Senior Security Engineer | Cloud Security (Azure) · DevSecOps · ISO 27001 · ISO 22301 · ISO 20000 · PCI DSS · SWIFT CSP | Securing Cross-Border Payments
Nigeria
Joined December 2019
- Tweets1.6K
- Following1.5K
- Followers735
- Likes1.3K
Security Consult with Michael retweeted
I have met 2 Nigerians here that were directly hired from Nigeria like me. They came in Sept.
Another lady is coming over in December.
We were all headhunted on LinkedIn.
Guys, please take your online profile serious.
PS: also check for open roles: join.deriv.careers/
Security Consult with Michael retweeted
I think the era of rapid detection and response to keep incidents small & contained is going to draw to a close with agentic attacks.
We’re going to have to security engineer our way forward instead. Limit blast radius by design. Brilliance in the basics. It will be more about hardening and configuring what you have (which is hard and slow and boring) vs. reaching for some shiny new product that will solve all your issues
Security Consult with Michael retweeted
I would strongly consider uninstalling any third party js right now if I were you. Especially if it comes from a startup.
Analytics, monitoring, etc are all massive site takeover risks. If you use a tracking script from a third party SaaS, then if they get hacked the hackers have total control over your site too.
This is what took down Polymarket today. They used a tiny script from a SaaS that tracks page load speed. That company got hacked, and the hackers subsequently stole millions from Polymarket users.
If you want to use analytics safely, I would use a product that lets you pin the tracking script and control when it changes. Most of the mature products support this, e.g. Sentry, Amplitude, PostHog, Mixpanel, Heap. If not, you need to trust the company behind it a lot...
Railway got hacked last week. Railway! That's a very competent team, with particularly strong infra chops. The agent swarms are on another level.
A typical analytics company is nowhere near as sophisticated. You should ask yourself: do I trust this company's security more than Railway? I was an analytics CTO in a past life, and I will be the first to admit: we had some great people but we were not on this level.
We (Detail) just uninstalled our session replay, which was a product I loved but is not worth the risk right now.
I hate to write this because I spent a good chunk of my 20s benefitting from product teams taking a chance on a nothing startup and installing our js on their site. But in the past two weeks this risk vector has exploded. It's better for the ecosystem if we move away from third party js as fast as we can.
Security Consult with Michael retweeted
AO3 is doing what every security engineer dreams of being able to do after a breach. finding evidence of a breach and getting to say “we are taking everything offline for 2-4 WEEKS to ensure it’s completely clean and do a full investigation” is unheard of with for-profit companies.
Security Consult with Michael retweeted
I have been debating for months with fellow security people who say AI hacking will not be a big deal.
My argument has consistently been that so much of the fruit is not just low-hanging, but sitting on the ground. That the internet is powered by fragile software, managed by regular people who make mistakes. And that extraordinary harm can come from exposing our flawed systems to more scrutiny.
This is a case in point. Billions in losses from one guys laptop.
How many similar situations do you think there are in the world? Across all our systems globally. That have trillions of dollars and in fact the entire economy running through them?
And that’s just misconfigurations! That’s not even counting AI finding new stuff.
The only reason things were stable before is because there were a tiny number of attackers and far too much surface area to cover. AI just changed all the math.
This has only just begun.
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
Security Consult with Michael retweeted
If you’re a backend developer working on KYC, bookmark these resources.
Dojah documentation — identity verification integrations
Prembly documentation — identity and compliance APIs
Smile ID documentation — identity verification integrations
NDPC — data protection requirements
OWASP API Security Top 10 — API security risks
NIST Digital Identity Guidelines — identity proofing and authentication
Study document verification, liveness detection, consent, audit logs and secure handling of identity data.
A working verification API is only one part of a reliable KYC system.
Security Consult with Michael retweeted
I want my company @CybarikGlobal to grow and expand across the UK market. In the coming years, I want us to be able to give people work sponsorship. I am seriously putting in the work and I know it will happen, someday 🙏🏾
Security Consult with Michael retweeted
If you're a cybersecurity professional with 4-6 years of experience and you're earning less than ₦1.5M per month, this post might be for you.
Before anyone attacks me, hear me out.
A few days ago, I came across a Security Engineer job description that required:
• 5+ years of experience
• Cloud security knowledge
• Vulnerability management
• Security operations experience
• Compliance exposure
• Incident response skills
The salary?
Far below what I'd expect for someone with those responsibilities.
And that's when I realized something.
Many professionals don't actually know what their skills are worth in today's market.
Some are underpaid by 30-50%.
Others are applying for roles without realizing they're qualified for positions paying significantly more.
The reality is that companies don't pay for years of experience.
They pay for impact.
Can you secure critical systems?
Can you reduce business risk?
Can you help the organization avoid costly security incidents?
Can you support compliance and customer trust?
Those are the things that increase your market value.
So I decided to share a tool that estimates what a role should realistically pay based on the job description.
Simply paste the JD and it gives you an estimated salary range.
