> TritonInfoSec News
Home / Oct 10, 2026 / Story
0
#2 The Hacker News general October 09, 2026 at 12:21 UTC

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

By [email protected] (The Hacker News)

AI Summary

CISA added five vulnerabilities to its KEV catalog — including CVE-2015-3306 (CVSS 10.0, ProFTPD improper access control) — all actively exploited by China-linked Flax Typhoon, with a federal agency remediation deadline of October 11, 2026. The additions tie directly to the same Integrity Tech / Flax Typhoon campaign disrupted by the FBI and DOJ this week. Federal agencies and critical infrastructure operators must prioritize these five flaws immediately given the tight deadline.

Read full article → https://thehackernews.com/2026/10/flax-typhoon-exp…

Relevance score: 86.0/100

# More from October 10

  1. 1
    FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions The Hacker News
  2. 3
    Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland BleepingComputer
  3. 4
    Max severity SonicWall SMA1000 flaw now exploited in attacks BleepingComputer
  4. 5
    Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments The Hacker News
  5. 6
    Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge The Hacker News
  6. 7
    FBI arrests another suspected ShinyHunters hacker after agency breach BleepingComputer
  7. 8
    Low-cost Android phones ship with residential proxy malware BleepingComputer
  8. 9
    Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access The Hacker News
  9. 10
    $10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack Graham Cluley