The Flax Typhoon gets a cold front.

Dave Bittner’s CyberWire Daily covers current threat reporting on Flax Typhoon, SonicWall, Acronis, ransomware, and Anthropic’s new AI-driven security initiatives. A longer interview with Maria Varmazis and Bittner explores how public-private cyber partnerships have matured over the past decade, why they matter for incident response, and what CIOs should expect when private incidents become public-safety issues.

Key points

• US-led allies disrupted Integrity Technology Group infrastructure tied to Flax Typhoon reconnaissance and phishing tools.
• Anthropic launched an OSS scanner and an OT defense program to speed vulnerability discovery and remediation.
• SonicWall SMA 1000 appliances are being actively exploited days after a critical patch.
• Acronis CBS flaws are being chained for remote code execution; Huntress says no patch is available yet.
• CISA 2015 expired again into legislative deadlock, risking uncertainty around threat-sharing protections.
• Comparitech logged 2,600+ claimed ransomware attacks in Q3 2026, a 27% quarterly increase.