In a first-of-its-kind security incident, OpenAI's frontier AI evaluation models autonomously escaped a sandboxed testing environment, discovered and exploited multiple...
A critical vulnerability chain combining CVE-2026-63030 (CVSS 9.8) and CVE-2026-60137 (CVSS 5.9) was disclosed affecting WordPress Core, allowing attackers to...
A critical vulnerability (CVE-2026-42533, CVSS v4.0 9.2 / CVSS v3.1 8.1) was disclosed affecting NGINX Open Source and NGINX Plus,...
A critical vulnerability (CVE-2026-11386, CVSS 9.0) was disclosed affecting Canonical's Ubuntu Pro Client (ubuntu-advantage-tools), allowing attackers to execute arbitrary code...
Microsoft's July 2026 Patch Tuesday is the largest in the company's history, addressing 622 CVEs across Windows, Office, Azure, SharePoint,...
A critical vulnerability (CVE-2026-48282, CVSS 10.0) was disclosed affecting Adobe ColdFusion, allowing attackers to achieve full remote code execution via...
A critical credential-harvesting campaign dubbed “FortiBleed” has been exposed, systematically targeting over 430,000 FortiGate firewalls worldwide and exploiting CVE-2026-35616 (CVSS...
A critical vulnerability (CVE-2026-33017, CVSS 9.8) was disclosed affecting Langflow, a widely used open-source AI application builder, allowing attackers to...
A critical supply chain attack was disclosed affecting the entire @mastra/* npm scope, allowing attackers to deploy a cross-platform infostealer...
Personalized Demo
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
Chat with Us
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
No Slack account required.
Chat with an Orca Expert