Bangladesh Bank alongside several commercial lenders has temporarily taken down its official website for a third consecutive day as a precautionary measure against potential cyber threats stemming from a critical flaw in the widely used PHP programming language.
The portal of the central bank has remained inaccessible since Thursday. Following this move, several commercial institutions including Agrani Bank, Janata Bank, IFIC Bank, SBAC Bank, and Bengal Commercial Bank also suspended their web services to audit and safeguard their digital infrastructure.
The nationwide technical pause comes after the government’s cyber security team, BGD e-GOV CIRT, issued an urgent advisory on October 22 regarding a severe vulnerability detected in certain versions of PHP. The advisory instructed all organizations to audit their servers, identify vulnerable software releases, and implement necessary security patches immediately.
Because PHP forms the core framework for millions of websites and web applications worldwide, unpatched vulnerabilities in the code can expose servers to unauthorized access and cyber exploitation.
Banking authorities stated that the web platforms are undergoing comprehensive security assessments and will be brought back online as soon as all necessary protective measures and system updates are completed.
Reporting by Borderless for The Borderless Journal. Filed under Uncategorized · 24 Oct 2026, 17:00.
