InfoSecBulletin Cybersecurity for mankind
As Bangladesh prepares for the extended Eid-ul-Adha holidays, the BGD e-GOV Computer Incident Response Team (CIRT) has issued an urgent cybersecurity alert, warning of heightened cyber threats due to reduced monitoring and operational oversight during the festive period.
Current Threat Landscape:
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
Google Search Results Reportedly Show Claude AI Shared Chats
The CIRT’s Cyber Threat Intelligence Unit has detected widespread malware activity across the nation. Notably:
Android.vo1d and Avalanche-Andromeda malware variants have infected over 370,000 IP addresses.
24,362 IP addresses were flagged as vulnerable in the past week alone.
These malware campaigns exploit common security gaps, including:
Weak authentication protocols
Outdated or unpatched software
Critical Remote Code Execution (RCE) vulnerabilities
Top Threats Identified:
Recent threat intelligence highlights include:
High infection rates across mobile and desktop platforms
Major vulnerabilities in systems lacking routine patching
Risk of ransomware, data breaches, and unauthorized access
Recommended Mitigation Measures:
Organizations in both public and private sectors are urged to act swiftly:
Maintain 24/7 monitoring of systems and network activities.
Update all security tools, including SIEM, IDS/IPS, and WAF systems.
Enforce VPN access only with Multi-Factor Authentication (MFA).
Block connections from untrusted or public networks.
Apply all critical software and system updates immediately.
Securely back up all critical data and validate recovery processes.
Follow InfoSecBulletin.com for continuous updates on cybersecurity threats and best practices.
New Android Malware ‘Crocodilus’ Targets Banks in 8 Countries
