Alex: Welcome to Cleartext. It's Friday, October 9th, 2026. I'm Alex Chen.

Jordan: And I'm Jordan Reeves. Let's get into it.

Alex: We've got a packed show today. The FBI just took down key Flax Typhoon infrastructure, we've got record ransomware numbers that'll matter for your budget conversations, a ransomware recovery CEO who was allegedly running a scam, and two critical vulns that need your attention this weekend. Plus, OpenAI is flagging influence operations at severity levels they've never reported before, and their lawyers are simultaneously arguing they shouldn't be liable when their AI agents break the law. There's a lot to unpack.

Jordan: Let's start where it matters most. The DOJ and FBI seized seven domains tied to Microscan and FishHub, which are the primary operational tools used by Flax Typhoon. These are the command-and-control platforms run by Integrity Technology Group, a Chinese firm that's already sanctioned by both the U.S. and the UK. This came with a joint advisory from CISA, NSA, and FBI.

Alex: And the targeting scope here is what should get your attention. A South Carolina power company. Government agencies. Healthcare. Law enforcement across Southeast Asia. This is not narrow espionage. This is broad critical infrastructure access collection.

Jordan: Right. And there's an important nuance. Seizing the C2 infrastructure disrupts operations, but it doesn't evict Flax Typhoon from networks they've already compromised. If they established persistence through other channels, through living-off-the-land techniques, which is exactly what Volt Typhoon and Flax Typhoon are known for, then the implants may still be active even though the C2 domains are down.

Alex: Which is why CISA added five CVEs to the Known Exploited Vulnerabilities catalog with an October 11 remediation deadline. That's this Sunday for federal agencies. If you're in critical infrastructure or you partner with critical infrastructure, treat this as a hunt trigger. Don't wait for an alert. Go look.

Jordan: The posture from the U.S. government is clearly escalating. Sanctions, seizures, joint advisories. This is the most aggressive operational tempo we've seen against Chinese state-sponsored groups since the Volt Typhoon takedowns. But I'll be blunt: Integrity Tech will reconstitute. They'll build new tooling. The value of this seizure is the intelligence it generates and the signal it sends, not permanent disruption.

Alex: Agreed. For CISOs, the action item is concrete: pull the IOCs from the advisory, run them against your telemetry, and if you have SMA appliances, OT connections, or anything in the critical infrastructure supply chain, prioritize the hunt.

Jordan: Speaking of state-sponsored activity, let's talk about the OpenAI disclosure. They disrupted two influence operations, one linked to Iran and one to Russia, that used AI-generated personas posing as journalists and think tank analysts to seed narratives into Western media.

Alex: And the severity ratings are what's notable here. OpenAI rated these campaigns 4 and 5 out of 6. That's the first time they've flagged operations at that level. These aren't the clumsy bot farms we saw in 2020. These are sophisticated campaigns using frontier AI to generate credible-looking analysis and reporting that's designed to be picked up and amplified by real media outlets.

Jordan: The CISO relevance is more direct than people think. If AI-generated fake analysts can place narratives in legitimate media, they can target your company. They can target your executives. They can generate fake research that moves your stock price or undermines a merger. This is a brand and communications security problem now, not just a geopolitical curiosity.

Alex: And it connects to a broader AI governance theme we're seeing this week. OpenAI's legal counsel argued that AI labs shouldn't be liable when their agents autonomously commit cybercrimes. Their position is essentially: no intent, no liability, and safety testing contexts should be considered.

Jordan: Which is a remarkable position to take in the same week you're reporting that state actors are using your platform for high-severity influence operations. I'm not a lawyer, but from a risk perspective, the liability gap this creates is real. If you're deploying agentic AI in your enterprise and that agent takes an action that violates law in another jurisdiction, OpenAI's position is that's your problem, not theirs.

Alex: So review your AI vendor contracts. Look at the indemnification language. If your vendor is explicitly arguing in public that they bear no liability for agent behavior, you need to make sure your contracts don't silently accept that position. And the PCI SSC guidance that dropped this week reinforces this. They're now calling for human approval of any AI agent action that touches cardholder data. It's advisory today, but the direction is clear.

Jordan: Let's shift to ransomware, because the numbers are stark. Comparitech recorded 2,627 claimed ransomware attacks in Q3 2026. That's a new all-time quarterly record.

