Monday , September 14 2026
HackerOne

400 Hackers, Real Attacks, Zero Myths
HackerOne Bug Hunt 2026 Wraps Up in Dhaka

HackerOne Bug Hunt 2026 ends successfully, a major information security conference in Bangladesh taking place on 10 January 2026 at the National Science and Technology Complex in Dhaka.

The 2026 conference provided an impactful, interactive, and community-focused experience which leading the platform a exceptional one for ethical hackers, vulnerability researchers, cybersecurity pros, developers, and students in Bangladesh.

Hackers deploy Casbaneiro Trojan that activates on bank websites

Casbaneiro is going after online banking users by sending fake messages that seem like urgent bills or legal papers. The...
Read More
Hackers deploy Casbaneiro Trojan that activates on bank websites

German police read Signal, Telegram, WhatsApp messages without breaking encryption

German law enforcement agencies are using features built into apps such as WhatsApp to monitor people’s messages without breaking their...
Read More
German police read Signal, Telegram, WhatsApp messages without breaking encryption

Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft

GitLab has released an important security update to fix two serious problems. These issues could allow unauthorized file access and...
Read More
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft

Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution

Palo Alto Networks has revealed a serious flaw in PAN-OS. It may let a remote attacker without a password run...
Read More
Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution

Critical Check Point VPN flaws allow remote code execution attacks

Check Point Software has revealed and fixed two major VPN flaws, CVE-2026-85102 and CVE-2026-85103. Both have a top CVSS score...
Read More
Critical Check Point VPN flaws allow remote code execution attacks

Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks

Cisco has said that a serious security flaw CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being used...
Read More
Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks

Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally

A Russian-speaking hacker has used artificial intelligence like never before. They sent out hundreds of AI agents to find and...
Read More
Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally

CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models

Six Chinese AI companies ran large-scale attacks on American AI models since late 2024, according to U.S. cybersecurity and intelligence...
Read More
CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models

Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day

An unknown security expert called Nightmare Eclipse has drops a new Microsoft Defender flaw called "ShieldCrash" right after Microsoft released...
Read More
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day

cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root

cPanel has shared CVE-2026-67401, a serious SQL injection flaw in EmailTrack. This flaw could allow attackers with permission to take...
Read More
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root

The day-long conference brings together over 400 participants who are immersed in highly technical and practical sessions centered around real-world attack scenarios, contemporary exploitation methods, software supply chain security, and implementable defensive tactics.

Several speakers presented actual vulnerability findings from real systems, demonstrating how attackers identified weaknesses, gained unauthorized access, escalated privileges, and ultimately compromised target environments followed by responsible mitigation and defense strategies.

Speakers explained real-world invasion paths, sharing decision-making processes, tools, exploitation chains, and lessons from bug bounty and penetration testing efforts. These sessions offered unique insights into modern attack methods beyond textbooks and labs.

Nazmul Hossain Nirab from TechnoNext discussed how attackers can compromise software supply chains by targeting the build process. Syed Faraz Abrar from Zellic explained the journey from finding vulnerabilities to discovering a zero-day in the Linux kernel, sharing insights on kernel exploitation.

Mohammad Abdullah from Augmedix talked about IoT and hardware security challenges, emphasizing security at the edge. Kazi Ashikur Rahman from Cantaloupe warned that a single misconfigured container can lead to serious Kubernetes breaches, underlining the importance of DevSecOps practices.

MD. Gollam Rabbi from Beetles Cybersecurity ltd explored Android security, highlighting new threats in mobile systems. Together, these talks made Bughunt 2026 a significant event filled with valuable security insights.

Eftasib Araf Depro from Hidden Investigations has become the BugHunt 2026 Individual Competition Champion.

“HackerOne Bug Hunt has always been about real impact,” said Syed Mushfik Hasan Tahsin, Event Director of HackerOne Bug Hunt 2026. “This year, we focused on showing how real systems are actually compromised and, more importantly, how they can be defended. The growth in skill, confidence, and collaboration within our community was clearly visible throughout the event.”

The conference welcomed participants from diverse backgrounds, including:

• Bug bounty hunters and penetration testers
• Software engineers and DevOps professionals
• Cybersecurity students and academic researchers
• Industry leaders and community organizers

The engaging atmosphere promoted knowledge exchange, networking, and mentorship, enabling newcomers to gain insights from seasoned professionals while nurturing significant collaboration within Bangladesh’s cybersecurity domain.

Since its launch in 2023, HackerOne Bug Hunt has progressively transformed into a reliable platform for ethical hacking and hands-on security education. The triumphant completion of the 2026 edition signifies yet another milestone in bolstering Bangladesh’s standing in the international cybersecurity and bug bounty arena.

HackerOne Bug Hunt 2026 demonstrates how ethical hacking, community teamwork, and practical learning can address increasing cybersecurity challenges. The attacks were real, and the lessons learned were impactful.

Related news:

How Millions of Illegal IMEI Phones Infiltrated Bangladesh’s Networks
Bangladesh now 3rd largest global source of DDoS attacks in 2025 Q3
FortiWeb Devices in Bangladesh Exploited via CVE-2025-55182 to Deploy Sliver C2

Check Also

National Cyber Drill 2026

NCSA opens registration for “National Cyber Drill- 2026”

National Cyber Security Agency (NCSA), under the Information and Communication Technology Division of Bangladesh, has …