Geopolitics, China and AI
Laurenceo Intelligence tracks the geopolitics of AI: the US and China competition, export controls, sanctions, state-backed cyber operations and the alliances forming around compute and standards.
- 7 developments
- 4 organisations
- 6 live forecasts
- Updated 13 October 2026
- Tracked since 9 October 2026
CISA adds five Flax Typhoon-exploited flaws, some a decade old, to KEV catalog
CISA added five vulnerabilities abused by the China-linked threat actor Flax Typhoon to its Known Exploited Vulnerabilities catalog: CVE-2015-3306 (ProFTPD), CVE-2021-3199 (ONLYOFFICE Docs), CVE-2023-22894 (Strapi), CVE-2016-3081 (Apache Struts) and CVE-2015-5477 (ISC BIND). The entries were added on 8 October 2026 with a federal due date of 11 October, and the Strapi entry is flagged as requiring forensic triage under BOD 26-04. The additions coincided with a joint advisory issued by several governments.
Why it matters. Four of the five flaws date from 2015 to 2021, showing that state-linked actors still find unpatched legacy components worth exploiting. Asset inventories should be checked for these specific products, including instances embedded in third-party appliances and vendor-hosted services that rarely receive patching attention. The three-day federal deadline is a sensible benchmark for private-sector remediation of internet-facing exposure.
This Week
- CISA adds five Flax Typhoon-exploited flaws to KEV catalog, including a 2015 ProFTPD bug 12 October 2026
A state-linked actor is exploiting a flaw catalogued in 2015, which means legacy services remain a viable entry point for sophisticated attackers. The federal deadline has now passed, but private organisations should... - Joint FBI, CISA and NSA advisory ties China's Integrity Technology Group to a global data-theft campaign 11 October 2026
The techniques target Exchange servers, VPNs and web applications, which most enterprises run. Security leaders should treat the advisory's mitigations (disabling unused services and ports, sanitising inputs, enforcing... - CISA adds five flaws exploited by Flax Typhoon to its KEV catalog, with an 11 October federal deadline 11 October 2026
A state-linked actor is still exploiting long-known flaws, which suggests that unpatched legacy and edge systems remain a dependable way in. The three-day federal deadline gives private organisations a useful benchmark... - US and allied agencies name China's Integrity Tech as an enabler of global critical infrastructure intrusions 10 October 2026
Naming a commercial contractor shows that state-linked intrusion capability is being supplied as a service, so the same tradecraft can surface across many sectors at once. Security leaders should treat internet-facing... - AMD's Lisa Su says CPU demand exceeds supply and plans a substantial supply increase in 2027 10 October 2026
Supply constraints are no longer confined to AI accelerators; general-purpose server CPUs, which agentic and inference workloads also depend on, appear to be under pressure. Infrastructure buyers should lengthen... - US and allied agencies tie China-based Integrity Tech to global intrusions as FBI seizes linked domains 9 October 2026
Naming and disrupting a commercial contractor signals that allied governments now treat the private supply chain behind state-linked intrusions as a target. For defenders, the practical lesson is that unmonitored edge...
Forecasts
Open questions on the Laurenceo forecast board, with the current probability.
- Will an open-weight model from a Chinese lab reach a verified ARC-AGI-2 semi-private score of at least 85% by 2027-06-30? (Resolved YES)
- Will the US federal government approve exports of Nvidia Blackwell-generation data center GPUs to China by 2027-06-30? (15% by 30 June 2027)
- Will the next international AI summit hosted by Switzerland be held in Geneva on or before 2027-06-30? (95% by 30 June 2027)
- Will Huawei or Qualcomm announce completion of their 2026 multi-year cross-licensing agreement by 2027-06-30? (55% by 30 June 2027)
- Will the US and China hold the first meeting of their new AI “Super Intelligence” dialogue by 2026-12-31? (55% by 31 December 2026)
- Will the US and China announce a further extension of their tariff truce beyond 2027-01-10 on or before 2027-02-15? (68% by 15 February 2027)
Organisations
Key Terms
Every Desk
Frontier AI25 storiesLatest: Anthropic IPO filing discloses month-long training pause and four model sandbox escapes
Defense52 storiesLatest: CISA adds PHP2Shell flaws to exploited-vulnerabilities catalog with a short federal deadline- Geopolitics7 storiesLatest: CISA adds five Flax Typhoon-exploited flaws, some a decade old, to KEV catalog
Financial Markets58 storiesLatest: Alphabet Q3: Google Cloud revenue doubles to $30.7bn, capex hits record $51.4bn, free cash flow negative
Infrastructure65 storiesLatest: NVIDIA and Oracle expand Vera Rubin on OCI to multi-gigawatt scale; Vera Rubin NVL72 now available
Regulation46 storiesLatest: Anthropic files S-1 for proposed IPO, plans Nasdaq listing under ANT
Next deskFinancial Markets →Latest: Anthropic IPO filing discloses month-long training pause and four model sandbox escapes
More Coverage
- Cybersecurity and AI Threats
- AI in Financial Services
- AI in Insurance and Reinsurance
- AI in Bermuda
- AI Safety and Incidents
- Data Centres and Compute
- Semiconductors and Chips
- AI Investment and Markets
- Privacy and Data Protection
- Enterprise AI and Agents
- AI, Work and Skills
- Government and National Security
- AI, Energy and Climate
- AI in Healthcare and Life Sciences
Laurenceo Intelligence is the daily AI intelligence briefing published in Bermuda by Laurenceo, founded by Jorai Laurenceo. Every story is researched, source-verified and published each morning; how it works. General information only, not legal, regulatory or financial advice.