Bhutan CIRT

24/08/2026

𝐏𝐔𝐁𝐋𝐈𝐂 𝐀𝐖𝐀𝐑𝐄𝐍𝐄𝐒𝐒 𝐍𝐎𝐓𝐈𝐂𝐄 | 𝐁𝐄𝐖𝐀𝐑𝐄 𝐎𝐅 𝐅𝐀𝐊𝐄 𝐓𝐄𝐋𝐄𝐆𝐑𝐀𝐌 𝐆𝐑𝐎𝐔𝐏

We would like to alert the public about a 𝐟𝐚𝐤𝐞 𝐓𝐞𝐥𝐞𝐠𝐫𝐚𝐦 𝐠𝐫𝐨𝐮𝐩 𝐢𝐦𝐩𝐞𝐫𝐬𝐨𝐧𝐚𝐭𝐢𝐧𝐠 𝐁𝐃𝐁 𝐞𝐦𝐩𝐥𝐨𝐲𝐞𝐞𝐬 and 𝐩𝐫𝐨𝐦𝐨𝐭𝐢𝐧𝐠 𝐟𝐫𝐚𝐮𝐝𝐮𝐥𝐞𝐧𝐭 𝐢𝐧𝐯𝐞𝐬𝐭𝐦𝐞𝐧𝐭 𝐨𝐩𝐩𝐨𝐫𝐭𝐮𝐧𝐢𝐭𝐢𝐞𝐬.

Please be informed that BDB does not use Telegram or other social media platforms to solicit investments from the public. Our employees will never ask customers to transfer money, invest, or share personal and banking information through unofficial groups or messages.

🔐 𝐏𝐥𝐞𝐚𝐬𝐞 𝐬𝐭𝐚𝐲 𝐯𝐢𝐠𝐢𝐥𝐚𝐧𝐭:

• Do not respond to suspicious investment offers or links.
• Do not share your personal, account, or banking information.
• Do not transfer money to unknown individuals or accounts.
• Report and block suspicious accounts or groups immediately.
• Verify any communication through BDB’s official channels or your nearest BDB branch.

⚠️ If you encounter any suspicious group or message claiming to represent BDB, please do not engage with it.

Stay Alert. Stay Safe. Protect Yourself from Online Scams.

24/08/2026

From 17–19 August 2026, the Cybersecurity Division (Bhutan CIRT) under the Government Technology (GovTech) Agency, Royal Government of Bhutan has successfully conducted a three-day Digital Forensics and Incident Response (DFIR) Workshop at the BCCI Conference Hall, Thimphu, bringing together approximately 43 participants from key Critical Information Infrastructure (CII) and Digital Public Infrastructure (DPI) organizations across Bhutan with technical support from APNIC.

24/08/2026

Critical GeoServer SQL Injection Vulnerability: 20260706005
BtCIRT is issuing an advisory regarding a critical SQL injection vulnerability in GeoServer, an open-source geospatial data server. The vulnerability which is tracked as ‘GHSA-mqjf-5f49-2fjh’ can allow unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers
Click below to learn more

SeverityCRITICALThreat CategoryVulnerability (SQL Injection, Potential Remote Code Ex*****on)Affected PlatformsGeoServer Application versions < 2.27.6,

07/08/2026

BtCIRT is issuing this advisory to inform government agencies, businesses, and the public in Bhutan about a critical vulnerability affecting Veeam ONE, a monitoring and capacity-planning software for backup and virtual environments. Veeam Knowledge Base article KB4892 (published 2026-08-04, updated 2026-08-05) discloses six vulnerabilities in Veeam ONE 13.
Click below to learn more.

SeverityCRITICALThreat CategoryVulnerability (Remote Unauthenticated Code Ex*****on)Affected PlatformsVeeam ONE (versions 13.0.2.6723 and earlier Version 13 bui

06/08/2026

A critical Remote Code Ex*****on (RCE) vulnerability (CVE-2026-63030 and CVE-2026-60137) has been identified in WordPress Core and is currently being actively exploited in the wild. Unauthenticated remote attackers can execute arbitrary code and completely compromise affected servers, without requiring any credentials, plugins, or user interaction.
Click below to learn more

A critical Remote Code Ex*****on (RCE) vulnerability (CVE-2026-63030 and CVE-2026-60137) has been identified in WordPress Core and is currently being actively e

10/07/2026

10/07/2026

06/07/2026

A new malware campaign is spreading through WhatsApp Desktop and WhatsApp Web. Attackers hijack a WhatsApp account and use it to quietly send an infected file , disguised as an invoice or payment notice, to that person's own contacts: Please read BtCIRT's full advisory for how the attack works and how to protect yourself and your organization.

A new malware campaign is spreading through WhatsApp Desktop and WhatsApp Web. Attackers hijack a WhatsApp account and use it to quietly send an infected file ,

24/06/2026

01/05/2026

𝗕𝗲𝘄𝗮𝗿𝗲 𝗼𝗳 𝗖𝘂𝗿𝗿𝗲𝗻𝗰𝘆 𝗘𝘅𝗰𝗵𝗮𝗻𝗴𝗲 𝗦𝗰𝗮𝗺𝘀 🚨