CISA and partners warn organizations about data-theft campaign
An October 8 joint advisory describes China-linked actors targeting organizations and provides defensive guidance.
What the record says
CISA, FBI, NSA and international partners released joint advisory AA26-281A on October 8, 2026.
The authoring organizations attribute the described data-theft activity to China-linked actors enabled by Integrity Technology Group and identify U.S. critical-infrastructure sectors among targets.
The advisory provides network defenders with indicators and mitigation guidance, including reducing unnecessary exposed services, strengthening authentication and applying relevant patches.
Source details and supporting locations.
Practical next step
Ask your organization’s security team to review advisory AA26-281A and apply its detection and mitigation guidance to the systems the organization actually uses.
Limits and what is not established
Agency attribution is the assessment reported by the authoring organizations. This record does not establish that a particular organization was compromised. Indicators and software observations require contextual analysis by network defenders.
Sources checked October 10, 2026. Later notices may change instructions or arrangements.
Original sources
Cybersecurity and Infrastructure Security Agency: original information