When #FlaxTyphoon reports emerged, we examined whether its activity was detectable within AIDE, GCA’s #cybersecurity intelligence platform that monitors global network traffic, detects potential threats, and delivers actionable insights to improve network security.
Our analysis revealed behavioral signals and infrastructure overlaps consistent with Flax Typhoon’s tactics—including VPN tunneling, web shell traffic, and credential-based reconnaissance—across sensors located in Taiwan, the United States, Europe, and East Asia.
Key action items for every network operator to take to reduce risk and strengthen network integrity:
Monitor for unauthorized access attempts and abnormal service behavior.
Strengthen routing security by implementing Mutually Agreed Norms for Routing Security (MANRS) best practices and validating route origins with #RPKI.
Join collaborative intelligence efforts like AIDE, where shared visibility enables shared defense—and actionable data drives real-world mitigation.
Read more in Meghal Donde's insightful and data-packed post: https://globalcyberalliance.org/flax-typhoon-aide/
We’re bringing some of our top training courses to 
26 May – 
Full-day, hands-on & expert-led.
