Alert

Bangladesh’s military and defense system is actively under targeted attack linked to DoNot Team, or APT-C-35, as stated in a cybersecurity advisory from BGD e-GOV CIRT. This attack aims at Bangladesh military and defense staff using fake documents that look like real info about a high-ranking officer in the Bangladesh …

TP-Link has revealed several serious security flaws in Aginet networking products managed by ISPs. This includes mesh systems, routers, PON devices, and xDSL modems. The flaws might let attackers who can connect to the network get around checks, gain higher access, steal important data, look at device files, and run …

A previously undocumented backdoor called PATCHCORD actively target telecom and critical information infrastructure (CII) in South Asia. According to Acronis Threat Research Unit (TRU), the backdoor is a C/C++ code that gets into systems using specific tricks, like fake VPN installers pretending to be Afghan Telecom (AFTEL) and telecom management …

Fortinet has released fixes for a set of authentication flaws in its FortiWeb, FortiManager, and FortiClient products. It warns admins to update quickly because these systems are sensitive. The severe one, known as CVE-2026-26035, is found in FortiWeb’s login system. It has a CVSS score between 8.8 and 9.8 based …

A data theft plan is stealing information from anonymous users on Salesforce Experience Cloud and ServiceNow customer portals using special tools. The data theft campaign, called City-Forum by the software security company Reco, comes from one server that has attacked many groups around the world. These groups include phone companies, banks, …

Palo Alto Networks shared its security bulletin revealing 11 new issues that impact PAN-OS, the GlobalProtect App, Prisma Access Agent, and Prisma Browser. There is also a monthly update for Chromium. The patch batch covers flaws with information leaks, getting extra system rights, buffer overflow, skipping certificate checks, and bypassing …

Microsoft announced fixes for 394 CVEs on Tuesday, including a serious flaw that has been used by hackers as a zero-day. The security flaw called CVE-2026-68820 is a use-after-free bug in the Ancillary Function Driver for WinSock (afd.sys). This driver works in kernel mode and is essential for the Windows Sockets …

The CISA in the U.S. has added two important SonicWall SMA1000 flaws—CVE-2026-15409 and CVE-2026-15410-to its list of Known Exploited Vulnerabilities after finding they are used in ransomware attacks. SonicWall showed the flaws on July 14, 2026, after checking for active use. The issues impact SMA 6210, SMA 7210, and SMA …

Android users are reminded that a known app store listing can hold a money threat. Researchers found harmful loaders on Google Play that can set up Anatsa, an Android banking Trojan that can put account access in danger. The campaign starts without a clear harmful download. It uses what looks …

The gentlemen ransomware group targets various industries of Bangladesh. In an advisory Bangladesh e-Government Computer Incident Response Team (BGD e-GOV CIRT) warned that the ransomware operates under a Ransomware-as-a-Service (RaaS) model and is capable of rapidly spreading across corporate networks, encrypting Windows and Linux systems, network storage devices and VMware …