Senior Threat Intelligence Reporter

Daniel Okafor

Daniel tracks ransomware crews, initial access brokers and state-aligned intrusion sets. He previously worked as a SOC analyst and still writes his own detection rules.

105 articlesUpdated 23 Oct 2026

RansomwareNation-state activityDetection engineeringLinkedIn

Articles by Daniel Okafor

NewsCloud & SaaS
Meta Ordered to Pay $25 Billion After New Mexico Court Finds Consumer Privacy Deceptions
A New Mexico state court orders Meta to pay $25 billion for 43 million deceptive trade violations stemming from the Cambridge Analytica data-harvesting scandal.
Daniel Okafor23 Oct 202610 min read
Cyber AttackCloud & SaaS
Operation Cyber Guardian: CSA and IMDA Expose UNC3886 Stealth Espionage Campaign Targeting Singapore Telcos
Singapore's CSA and IMDA disclose Operation Cyber Guardian, evicting APT group UNC3886 after a coordinated cyber-espionage infiltration targeting national telco backbones.
Daniel Okafor21 Oct 202614 min read
ThreatsCloud & SaaSCritical
Critical SQL Injection in IBM Cloud Portal Infrastructure Allowed Database Exfiltration
A critical SQL injection flaw on an enterprise IBM Cloud portal enabled unauthenticated remote attackers to extract backend database records.
Daniel Okafor18 Oct 202613 min read
ThreatsCloud & SaaSHigh
MariaDB CONNECT Storage Engine Flaw Bypassed FILE Privilege and secure_file_priv Controls
Missing authorization checks in MariaDB CONNECT file UDFs allowed authenticated users with basic SELECT permissions to read and write arbitrary server files.
Daniel Okafor18 Oct 202613 min read
ThreatsCloud & SaaSCritical
WordPress REST API Flaw Exposed Hidden and Private bbPress Forum Content to Unauthenticated Scraping
A broken object authorization flaw in the WordPress core REST API enabled unauthenticated attackers to read private and hidden bbPress forum posts.
Daniel Okafor18 Oct 202613 min read
Cyber AttackBanking & Fintech
R3 Artifactory Takeover Exposes Corda Enterprise and Central Bank Digital Currency Supply Chain
A critical default join key flaw in R3's JFrog Artifactory granted full administrative control over 269 repositories, including Corda Enterprise and CBDC builds.
Daniel Okafor18 Oct 202616 min read
ThreatsCloud & SaaSHigh
RubyGems Flaw in Gem Transfer Flow Allowed Organization Admins to Hijack Owner Rights and Evict Founders
A missing authorization boundary in RubyGems.org's gem transfer workflow enabled organization admins to invite attacker-controlled owners and evict founders.
Daniel Okafor18 Oct 202611 min read
NewsIndustrial & OT
SEC Form 8-K Forensics: Global Maritime Shipping Operator Reports Material Port Terminal Ransomware Attack
Global maritime shipping conglomerate files SEC Form 8-K disclosing a material ransomware intrusion freezing container terminal logistics across international ports.
Daniel Okafor7 Oct 20268 min read
NewsCloud & SaaS
Semiconductor Maker's Data Exfiltration Traced to Hijacked Okta SSO Tokens
SEC Form 8-K disclosure details a major semiconductor intellectual property theft incident initiated via corporate SSO session token hijacking.
Daniel Okafor7 Oct 20268 min read
ThreatsCloud & SaaSHigh
Cloudflare Web Application Firewall (WAF) Rule Evaluation Bypass Disclosed in Security Advisory
Cloudflare security advisory details a rule engine normalization defect enabling request smuggling and WAF inspection bypass.
Daniel Okafor7 Oct 20268 min read
ThreatsCloud & SaaSCritical
NVIDIA Triton Inference Server Memory Corruption Flaw Enables Remote Execution in GPU Clusters CVE-2026-34902
NVIDIA Product Security advisory addresses a critical memory corruption defect in Triton Inference Server enabling code execution across enterprise AI clusters.
Daniel Okafor6 Oct 20268 min read
NewsIndustrial & OT
Water Utility Discloses Nation-State Breach of SCADA Gateways in SEC Filing
SEC Form 8-K disclosure details a nation-state intrusion targeting municipal water SCADA gateways and programmable logic controllers.
