Got My First Project and Immediately Stumbled over a Pebble (a Little Story of My Personal Experience) 1983

SilverSworntoWrite, 1 y.

- Realist -

2 min read.

A few days ago I received an update about my application for an online project. It was midnight, and I was in my bed when I decided to check my Email to see if there is any new mail stuck in the spam box. Unexpectedly, there were two mails from a hiring company stated that they approved my application and asked me to follow a training course. I supposedly had to be excited because not only it was the first time I got into a project, but also the first time I applied for something and I actually passed. Imagine that you have been struggling to find a job for months and then one day you received a notification that you are now a part of the (temporary) team. Instead, I was worried because the Email was sent a day ago and I lost it when I could not access the course. "Have they removed me because I was late?" I thought whilst holding back my tantrum. In a heavy heart, I submitted into failure as I prepared to dive into slumber. In my closed eyes, I began to fall in denial that I was busy perfecting my portfolio (that was the truth anyway, and that was frustrating because my laptop kept lagging) and caused me to miss the mails. Five minutes, ten minutes, nothing happened. I could not sleep. The thought of my incompetence filled my head. Even my eyes were in searing pain, my heart danced in restless rythm. Surrendering, I opened my eyes and my laptop for once again. This time, I went to see my most trusted companion that always stands by the line, ChatGPT. Why would I decide to chat with an AI? Well, AI does not have feelings. Therefore, I do not need to feel bad to rant to it. Moreover, it gives me suggestions which is more useful than mere sympathy. And Gepetto (the name I assign to it) gave me a suggestion if I could find a contact to the company and send a message, asking if they would reconsider to accept me back. I thought it sounded like a beg, but it would be better to try than to completely gave up without a fight. Then a few days later, one of my messages reached someone, who then informed me about where to ask for help. Long story short, I finally reached out to the support team. And with a little nudge from them (and the fact that I had already calmed down), I finally able to proceed with the project. Turned out they had never removed me. It was indeed just my incompetence that makes every minor problem becomes a big deal. Although I must admit that the adrenaline was real. My regrets, my impulsing bloodstreams, it all brought down in one night. Now that everything is under control, I have to say my greatest gratitude to whoever person or team who had decided to help me at the first time. It might be just a small act, but with their help, I could get out from the situation, in which was a big matter to me. Wherever they are, I hope they have a great life. Why would I share such story? I have no idea. I thought it could inspire somebody out there that your decision to help someone, no matter how small you may think it is, means greatly to them (and it might be a lesson to me too, that I have to be more attentive.) Thank you for reading.

Moroccan cybersecurity dangerously undermined by successive attacks 256

Aziz Daouda, 2 d.

- Politics - Technology - Science -

3 min read.

Since April 2025, Morocco has been facing a series of major cyberattacks claimed by a collective of hackers allegedly Algerian, named "JabaRoot DZ." These cyberattacks have targeted key economic and administrative institutions, notably the Ministry of Employment, the National Social Security Fund (CNSS), and more recently the Ministry of Justice, as well as platforms related to land registry and property conservation. What is clear, let’s say it outright, is that Algeria does not possess the technological power or expertise for such operations. It is highly likely that its services call upon "skills," notably from Eastern Europe, to attack the Kingdom’s interests in its ongoing global war against its "classic enemy." If this hypothesis proves true, the question would then be who else might have the hacked information and for what purpose. The first intrusion, which occurred in early April 2025, began with the hacking of the Ministry of Employment’s website and quickly extended to the CNSS database. This attack led to the leak of thousands of sensitive documents, exposing the personal information of nearly two million employees and the administrative data of about 500,000 Moroccan companies. Among the leaked data were pay slips detailing names, social security numbers, salaries, and sometimes identity card numbers of very important personalities and leaders of Royal Air Maroc, Attijariwafa Bank, Banque Centrale Populaire, and the Mohammed VI Investment Fund. Less than two months later, in June 2025, JabaRoot DZ claimed a new "large-scale" cyberattack against the National Agency for Land Conservation, Cadastre, and Cartography (ANCFCC). Although the ANCFCC denied any direct intrusion into its servers, it was revealed that the vulnerability originated from an electronic platform used by some notary offices for archiving land documents. The hackers claim to have obtained about 4 terabytes of data, including millions of land titles, contractual documents, copies of identity cards, passports, as well as banking documents and information concerning high-ranking officials and public figures. This leak led to the temporary shutdown of the platform by the ANCFCC for security reasons. The hackers justify these attacks as retaliation for alleged Moroccan hacking attempts against Algerian institutions, notably the Twitter account of the Algerian Press Agency (APS). They also threatened further actions in case of future attacks against Algerian interests. These events occur in the context of geopolitical tensions between Morocco and Algeria, exacerbated by recent developments related to the Sahara issue and regional rivalries; Morocco has been recording victory after victory at a rapid pace. Algeria, in its official and unofficial media, no longer hides and even implicitly claims responsibility for the hacking, ignoring that this amounts to a form of state terrorism. These cyberattacks have had serious consequences: they have eroded citizens’ trust in digital public services, increased the risks of identity theft and banking fraud, and damaged the reputation of the affected companies. The Moroccan government has condemned these acts as "criminal" and announced measures to strengthen cybersecurity while launching internal investigations. The series of attacks especially highlights major vulnerabilities in the cybersecurity of Moroccan institutions. The massive centralization of sensitive data on single platforms and the creation of junctions between multiple actors and platforms facilitate things for citizens and institutions in the context of digitalization, but also make it easier for hackers to gain massive access in case of a breach. It is therefore crucial to thoroughly and promptly review the national data protection strategy. To better distribute its data and strengthen its security, Morocco could adopt several complementary strategies, relying notably on the 2030 National Cybersecurity Strategy and international best practices. It should likely avoid excessive centralization by distributing sensitive data across multiple secure systems, segment networks to limit lateral movements by hackers, and use data transmission techniques through several distinct channels to reduce the risk of simultaneous theft. Morocco must also integrate decentralized cybersecurity solutions based on blockchain and collective intelligence, establish a national sovereign cloud with local hosting and end-to-end encryption guaranteeing the protection of critical information. Moreover, the country should develop an agile and adapted legal framework, build a national pool of qualified cybersecurity professionals through specialized curricula and certifications, and establish a high-performance Security Operations Center combining advanced detection tools and local teams capable of managing threats specific to the Moroccan context. A higher cybersecurity school, where carefully selected students—true specialists—would be trained, could be a major strategic advance guaranteeing both competence and independence in this field. Faced with rising cyber threats, it is urgent for Morocco to adopt a proactive and innovative cybersecurity policy based on a decentralized technical architecture. Strengthening regional and international cooperation is not a luxury here. The real-time exchange of critical information is crucial; as is encouraging public-private collaboration through threat intelligence-sharing platforms to anticipate and respond quickly to incidents. Today, it is clear that many claim to master the issue, offering services that will soon expose their limits and incompetence. Administrations and companies must be very cautious before engaging or hiring skills in this very sensitive domain. This sphere relies on agile governance, the development of human skills, and active cooperation at national and international levels. An integrated approach is essential to build a resilient, sovereign cyberspace capable of supporting the country’s ambitious digital transformation while effectively protecting its security, institutions, citizens, and economy.