Sunday , March 16 2025

EC summoned Lands Ministry’s IT team and vendor intelligence clearence report

Election commission (EC) source said, On 5 October (Thursday) Election commission of Bangladesh (EC) sent a letter to the secretary of Land ministry where EC said to form a committee to investigate the matter.

EC also said, The intelligence team clearance report of  IT team and vendor of land ministry who are related to verify NID information must be submitted to EC.

Researcher found non protected database form ESHYFT containig 86000 records

Cybersecurity researcher Jeremiah Fowler found and reported a non-password-protected database with over 86,000 records belonging to ESHYFT, a New Jersey-based...
Read More
Researcher found non protected database form ESHYFT containig 86000 records

CVE-2024-55591 and CVE-2025-24472
New SuperBlack ransomware exploits Fortinet flaws

Forescout Research- Vedere Labs identified a series of intrusion based on two Fortinet vulnerabilities which began with the exploitation of...
Read More
CVE-2024-55591 and CVE-2025-24472  New SuperBlack ransomware exploits Fortinet flaws

CVE-2025-25291 & CVE-2025-25292
Attention! GitLab Patched Critical Authentication Bypass Flaws

GitLab has released versions 17.9.2, 17.8.5, and 17.7.7 for its Community and Enterprise Editions to fix security vulnerabilities, including a...
Read More
CVE-2025-25291 & CVE-2025-25292  Attention! GitLab Patched Critical Authentication Bypass Flaws

CVE-2025-20138
Cisco released High Security Alert for IOS XR Software

Cisco has issued a security advisory for a high-severity vulnerability in its IOS XR Software, labeled CVE-2025-20138, with a CVSS...
Read More
CVE-2025-20138  Cisco released High Security Alert for IOS XR Software

400+ IPs Exploiting Multiple SSRF Vulnerabilities

GreyNoise warns of a coordinated increase in the exploitation of Server-Side Request Forgery (SSRF) vulnerabilities across various platforms. "At least...
Read More
400+ IPs Exploiting Multiple SSRF Vulnerabilities

NVIDIA has released update for NVIDIA Riva

NVIDIA has released a software update for Riva to fix security vulnerabilities that could allow privilege escalation, data tampering, denial...
Read More
NVIDIA has released update for NVIDIA Riva

CVE-2025-24201
Apple fixes 0-day exploited in “extremely sophisticated attack”

On Tuesday, Apple fixed a critical zero-day vulnerability affecting nearly all supported iPhones and iPads. The company noted that it...
Read More
CVE-2025-24201  Apple fixes 0-day exploited in “extremely sophisticated attack”

Microsoft’s March 2025 updates fix 7 zero-day, 57 flaws

Microsoft's March 2025 Patch Tuesday update fixes 57 flaws, including seven zero-day exploits, six of which are actively being exploited....
Read More
Microsoft’s March 2025 updates fix 7 zero-day, 57 flaws

Ballista Botnet infects 6000 Unpatched TP-Link Routers

Cato CRTL team said, a new botnet campaign dubbed Ballista target the unpatched TP-Link Archer routers. CVE-2023-1389 is a serious...
Read More
Ballista Botnet infects 6000 Unpatched TP-Link Routers

CVE-2025-24813
Flaw in Apache Tomcat Exposes Servers to RCE

A critical vulnerability, CVE-2025-24813, has been found in Apache Tomcat, which could let attackers execute remote code, leak sensitive data,...
Read More
CVE-2025-24813  Flaw in Apache Tomcat Exposes Servers to RCE

ALSO READ:

Who qualified as top 30 team for the final cyber drill on premise?

Election Commission (EC) has suspended services to the Ministry of Lands after a channel of the chatting app Telegram leaked personal information of Bangladeshi citizens. On that channel, personal information was available with Smart National Identity Card (NID) number and date of birth. After the NID verification service of the Ministry of Lands was stopped, the person’s information is no longer available from that Telegram channel.

In this regard, Director General of National Identity Registration Department AKM Humayun Kabir told reporters, “A two-member investigation committee has been formed with two of our system managers. Apart from this, those who are suspected to have received the information, their service has been stopped.

About taking action against the responsible person or organization, he said, ‘There is maximum system – if those who do software maintenance work, the work may be done by them, if so, then we will recommend to be blacklisted. He should not get a job anywhere in Bangladesh.

Earlier, the Commission had stopped providing NID verification service to the Ministry of Lands last July as well. The EC then relaunched the service after taking into account the public grievances and strengthening the security measures of their website.

Currently 175 government and private institutions are availing NID data verification service from EC server for fixed fee. These organizations use NID data verification services through API provided by EC.

Check Also

“Workshop on Cybersecurity Awareness and Needs Analysis” held at BBTA

A time-demanding workshop on “Cybersecurity Awareness and Needs Analysis” was held on Thursday (December 19) …

Leave a Reply

Your email address will not be published. Required fields are marked *