Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

CISA added five security flaws to its Known Exploited Vulnerabilities catalog on Thursday, following abuse by China-linked threat actor Flax Typhoon. The list includes CVE-2015-3306, a critical improper access control vulnerability in ProFTPD with a CVSS score of 10.0. Federal agencies face an October 11 deadline to patch the exploited flaws.