WhiteHat NG is Nigeria's leading CERT-style Information Sharing and Analysis Center (ISAC). Founded in 2019, it serves as a people's Computer Emergency Response Team, providing cybersecurity advisories, vulnerability disclosure services, and threat intelligence to protect Nigerian cyberspace. WhiteHat NG publishes security advisories about vulnerabilities and threats affecting Nigerian organizations and citizens.

How do I report a security vulnerability to WhiteHat NG?

You can report security vulnerabilities through WhiteHat NG's Vulnerability Disclosure Program (VDP) at whitehat.ng/vdp/report. The platform accepts reports about vulnerabilities in Nigerian digital infrastructure, government systems, and private sector applications. All reports are handled confidentially by trained security professionals who coordinate responsible disclosure with affected organizations.

What types of security advisories does WhiteHat NG publish?

WhiteHat NG publishes four severity levels of security advisories: Critical (immediate action required), High (significant risk), Medium (moderate risk), and Low (minimal risk). Advisories cover topics including software vulnerabilities, malware campaigns, phishing attacks, data breaches, and emerging cyber threats affecting Nigeria. All advisories are available via web and RSS feed at whitehat.ng/advisories.

Is WhiteHat NG affiliated with the Nigerian government?

WhiteHat NG operates as an independent, community-driven cybersecurity organization. While it collaborates with government agencies and private sector partners on security matters, it maintains independence to serve as a trusted neutral party for vulnerability disclosure and security coordination. This independence allows WhiteHat NG to advocate for both security researchers and affected organizations.

How can organizations partner with WhiteHat NG?

Organizations can partner with WhiteHat NG through several programs: becoming an information sharing partner for threat intelligence, participating in the Vulnerability Disclosure Program as a receiving organization, sponsoring cybersecurity awareness initiatives, or contributing to advisory development. Contact partnerships@whitehat.ng or visit the About page for more information on collaboration opportunities.

Advisory: Exploitation of CVE-2023-27532 on Veeam by Ransomware Groups

Estate and Phobos Ransomware Groups have been exploiting the CVE-2023-27532 vulnerability in Veeam Backup & Replication for initial access.

Advisory: Exploitation of CVE-2023-27532 on Veeam by Ransomware Groups

Threat Overview

Estate and Phobos Ransomware Groups have been actively exploiting the CVE-2023-27532 vulnerability in Veeam Backup & Replication software.

Vulnerability Details

Field	Value
CVE ID	CVE-2023-27532
CVSS Score	7.5 (High)
Affected Product	Veeam Backup & Replication

Immediate Actions Required

Patch Immediately: Update Veeam to the latest version
Network Segmentation: Isolate backup infrastructure
Access Control: Restrict access to Veeam management interfaces
Credential Rotation: Change all passwords stored in Veeam

WhiteHat NG Security Advisory