Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

The document is a cybersecurity news feed covering active exploitation, critical vulnerabilities, threat actors, malware campaigns, supply-chain compromises, phishing, credential theft, and attacks against enterprise, government, financial, AI/LLM, and network infrastructure. High-priority items include Flax Typhoon exploitation of five KEV-listed flaws, active Atlassian Data Center exploitation (CVE-2026-21589), a critical Citrix NetScaler flaw (CVE-2026-107406), SonicWall SMA1000 pre-authentication SSRF, an unpatched LMCache remote-code-execution flaw, FortiBleed credential harvesting, and a