Flax Typhoon Activity Linked to Five Exploited Flaws Before CISA Deadline

Flax Typhoon activity linked to five exploited flaws before CISA deadline

CISA has added five vulnerabilities tied to Flax Typhoon activity to its Known Exploited Vulnerabilities catalog, setting an October 11 remediation deadline for U.S. federal civilian agencies under BOD 22-01. The update places the China-linked...

Federal Agencies Face Today’s Deadline to Patch Five Flax Typhoon CVEs Spanning a Decade

Federal agencies face a hard deadline today, October 11, 2026, to remediate or discontinue use of five specific software products identified by CISA as actively exploited by the threat actor Flax Typhoon, also known as Ethereal Panda or Red Juliett. The Known Exploited Vulnerabilities catalog update, issued October 8, highlights a persistent security failure: the […]

CISA Adds 5 Flax Typhoon Exploited Flaws To KEV Catalog

CISA added five vulnerabilities to its Known Exploited Vulnerabilities catalog after China-linked threat actor Flax Typhoon exploited them to target […]

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in question are listed below CVE-2015-3306 (CVSS score: 10.0) - An improper access control vulnerability in ProFTPD that could allow