InfoSecBulletin Cybersecurity for mankind
A threat actor claims to have breached Link3, a major IT solutions and internet service provider based in Bangladesh. The data has been put up for sale on a dark web forum.
According to the forum post: Link3 is the largest ISP in the country by active subscribers, offering essential services like fiber broadband and IT solutions for businesses and individuals. It plays a crucial role in Bangladesh’s digital infrastructure and is the only ISP connected to various banks in the nation.
Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks
Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally
CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root
FortiSandbox, FortiOS, FortiProxy ZTNA flaws unveil, while Fortigate firewall actively exploited
Microsoft Patch Tuesday September 2026 Fixed 973 Flaws Fixed, 2 Zero-Days
A single call: ShinyHunters Gained Access to 6 Million Customers’ Records
The first zero-click worm to spread through WeChat calls across iOS and Android
USA Bimbo Bakeries Confirms Data Stolen in Oracle EBS Zero-Day Attack
The threat actor claims the breach occurred on July 9, 2025, and affects 189,000 unique users, encompassing both customers and employees. The compromised dataset, which is being offered to sell for $400, allegedly contains a wide range of sensitive personal and account information. The exposure of such detailed information could potentially lead to various malicious activities, including identity theft, phishing campaigns, and unauthorized account access.
The leaked data allegedly includes:
Subscription ID
Phone number
Email address
Full username
Subscription password
Full address
Subscription category and status
SMTP logs and newsletter emails
If the hacker’s claim is true, the exposure of personal information could result in identity theft, phishing attacks, financial fraud, and unauthorized access to private accounts.
Users are urged to change passwords and remain vigilant. The breach also underscores the urgent need for stronger cybersecurity measures within the telecommunications sector in Bangladesh.
(Source: Darkweb, Undercode)
(Media Disclaimer: This report is based on research conducted internally and externally using different ways. The information provided here is for reference only, and users are responsible for reffering and relying on it. Infosecbulletin is not liable for the accuracy or consequences of using this information by any means)
