Resources

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet.

The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution.

“Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote

Related resources

30 June 2026

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

New Microsoft research shows how attackers can hijack AI agents that act on a user’s behalf, using nothing more than a poisoned tool description to make the agent quietly hand over company […]

15 September 2025

Mustang Panda Deploys SnakeDisk USB Worm to Deliver Yokai Backdoor on Thailand IPs

The China-aligned threat actor known as Mustang Panda has been observed using an updated version of a backdoor called TONESHELL and a previously undocumented USB worm called SnakeDisk. “The worm […]

5 August 2026

QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer

Cybersecurity researchers have disclosed what has been described as a “long-standing supply chain attack” on QuickFox, a virtual private network (VPN) and network acceleration tool designed for overseas Chinese users. […]

Friday Squid Blogging: On Squid Egg Sacs

Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws

Resources

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

Related resources

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

Mustang Panda Deploys SnakeDisk USB Worm to Deliver Yokai Backdoor on Thailand IPs

QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer

Links

Enterprise Solutions

SMB Solutions

Contact Us

Follow Us