Tuesday , October 27 2026

Bangladesh now 3rd largest global source of DDoS attacks in 2025 Q3

According to Cloudflare’s report, Bangladesh has risen in the 3rd largest global source of DDoS attacks in 2025 Q3. Seven of the top ten sources of DDoS attacks are in Asia, with Indonesia being the highest.

Indonesia has been the leading source since 2024 Q3 and has consistently ranked high in prior years. In 2024 Q2, it was the second-largest source, improving from previous lower positions.

Indonesia has seen a 31,900% increase in HTTP DDoS attack requests in just five years, starting from Q3 2021.

CISA adds PHP2Shell to KEV, PHP Releases New Security Updates to Fix Critical HTTP2Shell flaw

CISA has updated a new alert to reflect the addition of CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities (KEV)...
Read More
CISA adds PHP2Shell to KEV, PHP Releases New Security Updates to Fix Critical HTTP2Shell flaw

Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw

Cloudflare has shared an urgent update to its Web Application Firewall (WAF) rules due to CVE-2026-111497, a Brotli issue. The release...
Read More
Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw

Daily Cyber security update for 26.10. 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Daily Cyber security update for 26.10. 2026

The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours

AI startup Cathedral gained a limited access to internal systems at Anthropic in less than 12 hours, exposing employee information,...
Read More
The Washington Post report  Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours

Daily Cyber security update for 25. 10. 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Daily Cyber security update for 25. 10. 2026

Daily Cyber security update for 24. 10. 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Daily Cyber security update for 24. 10. 2026

PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation

The PHP security team shared ways to protect against a new flaw that lets someone run unwanted code on certain...
Read More
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation

US banks faced unauthorized access by AI agents in customer accounts: Axios reports

Major US banks have detected unauthorized access to customer accounts by third-party AI agents, with some systems taking actions beyond...
Read More
US banks faced unauthorized access by AI agents in customer accounts: Axios reports

Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager

Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated...
Read More
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager

Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed

Hacker offers to sell Rajasthan Government’s Department of Information Technology & Communication (DoIT&C) data in a underground forum. The threat...
Read More
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed

Recent report from Cloudflare

Cloudflare reported, a new DDoS attack from the Aisuru botnet reached 29.7 Tbps, setting a world record. This surpasses the previous record of 22 Tbps, broken in Q3 2025 and mitigated by Cloudflare. It shows that Aisuru conducted a massive network-layer attack, peaking at 29.7 Tbps and around 14.1 billion packets per second, surpassing the previous record of 22 Tbps used UDP “Carpent bombing” method.

29.7 Tbps

In recent times DDoS scandal hit Banglaesh ISP sector. Faiz Ahmad Taiyeb adviser (Ministry of Posts, Telecommunications & ICT) Government of Bangladesh said, The government and Bangladesh Telecommunication Regulatory Commission (BTRC) have received credible information that some companies of Bangladesh Internet Service Providing (ISP) sector are trying to destroy the networks and businesses of rival ISPs through DDoS (Distributed Denial of Service) attacks organized from abroad.

He said, preparations are underway to file legal action and cases against these serious financial crimes. No license will be renewed while the dues are unpaid.

According to the cloud flare Q1 2025 report, business competitors are the number one threat actor behind the attacks (39%), which is similar to last quarter as Q4 2024.

Bangladesh cybersecurity watchdog BGD e-GOV CIRT reports titled “BANGLADESH CYBER THREAT LANDSCAPE, 2024” that in 2024, hacktivists mainly used DDoS attacks to disrupt targeted operations. The frequency of these attacks remained steady throughout the year, with January seeing 13.45 Tbit/sec and December at 15.64 Tbit/sec.

According to published report on (8, November-2024) titled “DDoS Storm Hits Bangladesh: Cyberattacks Surge 105%” Bangladesh was spotlighted as one of the countries experiencing the steepest rise in cyber incidents worldwide, with a reported 105% increase from the second to the third quarter of 2024. This surge in incidents highlights the country’s growing cybersecurity challenges, placing it second only to Japan (108%) and closely followed by France (130%) in percentage growth.

Check Also

Trump

Trump says data centres should pay dividends to local community

US President Donald Trump said on Wednesday that companies ​building data centers should pay a …