National

BGD e-GOV CIRT officially collaborated with “Have I Been Pwned”. It is the 43rd government onboarded to Have I Been Pwned’s free gov.t service. For this collaboration CIRT now will have full access to query all their government domains via API and monitor them against future breaches. TroyHunt site said, …

As AI fuels in everything, cyber-criminal or bad actors also leverage the tools to intensify their attack path. Statistics shows nearly 30% of all reported scam victims globally started on social media platforms. In case, when any social media related crime is investigated, it is, in final, difficult to sort …

Md. Arman Hossain, 22, has been arrested. He is a student of Computer Science and Engineering (CSE) at a private university. He was caught in a raid in the Manikdi area near the Cantonment Police Station on Tuesday (May 5). The CID’s Cyber Police Center (CPC) shared this news on Thursday …

A new app dubbed ‘NB” TV is fast spreading in Bangladeshi but creating panic as well. By using the app some people have automatically lost money in different locations in Bangladesh. While installing, the app takes control over the smartphone and transfers money as its maker instructs. The Cyber ​​Unit of …

Cyber Threat Intelligence Unit of BGD e-Gov CIRT has found many suspicious files on Bangladesh government infra like gc.txt and uname.txt. Hackers use such files to check unauthorized write access to web servers. The found artifacts match signs of a big global web defacement campaign that hit Magento systems, first …

There has been a sharp rise in malware linked to the Nymaim / Avalanche loader in Bangladesh. CIRT BD observed over 27,000 malware events, which means bad actors are trying to infect systems and there is ongoing contact with the botnet. Threat Overview Nymaim (also known as Gozi ISFB Loader) …

Bangladesh Bank Unveils Cybersecurity Framework, V 1.0. The purpose of this framework is to ensure Cybersecurity governance and build better resilience against cyber threats. The framework is based on NIST principles but extends into seven functions: Preparation & Govern, Identify, Protect, Detect, Respond, Recover, and Reporting. This alignment ensures that …

An India-nexus threat actor operated an extensive cyber espionage campaign deploying BurrowShell and Rust-Based RAT, targeting government entities and critical infrastructure operators in Pakistan and Bangladesh. Arctic Wolf has been tacking the campaign conducted by “SloppyLemming” over the last 12 month. Arctic Wolf said, the campaign impersonated Pakistani and Bangladeshi …

Brotecs, a leading in R&D company introducing a cyber security products “iCyberHunt” in Bangladesh market. iCyberHunt is an AI-powered security platform delivering Zero Trust access, threat intelligence, and end-to-end protection for networks, cloud, endpoints, and IoT—ensuring uninterrupted, scalable defense. Its enterprise-grade feature protects the entire digital ecosystem-network, endpoints, users, and …

A total of 35 unique IP addresses have been identified exploitable via n8n instances (CVE: 2026-21858). BGD e-GOV CIRT advisory said, these IP address seems to be demonstrating active exploitation activity, indicating real-world targeting and compromise of vulnerable deployments. Affected versons: • n8n self-hosted instances running versions 1.65.0 to below …