Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

October 7, 2026 · 2:03 pm 10 sources

Image: CISA

Coverage

Wires & papers of record

• Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
  CISA · October 8, 2026 12:00
  Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication October 8, 2026 Executive Summary Chinese government-linked cyber threat actors, enabled by the Integrity Technology Group, are…

Coverage

• Cyber experts call on CISA to create mandatory federal OT rules
  The Record by Recorded Future News · October 7, 2026 14:03
  The Operational Technology Cybersecurity Coalition (OTCC) released a white paper on Tuesday urging the Cybersecurity and Infrastructure Security Agency (CISA) to create a new directive centered around operational technology, which is used to monitor and control critical infrastructure.
• OT Coalition Urges CISA to Mandate Federal OT Security
  Infosecurity Magazine · October 7, 2026 14:15
  OTCC urged CISA to mandate baseline security requirements for federal operational technology
• International coalition seizes tools used by cyber firm behind Flax Typhoon
  The Record by Recorded Future News · October 8, 2026 19:20
  The U.S. and other nations took down digital tools and infrastructure by Beijing-based Integrity Tech that allowed "widespread vulnerability scanning and, in some cases, intrusions" as part of the Flax Typhoon campaign.
• FBI disrupts Chinese hacking tools used to breach critical infrastructure
  BleepingComputer · October 8, 2026 21:42
  The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate two hacking tools, MicroScan and FishHub, used in attacks that breached critical infrastructure and other organizations worldwide. [...]
• US Disrupts Chinese State-Sponsored Hacking Tools
  SecurityWeek · October 9, 2026 08:36
  Flax Typhoon and other APTs used MicroScan and FishHub to scan and hack US and foreign critical infrastructure. The post US Disrupts Chinese State-Sponsored Hacking Tools appeared first on SecurityWeek .
• FBI disrupts Flax Typhoon hacking tools used in global cyberattacks
  Help Net Security · October 9, 2026 09:44
  The FBI seized seven domains used to operate Microscan and FishHub, two hacking tools linked to Chinese state-sponsored hackers known as Flax Typhoon that were used to target critical infrastructure and other organizations in the US and abroad. Seizure notice (Source: US Department of Justice)…
• UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group
  Infosecurity Magazine · October 9, 2026 10:00
  The UK, US and allies have issued an alert detailing malicious activity linked to China’s Integrity Technology Group

More coverage

• FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions
  The Hacker News · October 9, 2026 06:39
  The U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disruption of malicious tools used by a China-linked advanced persistent threat group known as Flax Typhoon. To that end, the agencies seized several domains and blocked access to platforms that were…
• Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
  The Hacker News · October 9, 2026 12:21
  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in question are listed below - CVE-2015-3306…