For all latest news, follow the Daily Sun's Google News channel.
Bangladesh Bank website resumes after three-day shutdown
Daily Sun Report, Dhaka
Published: 25 Oct 2026, 12:01 PM
The Bangladesh Bank website resumed operations on Sunday morning after remaining offline for three days as a precautionary measure over potential cybersecurity risks.
The website became accessible again at around 8:00am on Sunday, Bangladesh Bank Executive Director and spokesperson Arief Hossain Khan confirmed.
The central bank took the website offline on Thursday (22 October) following an urgent security concern involving potential vulnerabilities in the PHP programming language.
At the time, Arief Hossain Khan said the website had been temporarily shut down to address the security issue and prevent potential risks.
Sources at the central bank said security teams had been working to identify and address the vulnerabilities. The website would be restored after assessing the risks and implementing necessary security measures, they said.
According to relevant sources and international media reports, two serious vulnerabilities in PHP had raised concerns over potential cyberattacks worldwide.
The vulnerabilities could potentially allow attackers to remotely execute unauthorised commands on affected servers, raising concerns over the security of server files, databases and other sensitive information.
Several banks and institutions using PHP-based websites also reportedly took precautionary measures in response to the security concerns.
However, there was no confirmed information that the Bangladesh Bank website had been targeted or compromised in an actual cyberattack.
PHP is a widely used server-side programming language that powers websites and online services operated by government agencies, media organisations, e-commerce platforms and other institutions.
The use of PHP itself does not make a website vulnerable. The level of risk depends on factors such as the software version in use, whether security updates have been installed and the effectiveness of server-side security measures.