Featured

Cyber-themed illustration of the Apache feather logo shattering into digital shards, symbolizing the critical CVE-2026-23918 HTTP/2 double-free vulnerability.
Featured

Critical Apache HTTP Server HTTP/2 Vulnerability Could Enable Remote Code Execution

A high-severity vulnerability (CVE-2026-23918, CVSS 8.8) was disclosed affecting Apache HTTP Server, allowing attackers to potentially achieve remote code execution via specially crafted HTTP/2 requests. Due to the potential for server compromise and denial-of-service conditions, immediate patching is strongly recommended. About the Vulnerability: CVE-2026-23918 The issue originates from Apache’s HTTP/2 protocol handling in mod_http2, where …

  • May 08, 2026
  • By Roi Nisimi

Latest

All Latest

Explore

Discovered Vulnerabilities

Cyber-themed illustration of a Linux SMB3 server with a broken padlock, symbolizing a missing lock vulnerability in ksmbd.

CVE-2026-23226: How a Missing Lock in ksmbd’s Channel List Exposes Your Linux SMB3 Server

Overview The Orca Security Research Pod discovered a use-after-free race condition in the Linux kernel’s ksmbd SMB3 server. When two connections share a session over SMB3 multichannel, the kernel can read a freed channel struct – exposing the per-channel AES-128-CMAC signing key and causing a kernel panic. An attacker needs valid SMB credentials and network …

  • April 08, 2026
  • By Igor Stepansky
A stylized graphic of a pickle smashing into a pipeline

Pickle in the Pipeline: Critical RCE Vulnerabilities in SGLang’s LLM Serving Framework

  • March 11, 2026
Stylized 3D visualization of an active cybersecurity exploit featuring glowing red computer code fragments and a central target aperture.

Actively Exploited Chrome Zero-Day May Impact Enterprise, Developer, and Automation Environments

  • February 23, 2026
A stylized graphic of ominous clouds with a digitized skull on top

RoguePilot: Exploiting GitHub Copilot for a Repository Takeover

  • February 16, 2026
A stylized graphic of a distorted pull request from GitHub on top of ominous clouds

Hacking GitHub Codespaces via VS Code Defaults: A Supply-Chain Attack Vector

  • February 04, 2026
All Discovered Vulnerabilities

‘Orca Watch’ Series

All ‘Orca Watch’ Series

Technical Deep Dives

All Technical Deep Dives

Thought Leadership

All Thought Leadership

In the News

All In the News

2026 State of Application Security Report: When Development Velocity Outpaces Security

Get the Report