InfoSecBulletin Cybersecurity for mankind
BGD e-GOV CIRT is excited to announce the Financial Institutions and Critical Information Infrastructure (CII) Cyber Drill 2024, designed for Bangladeshi cybersecurity professionals. This event aims to enhance participants’ skills against evolving cyber threats through realistic scenarios and challenges. Participants will analyze incidents and related artifacts to find solutions, with necessary materials and access provided.
Information those who want to participate:
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Each team may consist of 5 members from same institution.
Prior to registration, team must pay a registration fee – BDT 10,000 (Ten Thousand).
Participants are free to use any tool they choose.
Participants must not seek help from third-parties for solving Cyber Drill problems.
Violation of organizer’s terms will terminate the player and/or team from the competition.
Registration will close on October 20, 2024
Pre-selection event will be online on October 26, 2024
Thirty teams will take part in an on-site cyber drill on November 9, 2024.
Rules of Engagement:
1. All participants shall be registered in the registration platform, the registration guideline is available at https://www.cirt.gov.bd/cyberdrill2024
2. A team must have 3 to 5 members from the same organization, and all participants must compete as part of that team.
3. Each team must have an organization-appointed leader and an appropriate team name.
4.All members can submit flags, but each challenge has a limited number of attempts.
TeamName_ParticipantName:
5. Participants have the freedom to use any tool including those available on the internet.
6. Participation from outside the country is not allowed.
7. It is strictly forbidden to perform any kind of Brute force, Denial of Service or any Other unwanted and disruptive actions against the drill platforms, servers or associated infrastructure.
8. Any activities or actions that would interfere, obstruct, or disturb other teams participants and event organizers are strictly prohibited.
9. Organizers may provide hint(s) on scenario basis, it will be commonly distributed to every participating teams. But seeking or exchanging flags, write-ups, solutions, or hints for the challenges during the cyber drill, either from or with other participating teams or external entities, is strictly prohibited.
10. Violation of the organizers’ terms and condition may result in the disqualification of the team from the competition. In such cases, the organizers reserve the right to notify the participating organization about the violation.
11. Teams scoring 40% or higher of the total points will receive a certificate of successful participation.
12. Organizers reserve the right to make necessary changes to the event rules and guidelines. Any updates will be communicated through our official website.
Bangladeshi 32.4% government websites face cyber attack: NAS report
