Our weekly CVE report for Oct 5-11, 2026 tracks 3,255 new flaws and six exploited vulnerabilities not yet listed in the CISA KEV catalog.
Flax Typhoon
ReliaQuest exposed Flax Typhoon for a year-long breach, where the China-backed APT turned a legitimate ArcGIS Java SOE into a web shell and embedded it in backups to ensure persistence.
U.S. sanctions Chinese cybersecurity company Integrity Tech for alleged role in state-sponsored cyberattacks on American targets.
Learn about the surge in sophisticated APT attacks targeting various sectors. ESET's report sheds light on tactics and VPN reliance.
Stay informed about the Flax Typhoon botnet cyberattack campaign and how it poses a significant risk to global critical infrastructure.
Stay informed about the latest cybersecurity threat: a botnet operated by cyber actors linked to the People's Republic of China, compromising thousands of devices worldwide.