Featured

Digital illustration of a cracked, broken security shield emitting a bright pink glow as a massive stream of credentials and padlocks are harvested and sucked into a swirling black hole vortex with a neon pink rim.
Featured

FortiBleed Campaign Harvests 110M+ Credentials, Fuels Ransomware Operations

A critical credential-harvesting campaign dubbed “FortiBleed” has been exposed, systematically targeting over 430,000 FortiGate firewalls worldwide and exploiting CVE-2026-35616 (CVSS 9.1) in FortiClient EMS, enabling attackers to gain admin access, deploy packet sniffers, and fuel ransomware operations at scale. Due to the massive scope and active exploitation, immediate patching and credential rotation are required. Users …

  • July 02, 2026
  • By The Orca Research Pod

Latest

All Latest

Explore

Discovered Vulnerabilities

Digital illustration of a winding data stream that splits into two paths, one continuing with glowing blue particles and the other filled with glowing red particles.

How Orca Traced an nginx Flaw to 1.45 Million Tengine Servers All Running Vulnerable Code

TL;DR When a critical nginx vulnerability hits the headlines, security teams patch nginx. But what if the same vulnerable code is running somewhere they’re not looking? While the rest of the industry was busy patching nginx, Orca’s Threat Research Team was asking a different question and the answer led us straight to Tengine.  Tengine, Alibaba’s …

  • June 16, 2026
  • By Daniel Ufliand & Yonatan Levi
Cyber-themed illustration of a Linux SMB3 server with a broken padlock, symbolizing a missing lock vulnerability in ksmbd.

CVE-2026-23226: How a Missing Lock in ksmbd’s Channel List Exposes Your Linux SMB3 Server

  • April 08, 2026
A stylized graphic of a pickle smashing into a pipeline

Pickle in the Pipeline: Critical RCE Vulnerabilities in SGLang’s LLM Serving Framework

  • March 11, 2026
Stylized 3D visualization of an active cybersecurity exploit featuring glowing red computer code fragments and a central target aperture.

Actively Exploited Chrome Zero-Day May Impact Enterprise, Developer, and Automation Environments

  • February 23, 2026
A stylized graphic of ominous clouds with a digitized skull on top

RoguePilot: Exploiting GitHub Copilot for a Repository Takeover

  • February 16, 2026
All Discovered Vulnerabilities

‘Orca Watch’ Series

All ‘Orca Watch’ Series

Technical Deep Dives

All Technical Deep Dives

Thought Leadership

All Thought Leadership

In the News

All In the News

2026 State of Application Security Report: When Development Velocity Outpaces Security

Get the Report