InfoSecBulletin Cybersecurity for mankind
As Bangladesh prepares for the extended Eid-ul-Adha holidays, the BGD e-GOV Computer Incident Response Team (CIRT) has issued an urgent cybersecurity alert, warning of heightened cyber threats due to reduced monitoring and operational oversight during the festive period.
Current Threat Landscape:
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
The CIRT’s Cyber Threat Intelligence Unit has detected widespread malware activity across the nation. Notably:
Android.vo1d and Avalanche-Andromeda malware variants have infected over 370,000 IP addresses.
24,362 IP addresses were flagged as vulnerable in the past week alone.
These malware campaigns exploit common security gaps, including:
Weak authentication protocols
Outdated or unpatched software
Critical Remote Code Execution (RCE) vulnerabilities
Top Threats Identified:
Recent threat intelligence highlights include:
High infection rates across mobile and desktop platforms
Major vulnerabilities in systems lacking routine patching
Risk of ransomware, data breaches, and unauthorized access
Recommended Mitigation Measures:
Organizations in both public and private sectors are urged to act swiftly:
Maintain 24/7 monitoring of systems and network activities.
Update all security tools, including SIEM, IDS/IPS, and WAF systems.
Enforce VPN access only with Multi-Factor Authentication (MFA).
Block connections from untrusted or public networks.
Apply all critical software and system updates immediately.
Securely back up all critical data and validate recovery processes.
Follow InfoSecBulletin.com for continuous updates on cybersecurity threats and best practices.
New Android Malware ‘Crocodilus’ Targets Banks in 8 Countries
