tory☁️ retweeted
Two cybersecurity ideas that sound technical but are actually simple and so needed in our daily lives
1. Least Privilege
Give people only the access they need to do their job. Nothing extra.
Your cashier does not need access to your bank account.
Your intern does not need admin rights.
Your driver does not need the keys to your office.
Too much access means more damage when something goes wrong, whether by mistake or on purpose.
2. Zero Trust
Never trust automatically. Always verify.
It does not matter if the email looks like it is from your boss, the call sounds like your bank, or the person is "one of us." Confirm first.
🌸 Does this person need this access?
🌸 Is this request really from who it says it is?
🌸 Can I verify it another way?
At home, that means not handing out your phone, passwords, or WhatsApp codes freely.
At work, it means access is earned, checked, and removed when no longer needed.
Trust is good. Verification is better.
See you tomorrow. Till then, THINK CYBER SMART, STAY CYBER SAFE
Once again, social engineering proves to be one of the most effective ways to gain access to an organisation. Sometimes, you don’t even need to exploit a vulnerability. You just need to convince someone to let you in.
One week ago, lawyers at Canada’s top firms received urgent calls from their IT departments about a critical software update or an expired password. The agents were happy to stay on the phone and help.
Even to a skeptic, the calls could seem legitimate. They were often placed through Microsoft Teams, appearing to come from internal IT employees, or they were phone calls from the IT department’s number.
The reality: Hackers were on the other end, spamming Canadian lawyers en masse.
The tactic the hackers used is called vishing, short for voice phishing – and it worked. At least four companies were broken into, all among the country’s most prestigious law firms: McCarthy Tétrault LLP, Davies Ward Phillips & Vineberg LLP, Bennett Jones LLP and Borden Ladner Gervais LLP.
The extent of the damage is still being assessed, but the fallout is already immense. Law firms market themselves as trusted advisers, and the nature of their work means they store sensitive files on their servers. These include non-public corporate information, communication between client and counsel, and their clients’ tax, financial or health records.
theglobeandmail.com/business…
Tory☁️ retweeted
I think Cybersecurity+AI knowledge is going to be the deadliest combination in the coming years
Guardian of the galaxy.
Drop update abeg😔
Tory☁️ retweeted
Days 29-30/30:
I completed my 30 days challenge by continuing my Security+ course
@Niffeey007 @malik_cybersec @DefendWithFelix @KoredeSec @gabbytech01 @cyberjeremiah
#30DaysCybersecurityChallenge
Days 26-28/30:
I started taking a course to prepare myself for Comptia Security+
@Niffeey007 @gabbytech01 @KoredeSec @malik_cybersec @DefendWithFelix @cyberjeremiah
#30DaysCybersecurityChallenge
Tory☁️ retweeted
Day 90 of #100DaysOfCybersecurity ✅
Wrote my 2nd Sigma rule: it detects a new local user being created, a common persistence trick (T1136.001). Triggered it in my lab and caught it in Splunk.
10 days to go. 🛡️
#SecFelix #SigmaRules #Splunk #DetectionEngineering
@malik_cybersec
Day 89 of #100DaysOfCybersecurity ✅
Wrote my first custom Sigma rule to detect encoded PowerShell, converted it to Splunk, triggered it in my lab and caught it.
11 days to go. 🛡️
#SecFelix #SigmaRules #Splunk #DetectionEngineering
@malik_cybersec @ife0x01 @KoredeSec
Tory☁️ retweeted
Today I learned how broken access control works. A site let me become admin just by changing Admin=false to true in a cookie.
Role checks belong on the server, never in user input.
@malik_cybersec @KoredeSec @ife0x01 @WebSecAcademy @ireteeh @nacss_uniosun
Tory☁️ retweeted
Day 90/100
Android security where i learnt about system security , Network security , software isolation and Anti exploitation
@commando_skiipz @ce3nerd @KoredeSec @ife0x01 @DefendWithFelix
Day 89/100
I started Android Application Security on mobilehacking lab academy starting all over again but not as begginer
@commando_skiipz @ce3nerd @KoredeSec @ife0x01 @DefendWithFelix
Tory☁️ retweeted
Hi @DONJAZZY, please I need to pay for IELTS and get laptop powerbank for my final year in school
I study computer science btw
On loving the work, being tired anyway, and finally scheduling downtime .
koredesec.me/blog/uptime-11-…
Tory☁️ retweeted
A little win here; another there. Check out my productivity app designed to help you achieve just that here
abrahamtemidayo831-hash.gith…
