Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

The US Cybersecurity and Infrastructure Security Agency CISA on Thursday added five security flaws to its Known Exploited Vulnerabilities KEV catalog following their abuse by a Chinalinked threat actor known as Flax Typhoon The vulnerabilities in question are listed below CVE20153306 CVSS score 100 An improper access control vulnerability in ProFTPD that could allow