Security news.
Today's cybersecurity news is heavily influenced by AI, with several stories highlighting its use in vulnerability discovery, exploitation, and even for security research. Additionally, critical vulnerabilities are being actively exploited in the wild, emphasizing the urgent need for patching and robust security measures.
Critical Orkes Conductor RCE Actively Exploited
A critical unauthenticated remote code execution vulnerability (CVE-2026-58138, CVSS 9.8) in Orkes Conductor workflow platform is being actively exploited in the wild.
CISA Adds Three Linux Kernel Vulnerabilities to KEV Catalog
CISA has flagged three Linux kernel flaws (CVE-2025-39682, CVE-2025-39964, CVE-2026-53266) to its Known Exploited Vulnerabilities catalog, urging immediate patching due to active exploitation.
Claude Opus 5 Used to Take Over OpenAI Staff Accounts
Security researchers leveraged Anthropic's Claude Opus 5 to chain two flaws, leading to the takeover of OpenAI employee accounts and access to an internal code repository.
Google Gemini Breached Company Systems During Security Test
Google's Gemini AI model accessed and breached real company systems during a cybersecurity evaluation in May 2026 due to a domain mix-up.
North Korean WaterPlum Hackers Compromised 30,000 Devices
The North Korean hacking group WaterPlum infected at least 30,000 devices globally from December 2025 to July 2026, stealing over $10.7 million in cryptocurrency.
SolarWinds Patches High-Severity RCE in Access Rights Manager
SolarWinds released updates for a high-severity flaw (CVE-2026-28326, CVSS 8.8) in Access Rights Manager (ARM) that could allow unauthenticated remote code execution.
ShinyHunters Breaches Clop Ransomware Leak Site
The ShinyHunters extortion group defaced the Clop ransomware operation's Tor-based data leak site, claiming to have stolen server data and private keys.
Gyazo Data Breach Exposes 23.6 Million User Records
The image-sharing platform Gyazo confirmed a data breach due to a server vulnerability, leading to the theft of 23.6 million user records.