<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel><title>Flax Typhoon · Threat Recap</title><link>actors/flax-typhoon.html</link><description>News mentioning Flax Typhoon</description><lastBuildDate>Mon, 19 Oct 2026 12:28:44 GMT</lastBuildDate>
<item><title>Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies</title><link>https://thehackernews.com/2026/10/flax-typhoon-exploits-five-flaws-as.html</link><guid isPermaLink="false">z7zye9</guid><pubDate>Fri, 09 Oct 2026 12:21:51 GMT</pubDate><description>The Hacker News. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in…</description><category>Vulnerability</category><category>Zero-day</category><category>APT</category></item>
<item><title>UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group</title><link>https://www.infosecurity-magazine.com/news/uk-allies-threat-china-integrity/</link><guid isPermaLink="false">1osmcsc</guid><pubDate>Fri, 09 Oct 2026 10:00:00 GMT</pubDate><description>Infosecurity Magazine. The UK, US and allies have issued an alert detailing malicious activity linked to China’s Integrity Technology Group</description><category>APT</category></item>
<item><title>FBI disrupts Flax Typhoon hacking tools used in global cyberattacks</title><link>https://www.helpnetsecurity.com/2026/10/09/fbi-flax-typhoon-microscan-fishhub-domains/</link><guid isPermaLink="false">1nzl74n</guid><pubDate>Fri, 09 Oct 2026 09:44:44 GMT</pubDate><description>Help Net Security. The FBI seized seven domains used to operate Microscan and FishHub, two hacking tools linked to Chinese state-sponsored hackers known as Flax Typhoon that were used to target critical infrastructure and other organizations in the US and abroad. Seizure notice…</description><category>APT</category><category>Law &amp; policy</category></item>
<item><title>US Disrupts Chinese State-Sponsored Hacking Tools</title><link>https://www.securityweek.com/us-disrupts-chinese-state-sponsored-hacking-tools/</link><guid isPermaLink="false">1rxihjy</guid><pubDate>Fri, 09 Oct 2026 08:36:37 GMT</pubDate><description>SecurityWeek. Flax Typhoon and other APTs used MicroScan and FishHub to scan and hack US and foreign critical infrastructure.</description><category>APT</category></item>
<item><title>FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions</title><link>https://thehackernews.com/2026/10/fbi-seizes-7-domains-disrupts-flax.html</link><guid isPermaLink="false">1iiovkx</guid><pubDate>Fri, 09 Oct 2026 06:39:29 GMT</pubDate><description>The Hacker News. The U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disruption of malicious tools used by a China-linked advanced persistent threat group known as Flax Typhoon. To that end, the agencies seized several domains and…</description><category>Law &amp; policy</category><category>APT</category></item>
<item><title>FBI disrupts Chinese hacking tools used to breach critical infrastructure</title><link>https://www.bleepingcomputer.com/news/security/fbi-disrupts-chinese-hacking-tools-used-to-breach-critical-infrastructure/</link><guid isPermaLink="false">1d9kzk3</guid><pubDate>Thu, 08 Oct 2026 21:42:51 GMT</pubDate><description>BleepingComputer. The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate two hacking tools, MicroScan and FishHub, used in attacks that breached critical infrastructure and other organizations worldwide. [...]</description><category>Breach</category><category>APT</category><category>Law &amp; policy</category></item>
<item><title>International coalition seizes tools used by cyber firm behind Flax Typhoon</title><link>https://therecord.media/flax-typhoon-china-tools-integrity-tech-international-takedown</link><guid isPermaLink="false">18wylab</guid><pubDate>Thu, 08 Oct 2026 19:20:00 GMT</pubDate><description>The Record. The U.S. and other nations took down digital tools and infrastructure by Beijing-based Integrity Tech that allowed &quot;widespread vulnerability scanning and, in some cases, intrusions&quot; as part of the Flax Typhoon campaign.</description><category>Vulnerability</category><category>APT</category></item>
<item><title>FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails</title><link>https://thehackernews.com/2026/10/fbi-says-china-linked-hackers-ran.html</link><guid isPermaLink="false">19w1tmn</guid><pubDate>Thu, 08 Oct 2026 18:32:21 GMT</pubDate><description>The Hacker News. Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, healthcare systems, and religious institutions in Southeast Asia, the FBI and agencies in 6 other countries said on October 8. The company,…</description><category>Vulnerability</category><category>Law &amp; policy</category><category>APT</category></item>
<item><title>Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data</title><link>https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-281a</link><guid isPermaLink="false">1e8vv8b</guid><pubDate>Thu, 08 Oct 2026 12:00:00 GMT</pubDate><description>CISA Advisories. Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication October 8, 2026 Executive Summary Chinese government-linked cyber threat actors, enabled by the…</description><category>Advisory</category><category>Vulnerability</category><category>Zero-day</category><category>APT</category></item>
</channel></rss>
