Data and AI Security
Announcing Cloud Security Agent Skills for Orca’s MCP Server
Table of contentsOrca’s Unified Data Model Drives Reliable AI WorkflowsWhat Connecting the Orca MCP Server DoesAgent Skills to Operationalize Orca...
Blog
‘Orca Watch’ Series
TanStack and 160+ npm/PyPI Packages Compromised in Supply Chain Worm Attack
Table of contentsKey TakeawaysExecutive SummaryHow the Exploit Chain WorkedHow the Worm PropagatesThe gh-token-monitor WiperScope of CompromiseImmediate Mitigation StepsWhy This Attack...
‘Orca Watch’ Series
Dirty Frag: Linux Kernel Vulnerability Chain Enables Local Privilege Escalation to Root
Table of contentsExecutive SummaryAbout the vulnerability: CVE-2026-43284 and CVE-2026-43500Risk impactAffected systemsMitigation recommendationsRecommended actions:How can Orca help? Executive Summary A Linux...
‘Orca Watch’ Series
Critical Apache HTTP Server HTTP/2 Vulnerability Could Enable Remote Code Execution
Table of contentsAbout the Vulnerability: CVE-2026-23918Risk ImpactMitigation RecommendationsHow can Orca help? A high-severity vulnerability (CVE-2026-23918, CVSS 8.8) was disclosed affecting...
Application Security
Skill Issues: How We Discovered Supply Chain Attack Vectors in an AI Agent Skills Marketplace
Table of contentsExecutive summaryBreaking Down Agent SkillsMalicious Skill: A Real-World ExamplePrimitive 1: Weaponizing Malicious AI Agent Skills via Artificial Install...
Cloud Security Fundamentals
What Is an Incident Response Plan?
Table of contentsKey TakeawaysHow an Incident Response Plan WorksWhat Types of Cyberattacks Require an Incident Response Plan? What Are the Benefits...
Cloud Security Learning
What Is Cloud Data Security? Risks, Challenges, and 12 Best Practices
Table of contentsKey TakeawaysCore Components of Cloud Data SecurityCloud Data Security and the CIA TriadWhat Are the Challenges of Securing...
‘Orca Watch’ Series
Remote Code Execution in GitHub Enterprise Server via Git Push Injection (CVE-2026-3854)
A critical vulnerability (CVE-2026-3854, CVSS 8.7) was disclosed affecting GitHub Enterprise Server and GitHub.com, allowing attackers to execute arbitrary commands...
‘Orca Watch’ Series
Linux Kernel Bug (Copy.Fail) Enables Local Privilege Escalation to Root (CVE-2026-31431)
A Linux kernel vulnerability, CVE-2026-31431 dubbed Copy Fail, allows an unprivileged local user to gain root by corrupting the page...