Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

The Hacker News - Sep 19, 2026

A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution. "Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote

Read full article

More News

Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up

Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up

Google's Gemini model has become the latest artificial intelligence (AI) system to access the internet and break into other companies during a cybersecurity evaluation. The development was first reported by...

Sep 19, 2026See more

CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on September 18. The French security company...

Sep 19, 2026See more

Hummingbird hawk moths and ivy bees: The insects thriving as temperatures rise

Hummingbird hawk moths and ivy bees: The insects thriving as temperatures rise

Hummingbird hawk moths - often mistaken for small birds - are being spotted in the West Midlands.

Sep 19, 2026See more

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The...

Sep 19, 2026See more

Google's Gemini AI hacked three companies in security test

Google's Gemini AI hacked three companies in security test

The AI model accessed the internet and guessed credentials to three websites, a Google official told the BBC.

Sep 19, 2026See more

Anthropic, OpenAI, SpaceXAI, Google face federal antitrust lawsuit over calls to slowdown AI development

Leading artificial intelligence companies Anthropic, OpenAI, SpaceXAI, and Google face allegations of collusion after calls emerged for a coordinated slowdown in AI development, according to a civil lawsuit filed in...

Sep 19, 2026See more

'Time travel' claims erupt after family spots shocking detail in Disneyland photo from the 1960s

'Time travel' claims erupt after family spots shocking detail in Disneyland photo from the 1960s

A granddaughter in Ohio has stumbled on an old family photo that many believe proves that a time traveler visited California nearly six decades ago.

Sep 19, 2026See more

SpaceX to fly more NASA crews to space station under expanded deal

SpaceX to fly more NASA crews to space station under expanded deal

NASA said Friday that the agency had given SpaceX a $946 million contract to fly three more astronaut missions to the International Space Station (ISS), extending the company's crewed flights...

Sep 19, 2026See more

Google’s Gemini breaks out of test environment to hack three external firms: Report

Google’s Gemini hacked three companies in the first known breakout, after the model accessed the internet and breached external systems during an evaluation of its cybersecurity capabilities.

Sep 19, 2026See more

Researchers used Claude to breach OpenAI's internal systems

Researchers used Claude to breach OpenAI's internal systems

A security research company said Friday it managed to break into OpenAI's internal systems using the latest software from Anthropic, exposing how quickly the technology can carry out sophisticated cyberattacks.

Sep 19, 2026See more

China drafts guidelines to strengthen online protection for minors

China drafts guidelines to strengthen online protection for minors

The Cyberspace Administration of China has drafted a set of guidelines to ensure healthy and safe internet use by minors, laying out a series of regulations for relevant service providers.

Sep 19, 2026See more

Tech Now

Adrienne Murray follows NASA scientists in Iceland researching a rare total solar eclipse.

Sep 19, 2026See more

Recommended