FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions

2026-10-09T07:23:59Z•348cd51c5e53697506025d2791c4a70d6d1173112f7c8414c9e36b6c220e4104
CVE-2026-21589AI/LLM-securityAPTASHVEINAtlassianChina-linkedFlax TyphoonFortinetRATSSRFSonicWallUAC-0099credential-theftcritical-infrastructurecryptocurrencydata-exfiltrationinfostealermalicious-browser-extensionsnpmphishingransomwarestate-sponsoredsupply-chainthreat-intelligencevulnerability-exploitationweb-application-security

What happened

The feed reports a broad set of cybersecurity threats and incidents, including state-sponsored intrusions, ransomware and phishing campaigns, malicious browser extensions and npm packages, malware targeting AI infrastructure, active exploitation of critical vulnerabilities, credential theft, supply-chain compromise, and attacks against financial, government, healthcare, telecom, and critical-infrastructure organizations. The highest-priority items include a CVSS 10.0 pre-authentication SSRF in SonicWall SMA1000, an unpatched unauthenticated remote-code-execution flaw in LMCache, active FortiB

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
348cd51c5e53697506025d2791c4a70d6d1173112f7c8414c9e36b6c220e4104
Enrichment time
2026-10-09T07:23:59Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.