InfoSecBulletin Cybersecurity for mankind
bdNOG 20th conference successfully held in Sylhet with huge number of participations from home and abroad. The 4 days conference include technical session, keynote speech Q&A and so on Co-hosted by Internet service provider of Bangladesh (ISPAB).
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
Google Search Results Reportedly Show Claude AI Shared Chats
On the title “Optimizing DNS Performance in Kubernetes: Challenges and Best Practices” Md Arif Hossen from MetaHeed Limited said, Optimizing DNS performance in Kubernetes is vital for effective service discovery among microservices. Issues like DNS latency, high query loads, and bottlenecks in kube-dns/CoreDNS can hinder application performance. He emphasizes the importance of caching, node-local DNS, and tuning CoreDNS for larger clusters. Implementing autoscaling, minimizing noisy workloads, and monitoring DNS queries can greatly improve reliability. Following these best practices ensures a robust and high-performance Kubernetes environment.
Joyeeta Sen Rimpee from BTCL discussed major technical challenges in Universal Acceptance (UA) and proposed practical solutions. She urged updating IDN validation with better regex and input methods, improving DNS with effective Punycode encoding, and fully supporting EAI email by enhancing SMTP, IMAP, and POP systems. Additionally, she suggested using homoglyph-detection tools for security and performing thorough UA readiness testing on software.
On the topic titled “Offensive Operations: The Anatomy of a Network Takeover” Shahee Mirza, BEETLES Cyber Security insightfully presented how the hacker finds the vulnerability in a system and taking advantages of those. He showed with diagram how a threat actor uses only a single printer or WIFI to infilter the whole environment.
He outlined key defensive measures, including strict guest Wi-Fi segmentation, enforcing least privilege with MFA and secured jump hosts, and hardening Active Directory. He emphasized centralized, immutable logging with rapid alerting, along with EDR and network detection to spot anomalies. He also recommended strong egress controls, DLP monitoring, and regular Red Team exercises to simulate and validate real attack paths.
Shaila Sharmin, Prime Bank presented the journey of DNSSEC implementation in prime bank for the first time in BFSI sector in Bangladesh. She said, DNSSEC is essential for financial institutions and critical infrastructure as it prevents DNS hijacking and cache poisoning, ensuring secure and authentic DNS responses. This protection is crucial for online banking and payment systems, reducing fraud and credential theft by blocking redirection to malicious sites. It also strengthens national cyber-resilience, aligns with global standards, and minimizes service disruptions and reputational risk.
On the title “A Day in the Life of IPv6 Scanning” Dr. Yoshinobu Matsuzaki, IIJD showcases large-scale global measurements that reveal how IPv6 networks behave in the real world. It provides insights into routing, security exposures, and adoption trends across modern internet infrastructure.
There were many other topics and a 3-day long technical session with the participants.
