Advisories by BGD e-GOV CIRT

The campaign uses phishing-as-a-service (PhaaS) infrastructure to distribute SMS messages containing malicious links that redirect victims to phishing....

In this incident, attackers gained unauthorized access to the npm maintainer account and published malicious versions of the Axios package containing ....

Nymaim is a multi-stage malware loader historically used to distribute banking trojans, ransomware, and credential-stealing malware. It was closely as....

BGD e-GOV CIRT strongly recommends that every organization in Bangladesh using Microsoft IIS immediately inventory their systems, isolate exposed serv....

A critical unauthenticated remote code execution (RCE) vulnerability, tracked as CVE-2026- 21858 and dubbed "Ni8mare," has been identified in n8n, an ....

A nationwide assessment identified 80 internet-exposed MongoDB database instances in Bangladesh that are improperly secured or misconfigured and runni....