Monday , October 5 2026
HackerOne

400 Hackers, Real Attacks, Zero Myths
HackerOne Bug Hunt 2026 Wraps Up in Dhaka

HackerOne Bug Hunt 2026 ends successfully, a major information security conference in Bangladesh taking place on 10 January 2026 at the National Science and Technology Complex in Dhaka.

The 2026 conference provided an impactful, interactive, and community-focused experience which leading the platform a exceptional one for ethical hackers, vulnerability researchers, cybersecurity pros, developers, and students in Bangladesh.

Citrix NetScaler SAML 0-Day Flaw Under Attack

Citrix has put out emergency security updates for a NetScaler SAML flaw that hackers are using. Known as CVE-2026-88779, this...
Read More
Citrix NetScaler SAML 0-Day Flaw Under Attack

Major Danish university breached, 200,000 users at risk

Hackers got into the identity and access management system at the Technical University of Denmark (DTU) and downloaded a lot...
Read More
Major Danish university breached, 200,000 users at risk

Microsoft’s X account hijacked to promote Clippy crypto scam

Microsoft's official X account was taken over to promote an unapproved Clippy-themed cryptocurrency. The tech giant’s X account, with 13...
Read More
Microsoft’s X account hijacked to promote Clippy crypto scam

Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking

CPanel has put out security updates to fix three problems in cPanel & WHM. These problems could let attackers take...
Read More
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking

Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore

Nearly 100,000 Bee Cheng Hiang customers had their email addresses leaked when an employee used an AI tool to generate...
Read More
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore

Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws

Hackers to exploit a flaw in Zimbra mail servers that are connected to the Internet. They send special emails that...
Read More
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws

Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws

Google has said that hackers are using two serious Citrix NetScaler security holes to get root access, set up hidden...
Read More
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws

CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is alerting people about a major flaw in MikroTik RouterOS. This could...
Read More
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks

Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People

Apple has launched iOS 26.7.1 and iPadOS 26.7.1 to fix a serious zero-day flaw that it believes might have been...
Read More
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People

JadePuffer Agentic AI targets and destroys Azure’s cloud resources

The JadePuffer ransomware group is attacking Azure users with agent-based attacks that gather information, steal passwords, and damage key components. The...
Read More
JadePuffer Agentic AI targets and destroys Azure’s cloud resources

The day-long conference brings together over 400 participants who are immersed in highly technical and practical sessions centered around real-world attack scenarios, contemporary exploitation methods, software supply chain security, and implementable defensive tactics.

Several speakers presented actual vulnerability findings from real systems, demonstrating how attackers identified weaknesses, gained unauthorized access, escalated privileges, and ultimately compromised target environments followed by responsible mitigation and defense strategies.

Speakers explained real-world invasion paths, sharing decision-making processes, tools, exploitation chains, and lessons from bug bounty and penetration testing efforts. These sessions offered unique insights into modern attack methods beyond textbooks and labs.

Nazmul Hossain Nirab from TechnoNext discussed how attackers can compromise software supply chains by targeting the build process. Syed Faraz Abrar from Zellic explained the journey from finding vulnerabilities to discovering a zero-day in the Linux kernel, sharing insights on kernel exploitation.

Mohammad Abdullah from Augmedix talked about IoT and hardware security challenges, emphasizing security at the edge. Kazi Ashikur Rahman from Cantaloupe warned that a single misconfigured container can lead to serious Kubernetes breaches, underlining the importance of DevSecOps practices.

MD. Gollam Rabbi from Beetles Cybersecurity ltd explored Android security, highlighting new threats in mobile systems. Together, these talks made Bughunt 2026 a significant event filled with valuable security insights.

Eftasib Araf Depro from Hidden Investigations has become the BugHunt 2026 Individual Competition Champion.

“HackerOne Bug Hunt has always been about real impact,” said Syed Mushfik Hasan Tahsin, Event Director of HackerOne Bug Hunt 2026. “This year, we focused on showing how real systems are actually compromised and, more importantly, how they can be defended. The growth in skill, confidence, and collaboration within our community was clearly visible throughout the event.”

The conference welcomed participants from diverse backgrounds, including:

• Bug bounty hunters and penetration testers
• Software engineers and DevOps professionals
• Cybersecurity students and academic researchers
• Industry leaders and community organizers

The engaging atmosphere promoted knowledge exchange, networking, and mentorship, enabling newcomers to gain insights from seasoned professionals while nurturing significant collaboration within Bangladesh’s cybersecurity domain.

Since its launch in 2023, HackerOne Bug Hunt has progressively transformed into a reliable platform for ethical hacking and hands-on security education. The triumphant completion of the 2026 edition signifies yet another milestone in bolstering Bangladesh’s standing in the international cybersecurity and bug bounty arena.

HackerOne Bug Hunt 2026 demonstrates how ethical hacking, community teamwork, and practical learning can address increasing cybersecurity challenges. The attacks were real, and the lessons learned were impactful.

Related news:

How Millions of Illegal IMEI Phones Infiltrated Bangladesh’s Networks
Bangladesh now 3rd largest global source of DDoS attacks in 2025 Q3
FortiWeb Devices in Bangladesh Exploited via CVE-2025-55182 to Deploy Sliver C2

Check Also

bdNOG21

AI, IPv6, and Cybersecurity Take Center Stage at bdNOG21 Conference in Dhaka

Bangladesh Network Operators Group (bdNOG) successfully hosts its 21 workshop and conferences at Dhaka. The …