Educate, Empower, Secure: Building a Cyber-safe Bhutan
Services We Provide
Bhutan Computer Incident Response Team (BtCIRT) is a part of the Government Technology Agency (GovTech). The BtCIRT is mandated to enhance cyber security in Bhutan by facilitating collaboration and information exchange among stakeholders, rendering assistance in capacity building and through sustained advocacy in computer security. Click here to learn more
Incident
Analysis
Security Event
Monitoring
Security
Awareness
Report Cybersecurity Incident
BtCIRT encourages the reporting of cybersecurity incidents as it enables us to better understand the scope and nature of cyber incidents in Bhutan. This will enable us to issue alerts or advisories on relevant threats, and assist a broader range of individuals and organisations.
Advisories
Security Advisory on supply chain attack targeting axios javascript package
A recent supply chain attack involving the widely used axios library has raised significant security concerns across the JavaScript ecosystem. Third-party researchers identified that Axios ...
Read More →
Advisory: Steps to Recover Google Account (if your recovery phone and email has been changed)
PreparationTo increase your chances of proving ownership, use a device (phone, laptop, or browser) that you have previously used to log into the account. Ensure ...
Read More →
Advisory: Banking Fraud via. Email Compromise
BtCIRT has been reported of multiple incidents involving the compromise of Gmail accounts that are linked to bank accounts of customers in Bhutan. In these ...
Read More →
17thDecember related Scams Alert
The Bhutan Computer Incident Response Team (BtCIRT), Cybersecurity Division GovTech Agency earnestly urges the general public to remain vigilant and avoid falling victim to National ...
Read More →
Critical vulnerability in React Server Components
This is an urgent security advisory regarding a critical security vulnerability related to React Server Components. Summary of Critical Vulnerability For complete details, refer to ...
Read More →
Increasing cases of Makop Ransomware Reported
Summary The BtCIRT has recently received an increasing number of incidents related to MKP ransomware which is a new variant of the Makop ransomware across ...
Read More →
Global Cyber Security News
- Censys Raises $70 Million for Internet Intelligence Platform
- The Next Cybersecurity Crisis Isn’t Breaches—It’s Data You Can’t Trust
- Stolen Logins Are Fueling Everything From Ransomware to Nation-State Cyberattacks
- Venom Stealer Raises Stakes With Continuous Credential Harvesting
- TeamPCP Moves From OSS to AWS Environments
Vulnerability Notification
- VU#655822: Kyverno is vulnerable to server-side request forgery (SSRF)
- VU#221883: CrewAI contains multiple vulnerabilities including SSRF, RCE and local file read
- VU#330121: IDrive for Windows contains local privilege escalation vulnerability
- VU#577436: Hard coded credentials vulnerability in GoHarbor's Harbor
- VU#624941: LibreChat RAG API contains a log-injection vulnerability
Publications
REQUEST for EXPRESSION OF INTEREST(REoI) FOR (CONSULTING SERVICES – FIRMS SELECTION)
The GovTech Agency would like to invite eligible and interested Consulting Firms for the National Cybersecurity Risk Assessment deployment. Interested firms can submit Expression of ...
Read More →
17thDecember related Scams Alert
The Bhutan Computer Incident Response Team (BtCIRT), Cybersecurity Division GovTech Agency earnestly urges the general public to remain vigilant and avoid falling victim to National ...
Read More →
Cyber Security Awareness
Cyber Security Awareness Program The Department of Information Technology and Telecom, in its efforts to help promote conducive and safer cyber environment for work and ...
Read More →
National Cybersecurity Strategy of Bhutan
The Published National Cybersecurity Strategy of Bhutan for the year 2024 to 2029
Read More →