InfoSecBulletin Cybersecurity for mankind
BGD e-GOV CIRT is excited to announce the Financial Institutions and Critical Information Infrastructure (CII) Cyber Drill 2024, designed for Bangladeshi cybersecurity professionals. This event aims to enhance participants’ skills against evolving cyber threats through realistic scenarios and challenges. Participants will analyze incidents and related artifacts to find solutions, with necessary materials and access provided.
Information those who want to participate:
Shadowserver's data
87000+ Fortinet devices still open to attack?
Gmail Scam Alert
Billions of Gmail users at risk from sophisticated new AI hack
RansomHub Targets Bangladeshi Confidence Group
Hackers using ChatGPT create malware, OpenAI confirm
TrackMan exposes nearly 32 Million Records
CISA WARNS
CISA Warns of F5 BIG-IP Cookie Exploitation for Network Reconnaissance
CVE-2024-9164: GitLab Users Urged to Update Now
CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Patches
Palo Alto Networks issues fix for security flaws, Including CVE-2024-9463
Microsoft October 2024 Patch: 5 Zero-Days, 118 flaw
Each team may consist of 5 members from same institution.
Prior to registration, team must pay a registration fee – BDT 10,000 (Ten Thousand).
Participants are free to use any tool they choose.
Participants must not seek help from third-parties for solving Cyber Drill problems.
Violation of organizer’s terms will terminate the player and/or team from the competition.
Registration will close on October 20, 2024
Pre-selection event will be online on October 26, 2024
Thirty teams will take part in an on-site cyber drill on November 9, 2024.
Rules of Engagement:
1. All participants shall be registered in the registration platform, the registration guideline is available at https://www.cirt.gov.bd/cyberdrill2024
2. A team must have 3 to 5 members from the same organization, and all participants must compete as part of that team.
3. Each team must have an organization-appointed leader and an appropriate team name.
4.All members can submit flags, but each challenge has a limited number of attempts.
TeamName_ParticipantName:
5. Participants have the freedom to use any tool including those available on the internet.
6. Participation from outside the country is not allowed.
7. It is strictly forbidden to perform any kind of Brute force, Denial of Service or any Other unwanted and disruptive actions against the drill platforms, servers or associated infrastructure.
8. Any activities or actions that would interfere, obstruct, or disturb other teams participants and event organizers are strictly prohibited.
9. Organizers may provide hint(s) on scenario basis, it will be commonly distributed to every participating teams. But seeking or exchanging flags, write-ups, solutions, or hints for the challenges during the cyber drill, either from or with other participating teams or external entities, is strictly prohibited.
10. Violation of the organizers’ terms and condition may result in the disqualification of the team from the competition. In such cases, the organizers reserve the right to notify the participating organization about the violation.
11. Teams scoring 40% or higher of the total points will receive a certificate of successful participation.
12. Organizers reserve the right to make necessary changes to the event rules and guidelines. Any updates will be communicated through our official website.
Bangladeshi 32.4% government websites face cyber attack: NAS report
