InfoSecBulletin Cybersecurity for mankind
bdNOG 20th conference successfully held in Sylhet with huge number of participations from home and abroad. The 4 days conference include technical session, keynote speech Q&A and so on Co-hosted by Internet service provider of Bangladesh (ISPAB).
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution
Critical Check Point VPN flaws allow remote code execution attacks
Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks
Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally
CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root
FortiSandbox, FortiOS, FortiProxy ZTNA flaws unveil, while Fortigate firewall actively exploited
On the title “Optimizing DNS Performance in Kubernetes: Challenges and Best Practices” Md Arif Hossen from MetaHeed Limited said, Optimizing DNS performance in Kubernetes is vital for effective service discovery among microservices. Issues like DNS latency, high query loads, and bottlenecks in kube-dns/CoreDNS can hinder application performance. He emphasizes the importance of caching, node-local DNS, and tuning CoreDNS for larger clusters. Implementing autoscaling, minimizing noisy workloads, and monitoring DNS queries can greatly improve reliability. Following these best practices ensures a robust and high-performance Kubernetes environment.
Joyeeta Sen Rimpee from BTCL discussed major technical challenges in Universal Acceptance (UA) and proposed practical solutions. She urged updating IDN validation with better regex and input methods, improving DNS with effective Punycode encoding, and fully supporting EAI email by enhancing SMTP, IMAP, and POP systems. Additionally, she suggested using homoglyph-detection tools for security and performing thorough UA readiness testing on software.
On the topic titled “Offensive Operations: The Anatomy of a Network Takeover” Shahee Mirza, BEETLES Cyber Security insightfully presented how the hacker finds the vulnerability in a system and taking advantages of those. He showed with diagram how a threat actor uses only a single printer or WIFI to infilter the whole environment.
He outlined key defensive measures, including strict guest Wi-Fi segmentation, enforcing least privilege with MFA and secured jump hosts, and hardening Active Directory. He emphasized centralized, immutable logging with rapid alerting, along with EDR and network detection to spot anomalies. He also recommended strong egress controls, DLP monitoring, and regular Red Team exercises to simulate and validate real attack paths.
Shaila Sharmin, Prime Bank presented the journey of DNSSEC implementation in prime bank for the first time in BFSI sector in Bangladesh. She said, DNSSEC is essential for financial institutions and critical infrastructure as it prevents DNS hijacking and cache poisoning, ensuring secure and authentic DNS responses. This protection is crucial for online banking and payment systems, reducing fraud and credential theft by blocking redirection to malicious sites. It also strengthens national cyber-resilience, aligns with global standards, and minimizes service disruptions and reputational risk.
On the title “A Day in the Life of IPv6 Scanning” Dr. Yoshinobu Matsuzaki, IIJD showcases large-scale global measurements that reveal how IPv6 networks behave in the real world. It provides insights into routing, security exposures, and adoption trends across modern internet infrastructure.
There were many other topics and a 3-day long technical session with the participants.
