InfoSecBulletin Cybersecurity for mankind
bdNOG 20th conference successfully held in Sylhet with huge number of participations from home and abroad. The 4 days conference include technical session, keynote speech Q&A and so on Co-hosted by Internet service provider of Bangladesh (ISPAB).
Microsoft’s November 2026 Patch Tuesday addresses 1,093 flaws, with Outlook zero-day
Barracuda ESG flaws exploited, gaining root access
Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
89 New ransomware groups emerge in 2026, claiming over 2,200 victims
Daily Cyber security update for 08.11. 2026
Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction
Daily Cyber security update for 06.11. 2026
On the title “Optimizing DNS Performance in Kubernetes: Challenges and Best Practices” Md Arif Hossen from MetaHeed Limited said, Optimizing DNS performance in Kubernetes is vital for effective service discovery among microservices. Issues like DNS latency, high query loads, and bottlenecks in kube-dns/CoreDNS can hinder application performance. He emphasizes the importance of caching, node-local DNS, and tuning CoreDNS for larger clusters. Implementing autoscaling, minimizing noisy workloads, and monitoring DNS queries can greatly improve reliability. Following these best practices ensures a robust and high-performance Kubernetes environment.
Joyeeta Sen Rimpee from BTCL discussed major technical challenges in Universal Acceptance (UA) and proposed practical solutions. She urged updating IDN validation with better regex and input methods, improving DNS with effective Punycode encoding, and fully supporting EAI email by enhancing SMTP, IMAP, and POP systems. Additionally, she suggested using homoglyph-detection tools for security and performing thorough UA readiness testing on software.
On the topic titled “Offensive Operations: The Anatomy of a Network Takeover” Shahee Mirza, BEETLES Cyber Security insightfully presented how the hacker finds the vulnerability in a system and taking advantages of those. He showed with diagram how a threat actor uses only a single printer or WIFI to infilter the whole environment.
He outlined key defensive measures, including strict guest Wi-Fi segmentation, enforcing least privilege with MFA and secured jump hosts, and hardening Active Directory. He emphasized centralized, immutable logging with rapid alerting, along with EDR and network detection to spot anomalies. He also recommended strong egress controls, DLP monitoring, and regular Red Team exercises to simulate and validate real attack paths.
Shaila Sharmin, Prime Bank presented the journey of DNSSEC implementation in prime bank for the first time in BFSI sector in Bangladesh. She said, DNSSEC is essential for financial institutions and critical infrastructure as it prevents DNS hijacking and cache poisoning, ensuring secure and authentic DNS responses. This protection is crucial for online banking and payment systems, reducing fraud and credential theft by blocking redirection to malicious sites. It also strengthens national cyber-resilience, aligns with global standards, and minimizes service disruptions and reputational risk.
On the title “A Day in the Life of IPv6 Scanning” Dr. Yoshinobu Matsuzaki, IIJD showcases large-scale global measurements that reveal how IPv6 networks behave in the real world. It provides insights into routing, security exposures, and adoption trends across modern internet infrastructure.
There were many other topics and a 3-day long technical session with the participants.
