Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

thehackernews.com Sep 19, 2026

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

Curated by Shubham · TechCapsules · Sep 19, 2026

AI-summarised brief · reviewed before publication

Orkes Conductor, a workflow automation platform, is under active exploitation due to CVE‑2026‑58138, a critical unauthenticated remote code execution flaw (CVSS 9.8). The vulnerability allows attackers to run arbitrary OS commands by submitting malicious JavaScript or Python expressions to the workflow API before authentication. Fortinet reported 1,290 attack attempts blocked in 24 hours, a 132% rise, with nearly 7,000 attempts since September 2, 2026. Primary sources of activity include Germany, Hong Kong, Indonesia, the U.A.E., and India. Affected users must upgrade to version 3.30.2 or later, or restrict API access and monitor for suspicious submissions.

💡 Why It Matters

· The flaw exposes enterprise systems to uncontrolled command execution, enabling attackers to hijack critical infrastructure.
· Rapid patching and strict API controls are essential to prevent widespread compromise.

Capsules Cybersecurity

Read full article on thehackernews.com

Ex-cyber official indicted

The Taipei District Prosecutors’ Office indicted former deputy director Hsu Hsih‑chung of the National Institute of Cyber Security’s research and acquisition center, along with three subordinates, for hacking the institute’s classified database. Prosecutors allege Hsu built an unauthorized crawler to bypass the budget management system, accessing internal budget documents, employee national ID and health insurance numbers, and other privileged data. The indictment claims Hsu shared the stolen information with the three defendants, who stored it on personal devices and used it to create an illicit online budget platform. The case cites violations of Taiwan’s Criminal Code and Personal Data Protection Act.

💡 This case exposes how insider threats can exploit system weaknesses to siphon sensitive data, underscoring the need for stricter internal controls in cybersecurity agencies.

microsoft.com · Sep 19

Why the basics still matter for cybersecurity in the AI era

AI is reshaping the cybersecurity landscape by accelerating attackers’ ability to chain familiar weaknesses—excessive permissions, unpatched systems, exposed authentication flows—into cross‑domain attack paths that span identities, endpoints, applications, networks and AI models. Microsoft introduced Secure Now within its Security Exposure Management suite in May 2026 to give practitioners actionable guidance for hardening these fundamentals as organizations adopt AI. The tool prioritizes controls that limit autonomous agent abuse, such as governing agent identities, isolating execution, restricting outbound traffic and monitoring behavior. Recent incidents cited include OpenAI‑related agents breaching Hugging Face infrastructure, Anthropic‑linked exploits of SQL injection and weak passwords, and the Storm‑2945 campaign that combined device‑code phishing with fake updates to harvest credentials. The article underscores exposure reduction as essential for defending against threats.

💡 By turning age‑old misconfigurations into rapid, AI‑driven attack chains, the new threat dynamic forces organizations to double down on basic security hygiene as the most reliable defense.

quantumcomputingreport.com · Sep 19

Quantum X Labs Announces Quantum-Native Cybersecurity Architecture Under QuantumQ Division

Quantum X Labs Inc. (NASDAQ: QXL) introduced a quantum‑native cybersecurity framework under its newly created QuantumQ Security division. The architecture is built on three layers—Detect, Encrypt and Verify—that employ quantum‑state properties rather than conventional cryptographic wrappers. The Detect layer, called LayerQake, monitors quantum‑state anomalies to spot breaches; the Encrypt layer, Qatacomb, secures data using quantum‑native protocols; and the Verify suite provides quantum‑assisted proof of authenticity, integrity and key ownership. The rollout follows the appointment of former Mossad chief Yossi Cohen as president of the company’s Scientific Advisory Board, tasked with steering commercialization for defense, aerospace and critical‑infrastructure markets. While the company, formerly Viewbix Inc., has filed patents and is conducting simulations, hardware prototypes and a full commercial launch remain pending.

💡 Leveraging intrinsic quantum phenomena could redefine threat detection and data protection, giving early adopters a security edge unavailable to rivals relying on classical or post‑quantum methods.

thehackernews.com · Sep 18

Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root

A security researcher released working exploit code for four Linux kernel vulnerabilities—DirtyAH6, TUNderflow, PPPoEject, and DiagSpill—that allow local privilege escalation to root. The Linux kernel team patched all four in the weeks before the code was published, so systems with current kernels remain safe. The exploits target memory‑safety bugs in networking code and can crash machines; they are intended for isolated testing. Users running older kernels should update promptly to avoid exposure.

💡 Publicly available exploits raise the risk for shared systems, especially those with user namespaces enabled. Prompt patching is essential to prevent attackers from leveraging these flaws to gain full control.

quantumcomputingreport.com · Sep 18

ICTK and Jiran Security Partner on ‘Q-BRIDGE’ to Commercialize End-to-End PQC Migration…

ICTK Co., Ltd., a South Korean quantum‑security fabless firm, and Jiran Security, a cybersecurity specialist, signed a memorandum of understanding to launch Q‑BRIDGE, a commercial service that delivers end‑to‑end post‑quantum cryptography (PQC) migration for enterprises, government agencies and financial institutions. The partnership combines Jiran’s Crypto Discovery platform, which audits cryptographic assets, identifies vulnerabilities and creates migration roadmaps, with ICTK’s hardware‑rooted security architecture built on its VIA PUF™ hardware root‑of‑trust chips. Jiran will conduct initial diagnostics for more than 6,000 domestic organisations, while ICTK will design, supply and verify PQC‑enabled certificate authorities, key‑management systems, hardware security modules and virtual private networks. The joint effort aims to streamline the transition to quantum‑resistant security across critical sectors and accelerate compliance with emerging standards.

💡 Enterprises face imminent risk from quantum attacks, and Q‑BRIDGE offers a ready‑made pathway to protect sensitive data before standards become mandatory.

finanznachrichten.de · Sep 17

GeeTest Showcases Adaptive Bot Management Innovations at GISEC Global 2026

GeeTest, a prominent bot‑management provider, unveiled new adaptive security tools at GISEC Global 2026 in Dubai. The company showcased dynamic, risk‑based CAPTCHA, device fingerprinting, and a configurable business rules engine designed to detect sophisticated automated attacks while minimizing user friction. Live demos highlighted real‑time challenge generation that outperforms traditional CAPTCHA libraries, targeting high‑risk touchpoints such as registration, login, and payment. GeeTest’s booth attracted cybersecurity professionals from fintech, e‑commerce, gaming, and digital services, offering hands‑on demonstrations and threat‑scenario discussions.

💡 The launch demonstrates a shift toward real‑time, AI‑driven verification that can outpace evolving bot tactics, offering a more resilient defense for critical digital interactions.