FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions
2026-10-09T07:23:59Z•348cd51c5e53697506025d2791c4a70d6d1173112f7c8414c9e36b6c220e4104
CVE-2026-21589AI/LLM-securityAPTASHVEINAtlassianChina-linkedFlax TyphoonFortinetRATSSRFSonicWallUAC-0099credential-theftcritical-infrastructurecryptocurrencydata-exfiltrationinfostealermalicious-browser-extensionsnpmphishingransomwarestate-sponsoredsupply-chainthreat-intelligencevulnerability-exploitationweb-application-security
What happened
The feed reports a broad set of cybersecurity threats and incidents, including state-sponsored intrusions, ransomware and phishing campaigns, malicious browser extensions and npm packages, malware targeting AI infrastructure, active exploitation of critical vulnerabilities, credential theft, supply-chain compromise, and attacks against financial, government, healthcare, telecom, and critical-infrastructure organizations. The highest-priority items include a CVSS 10.0 pre-authentication SSRF in SonicWall SMA1000, an unpatched unauthenticated remote-code-execution flaw in LMCache, active FortiB
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 348cd51c5e53697506025d2791c4a70d6d1173112f7c8414c9e36b6c220e4104
- Enrichment time
- 2026-10-09T07:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.