Advisories by BGD e-GOV CIRT

A high-severity cache-poisoning vulnerability (CVE-2025-40778, CVSS 8.6) in BIND (Berkeley Internet Name Domain) 9 resolvers can allow remote attacker....

We have identified a critical security vulnerability in Microsoft’s update-management service (WSUS) that, if unpatched, allows an attacker to take fu....

A critical flaw (CVE-2025-57819) in FreePBX versions 15, 16, and 17 enables unauthenticated attackers to perform SQL injection and remote code executi....

The reported email contained a suspicious attachment, indicating a potential phishing attempt targeting users. The attached file was a password-protec....

A targeted phishing campaign was identified originating from the compromised government/law enforcement email accounts. The attacker leveraged legitim....

Several websites in Bangladesh, popularfor streaming movies,have been identified as vectors for delivering malicious content to unsuspecting users. Wh....