Monday , March 17 2025

Successfully held “InfoSecCon-2024″at Dhaka Bangladesh

With a festive look and the participation of more than one hundred participants from Bangladesh cyber industry, another successful cyber security conference “InfoSecCon-2024” (2nd Edition) was held at Dhaka on 26 October (Saturday) 2nd time in a year.

The very flagship event was designed with five time demanding topic including AI, Data center, Cloud service and so on and academician, researchers, professionals, Student, Banker participated the event.

AWS SNS misused for Data Exfiltration and Phishing

A recent report from Elastic reveals that threat actors misuse Amazon Web Services (AWS) Simple Notification Service (SNS) for malicious...
Read More
AWS SNS misused for Data Exfiltration and Phishing

Researcher found non protected database form ESHYFT containig 86000 records

Cybersecurity researcher Jeremiah Fowler found and reported a non-password-protected database with over 86,000 records belonging to ESHYFT, a New Jersey-based...
Read More
Researcher found non protected database form ESHYFT containig 86000 records

CVE-2024-55591 and CVE-2025-24472
New SuperBlack ransomware exploits Fortinet flaws

Forescout Research- Vedere Labs identified a series of intrusion based on two Fortinet vulnerabilities which began with the exploitation of...
Read More
CVE-2024-55591 and CVE-2025-24472  New SuperBlack ransomware exploits Fortinet flaws

CVE-2025-25291 & CVE-2025-25292
Attention! GitLab Patched Critical Authentication Bypass Flaws

GitLab has released versions 17.9.2, 17.8.5, and 17.7.7 for its Community and Enterprise Editions to fix security vulnerabilities, including a...
Read More
CVE-2025-25291 & CVE-2025-25292  Attention! GitLab Patched Critical Authentication Bypass Flaws

CVE-2025-20138
Cisco released High Security Alert for IOS XR Software

Cisco has issued a security advisory for a high-severity vulnerability in its IOS XR Software, labeled CVE-2025-20138, with a CVSS...
Read More
CVE-2025-20138  Cisco released High Security Alert for IOS XR Software

400+ IPs Exploiting Multiple SSRF Vulnerabilities

GreyNoise warns of a coordinated increase in the exploitation of Server-Side Request Forgery (SSRF) vulnerabilities across various platforms. "At least...
Read More
400+ IPs Exploiting Multiple SSRF Vulnerabilities

NVIDIA has released update for NVIDIA Riva

NVIDIA has released a software update for Riva to fix security vulnerabilities that could allow privilege escalation, data tampering, denial...
Read More
NVIDIA has released update for NVIDIA Riva

CVE-2025-24201
Apple fixes 0-day exploited in “extremely sophisticated attack”

On Tuesday, Apple fixed a critical zero-day vulnerability affecting nearly all supported iPhones and iPads. The company noted that it...
Read More
CVE-2025-24201  Apple fixes 0-day exploited in “extremely sophisticated attack”

Microsoft’s March 2025 updates fix 7 zero-day, 57 flaws

Microsoft's March 2025 Patch Tuesday update fixes 57 flaws, including seven zero-day exploits, six of which are actively being exploited....
Read More
Microsoft’s March 2025 updates fix 7 zero-day, 57 flaws

Ballista Botnet infects 6000 Unpatched TP-Link Routers

Cato CRTL team said, a new botnet campaign dubbed Ballista target the unpatched TP-Link Archer routers. CVE-2023-1389 is a serious...
Read More
Ballista Botnet infects 6000 Unpatched TP-Link Routers
table talk
Panelists at “AI-Driven Incident Response: Automating Cyber Security with GenAI”

In the topic titled “AI-Driven Incident Response: Automating Cyber Security with GenAI” where Dr. Md. Shohrab Hossain, Professor, CSE, BUET, Reazul Islam, Chief Operating Officer, ADN technologies Ltd and Sifat Jahan Noor, Chief Information Officer, Bashundhara Group were participated.

The panelists said, AI-driven incident response uses Generative AI to improve cybersecurity by automating threat detection, analysis, and response. As cyber threats become more sophisticated, traditional methods struggle to keep up. GenAI can quickly analyze large datasets, identifying anomalies and potential breaches more efficiently than human analysts.

table talk Panelists at “Future Prospects for Data Center and cloud services in Bangladesh with business continuity”

On the topic “Future Prospects for Data Center and cloud services in Bangladesh with business continuity”, Md. Ishaque Miah, Managing Director, Bangladesh Data Center and Disaster Recovery Site Ltd, Sharful Alam, Chief Executive Officer, Felicity IDC Limited, Masud Parvaj, Managing Director, DCiCON Limited and MD. Hasibur Rashid, Director & CMO of Intercloud Limited were participated as panelists.

The panelists said, Bangladesh is witnessing rapid digital transformation, driven by increasing internet penetration and a growing demand for data-driven services. The future of data centers and cloud services in the country looks promising for various reasons like growing demand, investment and infrastructure development, Business Continuity Focus and so on. So, policy support, trust gap minimizing, collaboration is essential for the expansion the industry.

table talk
panelists at : “The Rise of DNS Attacks: From DDoS to Cache Poisoning”

On the topic “The Rise of DNS Attacks: From DDoS to Cache Poisoning” was discussed by Prof. Dr. Md. Saiful Islam, IICT, BUET, Dr. Md. Mamun-Or-Rashid, Professor, CSE, Dhaka University and Abu Zafor Md. Ahasanul Hoque (Uzzal), DGM, Core and Upstream, BTCL.

The learned talker successfully presented the Domain Name System (DNS) translates easy-to-remember domain names into IP addresses, but its significance also makes it a target for cyberattacks. The increase in these attacks highlights the need for strong DNS security, such as implementing DNSSEC and improving monitoring practices. Securing DNS infrastructure is crucial as the internet evolves.

table talk
panelists at “Cyber Security in Telco & BFSI”

On the topic “Cyber Security in Telco & BFSI”, Sanjoy Chakraborty, Associate Director, Cyber Security, Robi, Shahadat Hossain, Principal Engineer, Enterprise and Saiful Islam, FVP & CISO, Dhaka Bank PLC were participated where the the panelists highlighted the various dimension of telco and BFSI security.

And finally in the Questions & Answer (Q&A), Fahad Zaman Chowdhury, Joint Director, ICT, Bangladesh Bank, Dr. B M Mainul Hossain, Director (IIT), Dhaka University and Md. Abul Kalam Azad, Head Of Information Security, Eastern Bank PLC answered the participants questions.

As special guest Abu Sayed Md. Kamruzzaman, ndc Director General, National Cyber Security Agency highlighted the importance of cyber security on Bangladesh perspective. He said, the agency is working tirelessly for the betterment of the country to secure the cyber space.

In the speech of chief guest Shish Hyder Chowdhury, ndc, Secretary, ICT Division said, to secure Bangladesh digitally is prime concern of interim Government. We are finding way to work collaboratively to protect our digital space. We follow up various act, rules or framework how it can be modernized to be time equipped.

The event was organized by Infosecbulletin in collaboration with national cyber security agency (NCSA). To make the conference a success, Fiber@home participated as title sponsor, ADN Group and brilliant cloud as platinum sponsor and SmartData sponsored as gold sponsor category.

(InfoSecCon-2024, 1st edition link)

Shared responsibility is a must ensuring digital space safety

Check Also

FIR

Builder claims Rs 150 cr for data loss; AWS faces FIR In Bengaluru

Amazon Web Services (AWS) has been named in an FIR after a builder claimed damages …

Leave a Reply

Your email address will not be published. Required fields are marked *