Friday , August 21 2026
Link3

Hacker claim to breach Link3; 189,000 Users data up for sale

A threat actor claims to have breached Link3, a major IT solutions and internet service provider based in Bangladesh. The data has been put up for sale on a dark web forum.

According to the forum post: Link3 is the largest ISP in the country by active subscribers, offering essential services like fiber broadband and IT solutions for businesses and individuals. It plays a crucial role in Bangladesh’s digital infrastructure and is the only ISP connected to various banks in the nation.

Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution

Splunk has issued security fixes for 17 weaknesses in different apps and add-ons, such as Splunk MCP Server, Splunk AI...
Read More
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution

“Zombie Card” attack revels expired Visa card may be used for contactless payments

Security experts have shown that expired credit cards can still be used. A study from the University of Massachusetts Amherst,...
Read More
“Zombie Card” attack revels expired Visa card may be used for contactless payments

Critical Zimbra RCE Flaw Actively Exploited in the Wild

CERT Polska has alerted that bad actors are actively exploiting a security flaw in Zimbra Collaboration Suite to execute code...
Read More
Critical Zimbra RCE Flaw Actively Exploited in the Wild

Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide 

Operation CameraSwarm compromised 14,500+ Dahua IP cameras mostly in Ukraine and Russia. The operation lasted for at least 35 days...
Read More
Operation CameraSwarm  A single hacker compromise 1400+ Dahua camera worldwide 

Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign

The Cl0p ransomware group has listed over 40 organizations that they say they targeted in a recent attack. This attack...
Read More
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign

Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw

Oracle has put out 943 new security updates in its August 2026 Critical Security Patch Update. These updates fix problems...
Read More
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw

500+ critical infrastructure hit by Medusa ransomware

Medusa ransomware hit over 500 critical infrastructure. The Cybersecurity and Infrastructure Security Agency (CISA) said on Tuesday that the Medusa...
Read More
500+ critical infrastructure hit by Medusa ransomware

Critical WordPress Plugin Flaw Exposes 600,000 Sites to Attacks

A big security flaw in the Forminator Forms WordPress plugin might let unapproved users upload harmful PHP files. This could...
Read More
Critical WordPress Plugin Flaw Exposes 600,000 Sites to Attacks

Apple Patches 28 Security Flaws in macOS, iOS, and iPadOS

Apple has put out security updates for macOS, iOS, and iPadOS. These updates fix 28 problems that could let users...
Read More
Apple Patches 28 Security Flaws in macOS, iOS, and iPadOS

DoNot (APT-C-35) Targeting Bangladesh Military Personnel

Bangladesh's military and defense system is actively under targeted attack linked to DoNot Team, or APT-C-35, as stated in a...
Read More
DoNot (APT-C-35) Targeting Bangladesh Military Personnel

The threat actor claims the breach occurred on July 9, 2025, and affects 189,000 unique users, encompassing both customers and employees. The compromised dataset, which is being offered to sell for $400, allegedly contains a wide range of sensitive personal and account information. The exposure of such detailed information could potentially lead to various malicious activities, including identity theft, phishing campaigns, and unauthorized account access.

The leaked data allegedly includes:

Subscription ID
Phone number
Email address
Full username
Subscription password
Full address
Subscription category and status
SMTP logs and newsletter emails

If the hacker’s claim is true, the exposure of personal information could result in identity theft, phishing attacks, financial fraud, and unauthorized access to private accounts.

Users are urged to change passwords and remain vigilant. The breach also underscores the urgent need for stronger cybersecurity measures within the telecommunications sector in Bangladesh.

(Source: Darkweb, Undercode)

(Media Disclaimer: This report is based on research conducted internally and externally using different ways. The information provided here is for reference only, and users are responsible for reffering and relying on it. Infosecbulletin is not liable for the accuracy or consequences of using this information by any means)

Check Also

PATCHCORD

PATCHCORD Backdoor Targets Telecom and CII In South Asia

A previously undocumented backdoor called PATCHCORD actively target telecom and critical information infrastructure (CII) in …