Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

thehackernews.com Oct 9, 2026

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

Curated by Shubham · TechCapsules · Oct 9, 2026

AI-summarised brief · reviewed before publication

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after a China‑linked threat actor, Flax Typhoon, abused them. The update aligns with a joint advisory from Australia, Canada, Japan, New Zealand, Spain, the U.K., and the U.S., warning of attacks by Integrity Technology Group that target eight flaws, including the five added. Exploits involve scanning, cross‑site scripting, password spraying on Microsoft Exchange, VPN persistence, and data exfiltration. Federal agencies must patch or retire affected systems by October 11, 2026.

💡 Why It Matters

· The deadline forces federal agencies to address a surge in AI‑driven, cross‑platform attacks that threaten critical infrastructure and sensitive data.

Capsules Policies

Read full article on thehackernews.com

AI model developers have ‘no justification’ for failing to comply with privacy…

UK data‑protection regulator the Information Commissioner’s Office (ICO) has warned AI model developers that there is “no justification” for breaching privacy law when training large language models with personal data. The ICO’s report says developers routinely process highly sensitive information—medical details, political views, religion—scraped from the internet and must disclose the data’s source, processing purpose, and provide mechanisms for objection or deletion. It found widespread lack of transparency and use of blanket exemptions to avoid compliance, and noted many firms lack lawful bases beyond vague public‑interest claims. The regulator also highlighted that AI models can memorize and leak personal data, creating risks of fraud and identity theft, and pledged to use its full enforcement powers to protect citizens’ digital rights.

💡 Unchecked privacy violations could erode public trust in AI, prompting tighter regulatory scrutiny.

siliconangle.com · Oct 9

White House bars Microsoft from sponsoring green card applications as JD Vance…

The White House announced on October 8, 2026 that Microsoft Corp. has been suspended from the Department of Labor’s Permanent Labor Certification (PERM) program, which allows U.S. employers to sponsor green cards for H‑1B visa holders. Labor Secretary Keith Sonderling cited alleged abuse of the system, claiming Microsoft replaced American workers with cheaper foreign labor. Vice President JD Vance accused the company of cutting 6,000 U.S. jobs while securing 6,200 H‑1B visas and nearly 3,000 green cards in the same period, alleging fraudulent job postings in obscure newspapers to claim a lack of qualified U.S. applicants. Adobe and several Indian outsourcing firms were also barred from PERM participation due to ongoing federal investigations.

💡 The action targets a major tech employer’s immigration practices, signaling heightened enforcement that could reshape hiring strategies across the industry.

thehindubusinessline.com · Oct 9

Trump honours Satya Nadella as JD Vance suspends Microsoft from green card…

President Donald Trump awarded Microsoft chief Satya Nadella the National Medal of Technology and Innovation at the “A New Golden Age” summit in Washington on Oct. 8, 2026. Hours earlier Vice President JD Vance announced that the administration’s fraud task force had suspended Microsoft from the U.S. green‑card program that lets firms sponsor H‑1B workers for permanent residency. Vance accused the company of abusing the system, noting that Microsoft laid off 6,000 U.S. employees while securing 6,300 new H‑1B visas and nearly 3,000 green cards last year. Microsoft, which employs 223,000 people worldwide, said 80 % of its H‑1B filings were extensions. The company has not responded to the allegations. The contrasting honors and sanctions underscore the administration’s split stance on tech and immigration.

💡 The juxtaposition of a presidential accolade with a punitive immigration move shows the administration will reward innovation yet enforce stricter labor controls, putting tech firms on a tight compliance rope.

businessworld.in · Oct 9

Starlink Faces Affordability Test As 83% Back Indian Security Rules: Report

A nationwide LocalCircles survey of 83,000 internet users found that 79 % support government intervention to keep satellite internet affordable and 83 % demand full compliance with Indian data and security rules. The results come as Starlink, Eutelsat OneWeb, and Reliance‑Jio‑SES’s Orbit Connect India await final security clearances and spectrum allocation before launching services. The survey notes that 46 % would consider satellite internet only if prices matched existing fibre or mobile broadband, highlighting the commercial challenge of affordability and regulatory compliance.

💡 The findings reveal that without price controls, satellite internet risks becoming a premium service, limiting access in underserved regions.

businessworld.in · Oct 9

Scaling Without Boundaries: Why India Must Treat Telecom And AI As A…

India’s telecom sector, now covering almost the entire population, is confronting a widening gap between soaring mobile traffic and stagnant revenue. Analysts argue that the next growth phase hinges on integrating artificial intelligence, next‑generation networks, semiconductors and satellite communications into a unified domestic ecosystem. Government initiatives such as Bharat 6G, the India AI Mission, the Semiconductor Mission and the Telecom PLI Scheme lay groundwork, while emerging Telecom Manufacturing Zones aim to link research, design, production and commercialization. Operators are already investing in cloud, data centres, AI and software services, positioning AI‑native 6G architectures as a competitive differentiator. Success will depend on coordinated effort among government, industry, startups, academia and investors to foster indigenous technology, capture value from network data and secure a foothold in global value chains.

💡 By converging telecom and AI, India can transform its massive data assets into high‑value services, turning a revenue shortfall into a strategic export advantage.

businessworld.in · Oct 9

MeitY Asks Social Platforms To Tighten Checks On Manipulated Content

On October 8, India’s Ministry of Electronics and Information Technology (MeitY) issued an advisory urging social‑media intermediaries to intensify scrutiny of false, misleading and manipulated content that could disturb public order. The directive targets recycled visuals, synthetically generated audio‑visual material, impersonation of officials or individuals, and any material that may incite violence. Platforms are instructed to flag, label or contextualise such content, prioritize complaints from authorized government agencies, and cooperate promptly with law‑enforcement bodies. They must also bolster monitoring, escalation and grievance‑redressal mechanisms to address potentially disruptive material swiftly. Additionally, the ministry calls for user‑awareness campaigns encouraging verification of the authenticity, source and date of information before sharing, while emphasizing compliance with the Information Technology Act, 2000 and the IT Rules, 2021.

💡 By tightening checks on deep‑fakes and recycled media, the government aims to curb misinformation that can spark unrest, reinforcing state control over digital narratives during volatile events.