Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws

The document is a security-news feed covering multiple high-impact vulnerabilities, active exploitation, malware campaigns, supply-chain compromises, AI-agent risks, and state-linked threat activity. Notable items include actively exploited unauthenticated RCE in Orkes Conductor (CVE-2026-58138), critical flaws in Docker Sandboxes and Unbound DNSSEC, a CVSS 10 Azure AI Foundry privilege-escalation flaw, SolarWinds ARM RCE, Linux kernel vulnerabilities added to CISA KEV, npm-based information stealers, repository theft following a supply-chain compromise, and backdoors attributed to Iran- and‍/