Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
Summary: CISA added five security flaws to its Known Exploited Vulnerabilities catalog on Thursday after abuse by a China-linked threat actor called Flax Typhoon, with a patch deadline of October 11, 2026 for federal agencies. The addition coincides with a joint advisory from Australia, Canada, Japan, New Zealand, Spain, the U.K., and the U.S. warning of attacks by China-based Integrity Technology Group, which targets eight vulnerabilities in total using scanning tools, cross-site scripting, and password spraying on Microsoft Exchange servers, plus VPN persistence and script-based exfiltration of emails and credentials.
What's compelling: Acting Executive Assistant Director for Cybersecurity Chris Butera said Chinese government-affiliated actors are positioning themselves inside critical infrastructure networks, including operational technology systems, to disrupt functions at a time of their choosing - meaning an intrusion that looks contained today may be staged for later.
Read the original at The Hacker News ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026