Daniel Okafor6 Oct 20268 min read
NewsBanking & Fintech
Cloud Identity Theft and S3 Exfiltration Fuel Surge in SEC Cyber Disclosures
SEC Form 8-K disclosures reveal a surge in material cyber incidents driven by cloud identity theft and automated data lake exfiltration.
Daniel Okafor6 Oct 20268 min read
ThreatsCloud & SaaSCritical
AWS S3 Multi-Region Access Point Flaw Enables IAM Signature Version 4 Authorization Bypass CVE-2026-79787
AWS Security Bulletin details an authorization validation defect in S3 Multi-Region Access Point endpoints permitting IAM privilege escalation.
Daniel Okafor6 Oct 20268 min read
ThreatsCloud & SaaSCritical
Zammad Helpdesk Exploit Chain Pairs Session Fixation With Root Escalation for Takeover
Attackers are weaponizing an exploit chain in Zammad helpdesk combining session fixation (CVE-2026-102489) with root privilege escalation (CVE-2026-102490).
Daniel Okafor5 Oct 20268 min read
ThreatsCloud & SaaSCritical
Kiteworks Email Protection Gateway Flaw Lets Unauthenticated Attackers Run Code as Root
Kiteworks fixed a CVSS 10 root code-execution flaw in Email Protection Gateway (CVE-2026-54154) and three 9.8 account takeovers. Upgrade EPG and Core to 9.5.1.
Daniel Okafor4 Oct 20266 min read
ThreatsCloud & SaaSHigh
Citrix NetScaler SAML Overflow Forces Second Round of ADC and Gateway Upgrades
Citrix fixes CVE-2026-88779, a SAML memory overflow that crashes NetScaler ADC and Gateway. Last week's 14.1-73.37 and 13.1-64.23 builds are still vulnerable.
Daniel Okafor4 Oct 20265 min read
ThreatsCloud & SaaSHigh
Microsoft Exchange Flaw Lets Authenticated Users Read Other Mailboxes, Update Reissued
Exchange Server CVE-2026-96940 lets authenticated users read other mailboxes. Microsoft rates it Exploitation More Likely. Install the September 2026 v2 SU.
Daniel Okafor3 Oct 20265 min read
Cyber AttackGov & Defence
Rust-Built Antino Backdoor Hides China-Nexus Espionage C2 Inside Outlook and OneDrive Across Asian Governments
Cisco Talos ties China-nexus UAT-11587 to Antino, a Rust backdoor taking orders via Outlook and exfiltrating via OneDrive, on ~350 endpoints in 8 countries.
Daniel Okafor3 Oct 20267 min read
Cyber AttackGov & Defence
China-Aligned TA419 Impersonates White House and Anthropic Figures to Target AI Experts
Proofpoint: China-aligned TA419 posed as an ex-White House OSTP official and an Anthropic employee to steal AI policy experts' Microsoft 365 sessions.
Daniel Okafor3 Oct 20266 min read
$Rugged DIN-rail industrial protocol gateway device inside an electrical substation with holographic SCADA protocols fracturing under memory buffer corruption$
ThreatsIndustrial & OTCritical
Stack Buffer Overflow in Moxa Industrial Protocol Gateways Enables Remote Device Compromise (CVE-2026-86325)
A critical stack buffer overflow in Moxa industrial protocol gateways allows authenticated attackers to corrupt memory and hijack critical substation controllers.
Daniel Okafor2 Oct 20268 min read
ThreatsIndustrial & OTCritical
Viidure Dashcam App Hardcoded Cloud Keys Expose Global Fleet Telemetry and Firmware
CISA advisory ICSA-26-272-07 reveals permanent hardcoded cloud storage credentials in the Viidure Dashcam app, exposing commercial fleets to full takeover.
Daniel Okafor2 Oct 20268 min read
ThreatsIndustrial & OTCritical
MikroTik RouterOS WebFig Integer Underflow Grants Remote Root Execution
A pre-authentication integer underflow in MikroTik RouterOS WebFig allows unauthenticated network attackers to achieve remote code execution as root.
Daniel Okafor2 Oct 20268 min read
Cyber AttackGov & Defence
International Law Enforcement Operation Dismantles KillSec Ransomware Syndicate, Seizing 110TB of Stolen Data
A multinational law enforcement sweep led by German, Spanish, and Romanian police has dismantled KillSec, arresting three operators and seizing 110TB of data.
Daniel Okafor2 Oct 20268 min read