Kubernetes CRD Abstraction Risks in kro
Executive Summary: The Orca Research Pod has discovered CVE-2025-48710 in kro (Kube Resource Orchestrator) where an attacker could introduce a malicious CustomResourceDefinition...
Executive Summary: The Orca Research Pod has discovered CVE-2025-48710 in kro (Kube Resource Orchestrator) where an attacker could introduce a malicious CustomResourceDefinition...
GenAI has dramatically changed how cloud native applications are built and deployed, leading to both a shift and opportunities for...
State and federal government agencies today face the dual challenge of modernizing and securing their cloud infrastructure on shrinking budgets...
An ever-increasing number of vulnerabilities, coupled with the widespread use of third-party and open-source software components, makes the work of...
At Orca Security, our mission is to help organizations thrive securely in the cloud. Just like mastering the game of...
Last week we announced a couple of new Orca capabilities: Agentless Reachability Analysis and Dynamic Runtime Reachability Analysis. In this...
The security industry has lived through several iterations of answering the question, “What security issue is most important to resolve?”...
Yesterday, MITRE executives announced that the MITRE CVE database may go dark due to a funding gap starting from today,...
We’re excited to introduce the Orca Bitbucket App, a seamless and native integration that enables security teams to automatically scan...