Command Your Cloud at Mach Speed: Find Orca Security at RSAC 2026
RSAC is one of our favorite weeks of the year. A chance to get off Zoom, get into the same...
Blog
‘Orca Watch’ Series
HackerBot-Claw: An AI-Assisted Campaign Targeting GitHub Actions Pipelines
Table of contentsExecutive summaryIntroductionWhy GitHub Actions Are a New Frontier for AttackersWhat Happened?What Is the Impact?How HackerBot-Claw Works (Attack Chain)Scan...
Research
Post-Exploitation at Scale: The Rise of AILM
AILM (AI-Induced Lateral Movement) is a new post-exploitation attack-vector where the pivot mechanism isn’t a subnet or an identity, but...
Data and AI Security
Top 5 Takeaways from the Webinar on Agentic AI and Cloud Native Protection
In the webinar titled "Runtime Reinvented: How Agentic AI is Transforming Cloud Native Protection," experts from Orca Security and Software...
Container and Kubernetes
Unlocking Kubernetes Security: Insights from Our Session at SANS Kubernetes & CNAPP Forum
In the intricate world of cloud-native technologies, Kubernetes stands as a formidable force, reshaping the way applications are managed and...
‘Orca Watch’ Series
Four Critical SolarWinds Serv-U RCE Flaws Enable Root Access
SolarWinds has released Serv-U 15.5.4 to address four critical vulnerabilities — CVE-2025-40538, CVE-2025-40539, CVE-2025-40540, and CVE-2025-40541 (CVSS 9.1) — that...
Application Security
The Future of AppSec: AI, Context, and Action
Key takeaways about AI in AppSec: Anthropic's integration of Claude into application security signals a major shift where AI is...
Discovered Vulnerabilities
Actively Exploited Chrome Zero-Day May Impact Enterprise, Developer, and Automation Environments
A high-severity vulnerability (CVE-2026-2441, CVSS pending vendor confirmation) has been disclosed in Google Chrome and the Chromium engine, allowing attackers...
Cloud Security Learning
Building Application Security from the Ground Up: An Organizational Approach
This blog post complements our guide on What is Application Security? by diving deep into the organizational foundations required to...