You might be surprised by the results.
link: michaeladeyanju.com/salary-c…
If you try it, come back and tell me:
Were you underestimating your value, or overestimating it?
Security Consult with Michael retweeted
Patience is indeed key in this game…
Aradel has successfully consolidated after the acquisition following a long wait!
More to come… 😊
Security Consult with Michael retweeted
I had multiple SIM cards before I had any certification.
Not for what you're thinking. For midnight data.
There was a boy in Iyesi, Sango Otta, who couldn't afford to be online during the day. So I stacked MTN SIMs and waited for midnight bundles. While most people slept, I was downloading courses, watching tutorials, breaking things and fixing them, teaching myself cybersecurity one cheap-data night at a time. By morning the bundle was gone, and I'd be counting down to the next midnight.
Nobody handed me a roadmap. No mentor, no paid bootcamp, no budget for certifications. Just curiosity, a laptop, and a stubborn belief that where I was from didn't have to decide where I was going.
Fast forward, I now work in cybersecurity, and I founded @CyberProwess: a community built for the exact person I used to be.
And now we're opening the doors.
🚀 The @CyberProwess July Cohort is here.
This is for the ones learning on borrowed Wi-Fi and midnight bundles. The ones with the mind for this field but not the money for courses that cost more than their family earns in months. No fancy budget required, just bring the curiosity and the stubbornness. We'll handle the roadmap I never had.
What you get:
✅ Structured cybersecurity training from the ground up
✅ Mentorship and a community that actually answers your questions
✅ Hands-on practice, not just theory
✅ Certificate of Completion
The boy who waited for midnight grew up. Now he's making sure the next one doesn't have to wait alone.
📅 Cohort starts July 2026
🔗 Join the waitlist here 👉 cyberprowess.org/training
⏳ Spots are limited — 100 seats only.
Tag someone who needs to see this. 👇
#Cybersecurity #CyberProwess #TechInNigeria #SangoOtta #CyberSecurityTraining
Security Consult with Michael retweeted
Someone taught you. Now it's your turn. 🎤
CyberProwess is looking for volunteer speakers for our monthly cybersecurity webinar series.
Share your expertise. Inspire the next generation.
Apply 👉 forms.gle/3gkmykoau8AXZhRc7
#Cybersecurity #InfoSec
Security Consult with Michael retweeted
Big welcome to our newest HackerOne Brand Ambassadors 🌍
🇺🇸 United States
🇦🇺 Australia
🇲🇽 Mexico
🇮🇱 Israel
🇹🇷 Turkey
Plus new HackerOne clubs launching in 🇦🇩 Andorra, 🇦🇹 Austria, and 🇦🇪 UAE.
The global security researcher community keeps growing. #TogetherWeHitHarder
Security Consult with Michael retweeted
🚀 One Day to Go and AWS for Cybersecurity is LIVE
One session.
New insights.
Real conversations around technology and security
📅 Friday, May 29, 2026
⏰ 7:00 PM WAT
📍 Google Meet
See you tomorrow, builders 🔥
🔗 linktr.ee/aws_sbg_futa
What's AWSecurity without a partnership?
Builders, It's you and @hacktheboxondo this month!
Together, we will using AWS to bring practical cybersecurity insights to life
Don't wait until it's too late
Register here 👇
linktr.ee/aws_sbg_futa
Security Consult with Michael retweeted
10 platforms to sharpen your cybersecurity skills:
1. Hack The Box
2. OverTheWire
3. TryHackMe
4. TCM Security
5. PentesterLab
6. CyberSecLabs
7. Offensive Security (PWK)
8. HackThisSite
9. VulnHub
10. Immersive Labs
Hands-on practice is where real skills are built.
Level up
Security Consult with Michael retweeted
EXCITING News, Builders
AWS for Cybersecurity just got bigger!
If you haven't signed up yet, this is for you.
Whether you are a software dev, pro pen tester, you don't want to miss this
Register Now
Here 👇
linktr.ee/aws_sbg_futa
Security Consult with Michael retweeted
🚨 WE'RE HIRING
Cybersecurity Instructors
(Cloud Security & Ethical Hacking)
📍 Remote-First | Contract
🔹 3+ years experience
🔹 Cloud or Pen Testing skills
🔹 Teaching experience is a plus
📩 Apply:
[email protected]
Subject: Cybersecurity Instructor – Your Name
Security Consult with Michael retweeted
Hackrowd Technology is here.
Cybersecurity. Cloud. Software. Education.
Built in Lagos. Built for Africa. Built different.
🌍 hackrowdtech.com
#Cybersecurity #TechInAfrica #HackrowdTechnology #InfoSec #LagosTech
Security Consult with Michael retweeted
Over the weekend, something powerful happened.
Curious minds gathered. Real conversations happened. Connections were made.
Hack The Future 1.0 was a success and this is just the beginning.
More is coming.
#HackTheFuture #CybersecurityNigeria
