InfoSecBulletin Cybersecurity for mankind
A seminar on Continuing Professional Education (CPE) was held at Bangladesh Computer Society (BCS) premises
where three different time demanding topic has been discussed on Friday. Three veteran industry experts discussed various aspects of cyber security in Bangladesh perspective with global commitment.
Microsoft’s November 2026 Patch Tuesday addresses 1,093 flaws, with Outlook zero-day
Barracuda ESG flaws exploited, gaining root access
Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
89 New ransomware groups emerge in 2026, claiming over 2,200 victims
Daily Cyber security update for 08.11. 2026
Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction
Daily Cyber security update for 06.11. 2026
Md. Abul Kalam Azad, Head of Information Security at Eastern Bank Ltd, presented “Don’t Get Hacked: Let AI Guard Your Gate.” The talk focused on using AI to strengthen cybersecurity in finance by tackling rising cyber threats and a lack of skilled professionals. AI boosts security through threat hunting, vulnerability management, and faster prediction of attacks compared to humans. Future uses include Advanced Threat Protection (ATP) and AI-powered WAFs, with AI-driven SOCs improving teamwork and efficiency. In summary, AI offers automated and scalable solutions to combat cyberattacks.
Mohammad Shafiuddin Russel discussed “Incident Management through Playbook Creation & Automation in SOAR”. He emphasized that Incident Management (IM) helps quickly restore business operations after security incidents, identifiable by signs like unusual traffic, system failures, unauthorized changes, and suspicious activities. With SOAR (Security Orchestration, Automation, and Response), organizations can automate tasks using playbooks, improve threat hunting, manage incidents with tickets, and connect to threat intelligence sources like VirusTotal and MISP. SOAR’s architecture, combining tools like Wazuh and EITIx, allows for log collection, correlation, ticketing, and reporting. In summary, SOAR improves incident management speed, consistency, visibility, efficiency in alert handling, and compliance support.
Alin Boby, head of IT Security at Janata Bank PLC, talked about “HNDL: emerging security threats,” a new cybersecurity issue. He said, Harvest Now, Decrypt Later (HNDL) is gaining global attention.” This tactic involves intercepting and saving encrypted data now to decrypt it later, using quantum computing. Current encryption methods are safe from classical computers, but Q-Day, when quantum algorithms like Shor’s can crack RSA, ECC, and Diffie-Hellman, could put decades of sensitive data at risk.
Countries like China, Russia, the US, UK, Iran, and North Korea, along with organized crime groups, are already involved in HNDL activities. Their targets include TLS/VPN traffic, cloud storage, backups, emails, and code-signing systems. Industries at highest risk are finance, healthcare, government/defense, and corporate IP, where long-term confidentiality matters.
Experts warn that the convergence of quantum decryption and AI will create a “perfect storm” for cybersecurity, enabling more advanced spear phishing, ransomware, and disinformation attacks. The long-term impacts include severe legal, financial, and reputational damage, often striking years after the initial data theft.
To reduce these risks, organizations should consider using Post-Quantum Cryptography (PQC), combine encryption methods, improve key management practices, protect backups with quantum-safe algorithms, and exchange threat information across industries. As experts stress: prepare today, or pay tomorrow — quantum decryption waits for no one.
SafeLine: A Free Zero Trust Web Application Firewall for 2026
.
