أخبار البصيرة AI News Intelligence
الأمن السيبراني قيد التحليل بانتظار التحليل الذكي The Hacker News 19 أيلول 2026, 01:18

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution. "Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

لماذا يهم هذا الخبر؟

سيظهر الملخص التحليلي هنا بعد اكتمال معالجة الذكاء الاصطناعي.

سياق الخبر

A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution. "Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote

فتح الخبر الأصلي
تغطية مرتبطة

المزيد من أخبار الأمن السيبراني

Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws الأمن السيبراني

Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws

Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository. The chain began with a bug in the software that runs OpenAI's public help forum and moved through a weakness in OpenAI's own login system. This was security research,

AI 0/10
The Hacker News
اقرأ المزيد ←
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE الأمن السيبراني

SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability. The vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior. "SolarWinds

AI 0/10
The Hacker News
اقرأ المزيد ←
Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up الأمن السيبراني

Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up

Google's Gemini model has become the latest artificial intelligence (AI) system to access the internet and break into other companies during a cybersecurity evaluation. The development was first reported by The Wall Street Journal. The incidents occurred in May 2026 as part of a test run conducted by Israeli company Irregular. The evaluation partner was also involved in similar hacks disclosed

AI 0/10
The Hacker News
اقرأ المزيد ←
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories الأمن السيبراني

CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on September 18. The French security company had kept his GitHub access open. CrowdSec says his laptop was compromised in May's supply chain attack on TanStack, in which malicious versions of TanStack's npm packages stole credentials from

AI 0/10
The Hacker News
اقرأ المزيد ←