RENU-CERT provides a secure environment for collaboration among Uganda's research and education institutions.
Kampala, Uganda
Joined December 2020
- Tweets1.7K
- Following85
- Followers639
- Likes672
Stay composed. Respond with purpose!
At our recent RENU-CERT webinar, Mr. Trevor Omudu had this to say in regards to Incident Response in institutions.
#CybersecurityAwarenessMonth
Cybersecurity is an everyday commitment. 🔐 Here's what Mr. Joshua Nkata had to say at the just-concluded RENU-CERT webinar: Securing our institutions. Don't be the easy target!
#CyberSecurityAwarenessMonth
2
59
🚨 PHP2Shell: CVE-2026-109618 and CVE-2026-109619 are critical PHP flaws that could allow remote code execution. Review your PHP deployments and prepare to apply security updates as soon as available!
huntress.com/blog/php2shell-…
Credential stuffing turns password reuse into a breach. The ICO found attacks on 23andMe ran in waves before a full investigation began. Always protect logins with bot detection, rate limits, breached-password checks and MFA.
ico.org.uk/about-the-ico/med…
1
2
93
Less Access, Less Risk
Give users only the access required for their roles. Limiting privileges reduces the potential damage if an account is compromised.
#Cybersecurity #IAM #LeastPrivilege #AccessManagement
MFA protects accounts by requiring two or more factors:
Something you know — password or PIN
Something you have — phone or security token
Something you are — fingerprint or facial recognition
#Cybersecurity #IAM #MFA
In August 2026, NovaCookies targeted Microsoft 365 users, stealing authenticated sessions to bypass MFA and access their accounts.
Attackers are not always after your passwords—sometimes, they want your session.
thehackernews.com/2026/08/no…
#CyberSecurity #IAM #SessionHijacking #MFA
81M+ Microsoft 365 login attempts over two weeks compromised 78 accounts at 64 organizations.
The gap? Missing or misconfigured MFA. MFA only works when it protects every sign-in flow.
#CyberSecurity #IAM #PasswordSpraying
bleepingcomputer.com/news/se…
3
81
🚨 Attackers don't always need to hack their way in, sometimes, they simply log in. IAM attacks target identities and access controls through stolen credentials, password spraying, credential stuffing, MFA bypass, and session hijacking.
#CyberSecurity #IAM #IdentitySecurity
Access can be managed in different ways: RBAC: Access based on your role. ABAC: Access based on attributes such as location, device or context. Zero Trust: Never trust, always verify.
paloaltonetworks.com/cyberpe…
#CyberSecurity #IAM
5
82
🔐Access management is a security discipline, not just a compliance checkbox. It ensures the right people have the right access to organizational systems and data through authentication, authorization and access controls.
frontegg.com/guides/access-m…
#CyberSecurity #IAM
3
90
Cloud security threats will keep evolving, but our member institutions don’t have to navigate them alone. RENU-CERT supports the R&E community with proactive cybersecurity services.
Know how to reach us before you need us!
cert.renu.ac.ug/
Security Alert: CVE-2026-78145 affects CTFd versions up to 3.8.4 and could enable phishing through an open redirect vulnerability.
Administrators are advised to upgrade to CTFd 3.8.5 or later.
Learn more: rapid7.com/db/vulnerabilitie…
#CyberSecurity
2
89
In March, 2026, attackers exploited a Trivy-linked AWS credential, stealing 92GB from European Commission Europa.eu cloud systems and exposing major supply chain security risks. Please do take a read:
cert.europa.eu/blog/european…
4
92
Mr. William Kibirango shares why adaptability is essential to building resilient organisations in an ever-changing digital environment.
Here's what he had to say:
@RENU_256 #RENUCERTAt10
6
101
Mr. Conrad Mabira reflects on how greater confidence in CERTs is helping institutions become more open to reporting incidents and seeking support when it matters.
@RENU_256 @NITAUganda1 #RENUCERTAt10 #Cybersecurity
6
206
Ms. Pauline Kire highlights the importance of early incident reporting in enabling organisations to respond quickly and limit potential impact.
Here's what she had to say:
#RENUCERTAt10 @RENU_256
Mr. Vincent Mwesigwa highlights the importance of continuously strengthening human capacity to build trusted and effective cybersecurity services.
Here's what he had to say:
@UgCERT #RENUCERTAt10 #Cybersecurity #CapacityBuilding
How did RENU-CERT grow from its early beginnings into the service it is today?
Isaac Newton Wobomba reflected on the journey as we celebrate 10 years of RENU-CERT.
@RENU_256 @NITAUganda1 @UgCERT
#RENUCERTAt10
