Warren Rohner @warrenski

🇿🇦 A threat actor operating under the name “Nullsec” is claiming responsibility for compromising State Information Technology Agency (SITA), the government-owned IT agency responsible for providing technology services to multiple South African state institutions. According to the underground post, the alleged leak contains: • names • Gmail addresses • password hashes • plaintext/non-hashed passwords • platform access information The actor also references a downloadable leak package, suggesting the data is being publicly distributed rather than used solely for private extortion. This is particularly significant because SITA plays a critical role in South Africa’s governmental digital infrastructure and supports numerous public-sector services and departments. If authentic, even limited credential exposure tied to SITA environments could create risks including: • government account compromise • credential stuffing across public-sector systems • phishing against officials • lateral movement into connected agencies • intelligence collection operations • impersonation attacks targeting government personnel The mention of both: • hashed passwords • non-hashed passwords is especially concerning because it may indicate: • poor credential storage practices • plaintext credential exposure in logs/configurations • legacy systems • improperly secured exports Another notable detail: the actor specifically references “platform of entry,” which may imply: • initial access vectors • exposed panels • compromised portals • reused credentials • third-party vendor access From a geopolitical and cyber-intelligence perspective, government IT agencies remain extremely high-value targets because they often act as centralized technology hubs connecting: • ministries • citizen services • procurement systems • government email infrastructure • identity systems • interdepartmental platforms Compromising a centralized IT provider can create cascading downstream exposure across multiple agencies. At this stage, the authenticity and scope of the claims remain unverified. Possible scenarios include: • partial credential leak • recycled datasets • old credential dumps • third-party contractor compromise • phishing-derived access • exposed development systems • limited internal panel exposure rather than full infrastructure compromise Still, organizations connected to public-sector ecosystems should immediately review: • password reuse exposure • MFA enforcement • privileged account activity • SSO integrations • VPN access logs • credential rotation policies • exposed admin portals • government contractor access • suspicious authentication attempts This incident also reflects a broader trend: threat actors increasingly target centralized government technology providers because compromising one operational hub can potentially provide access paths into multiple institutions simultaneously. 🇿🇦 #DDW #Intelligence #CyberSecurity #SouthAfrica #SITA #DarkWeb #ThreatIntelligence #GovernmentSecurity #DataLeak #OSINT #Infosec #CyberThreats #CredentialLeak #PublicSectorSecurity

🚨🇿🇦 Alleged data breach of South African Revenue Service (SARS) by Nullsec

@mclaneteitel Another fav of mine is the transition animation between the Hosting and Travelling views on the mobile app.

@abelmike Meanwhile... x.com/brettruganalys…

Brett Igoe @brettruganalyst

7 months ago

When you give away your team’s last penalty of the night …🫣

23 16 329 48K 26

@anton_reshetov In massCode v4, how can we use alternative themes (like Dracula in v3)?

@dineshgovender Only downside is the subscription lock-in

Meet Google Sans Code — the new font meticulously crafted for coders, made by @Google! It blends geometric precision with a touch of calligraphic flair in a fixed-width design that's super easy to read, even at tiny code editor sizes. Say goodbye to squinting and hello to clear, beautiful code! ✨

@ntuli_zebus @Radio2000_ZA I thought I was the only one with this problem, they showing some ancient movie instead

@FsTebza @Official_SABC1 I'm so confused, cos they promised us the game and now there's some ancient movie instead!

@aposyofpoppies @SABCPortal @SABC_2 @SABCPlus I thought it was just me, some ancient movie showing on SABC2. I'm so confused!

@TyenteMbuy24323 @SABC_Sport I got the same thing 😭

@DannyvanVuuren @SABC_Sport For some reason SABC2, which was supposed to air the game live, is showing some ancient movie instead, and I'm super confused

@change112 @SABC_Sport Same for me. I'm so confused! What's happening

Months later @canvasandmoresa still hasn't removed me from their SMS spam, and they still haven't provided an opt-out mechanism. 😡

...and another. Unsubscribe! Stop harassing me!

@canvasandmoresa I've never opted in to your SMS marketing, have previously asked to be removed, and am still being sent messages. Your texts need to have an opt-out mechanism!! Fix this

keyboard_arrow_left Previous keyboard_arrow_right Next

@LadyBartinney @PlaisirEstate Thanks for staging such an incredible event today, a perfect day out! This could easily go down as my favourite run ever

@RMBCIB @PlaisirEstate Thanks for staging such an incredible event today, a perfect day out!

@TaxTim What's the best way to notify you of a minor mistake on your website?

@TaylinSimmonds No worries dude, guess there's always the possibility that the government is their employer and membership is one of the perks.

@TaylinSimmonds Nope, the government doesn't subsidise gym memberships. A private medical aid scheme's optional bolt-on product does however cover part of the fee.

Eskom's super pissed that NERSA didn't give them the increase they wanted, taking it out on us #Loadshedding