Alex: And the sector distribution matters for board conversations. Finance, technology, healthcare, education, all saw significant volume increases. If you're heading into budget season, and most of us are, this is the data point you bring to the table. The threat environment is not stabilizing. It's accelerating.

Jordan: And then there's the Qilin arrest. Germany arrested a Russian national, a core member of the Qilin ransomware group, following extradition from Japan. The Japan-to-Germany extradition pipeline is notable. It shows law enforcement cooperation is expanding beyond the usual Five Eyes channels.

Alex: But let's be realistic. Qilin remains active. They've hit healthcare and critical infrastructure. One arrest doesn't dismantle the operation. What it does do is add friction. It makes recruitment harder. It makes operators think twice about travel.

Jordan: The arrest pairs interestingly with the MonsterCloud indictment. Zohar Pinhasi, CEO of a ransomware recovery firm, was indicted for allegedly paying ransoms to attackers while telling clients he was using a proprietary decryption service. He pocketed millions in the spread.

Alex: This one should hit home for every CISO who's ever engaged a third-party recovery vendor during an incident. When you're in crisis mode, you're vulnerable to exactly this kind of scheme. Someone shows up, says they can decrypt your data, quotes you a fee, and behind the scenes they're just paying the ransom and marking it up.

Jordan: The due diligence lesson is straightforward. Your IR vendor contracts need transparency obligations around ransom payments. You need to know if a payment is being made, to whom, and under what legal framework. Because if your vendor pays a ransom to a sanctioned entity on your behalf without disclosure, you're potentially on the hook for OFAC violations.

Alex: Audit your IR retainer agreements. If they don't explicitly address this, fix it before you need them.

Jordan: Let's talk vulnerabilities. Two critical ones this week that need weekend attention. First, CVE-2026-102255 in SonicWall SMA1000 appliances. Maximum severity. Patched Tuesday. Actively exploited by Thursday. That's a 72-hour window.

Alex: SMA1000s are everywhere. They're your VPN concentrators, your zero-trust network access gateways. If you have these deployed, this is an emergency patch event. Not next sprint. This weekend.

Jordan: Second, CVE-2026-107406 in Citrix NetScaler ADC and Gateway. Memory overflow leading to remote code execution or denial of service, specifically in SAML-configured deployments. Citrix issued an emergency advisory, which they don't do casually.

Alex: NetScaler is the front door for a lot of large enterprises. If you're using it for SSL VPN or as an application delivery controller with SAML authentication, which is most enterprise deployments at this point, prioritize this patch. The blast radius on a compromised NetScaler is enormous.

Jordan: And one more story that deserves attention. Researchers from Modat and the Dutch NCSC found over 8,500 internet-exposed OT and ICS systems at wind and solar installations across 35 European countries. Some of these include turbine control interfaces with operational commands, including a stop button, accessible to anyone with a browser. No authentication required.

Alex: This is a supply chain risk story for any enterprise with energy sector dependencies. If your operations rely on European renewable energy providers, their security posture is now your risk. Spain, Greece, Italy, and Germany account for most of the exposed systems, and the researchers say the actual number is likely higher.

Jordan: It's also a reminder that the OT security gap in newer infrastructure, not legacy SCADA, but modern renewable energy systems, is genuinely alarming. These systems were designed for remote management and deployed at speed to meet climate targets. Security was an afterthought.

Alex: All right, let's look at the week as a whole. Jordan, what's the thread you're pulling on?

Jordan: The theme is consequences catching up. Flax Typhoon's infrastructure gets seized. A Qilin operator gets arrested across two continents. A ransomware recovery grifter gets indicted. AI influence operations get exposed and rated at unprecedented severity. The enforcement and accountability mechanisms are becoming more aggressive. But the underlying threats, the record ransomware numbers, the exposed critical infrastructure, the AI liability gaps, those are all still accelerating. So we're in this strange moment where the response is getting sharper but the problem is getting bigger at the same time.

Alex: I'd add that for CISOs heading into Q4 budget conversations, this week gives you everything you need. Record ransomware volume for quantification. Active exploitation of perimeter appliances for urgency. AI governance gaps for strategic investment. And critical infrastructure exposure for supply chain risk arguments. Use it.

Jordan: And patch your SonicWalls and NetScalers before Monday. Seriously.

Alex: That's the show for today. Show notes and links to every story we covered are at cleartext.fm. Have a good weekend, everyone. We'll see you Monday.

Jordan: Stay sharp.