As cited
Copy frozen at (site build).
vulnerabilities
Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
The US Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities catalog after detecting abuse by Flax Typhoon, a China-linked threat actor. The flaws include CVE-2015-3306, a ProFTPD improper access control vulnerability with a CVSS score of 10.0. CISA set an October 11 deadline for federal agencies to patch these exposures.
Why it matters: Federal agencies must remediate these five flaws by October 11 to comply with CISA binding operational directive; Flax Typhoon's active exploitation of these vulnerabilities, including the critical ProFTPD flaw, poses immediate risk to systems lacking patches.
- Source published
- First seen by Cybersecurity Tracker