Thought Leadership
Beyond the Sticker Price: Understanding the True Cost of Your Security Tools
Beyond the Sticker Price: Understanding the True Cost of Your Security Tools As cyber security leaders, our fundamental mission is...
Blog
Discovered Vulnerabilities
Pickle in the Pipeline: Critical RCE Vulnerabilities in SGLang’s LLM Serving Framework
Table of contentsQuick OverviewCVSS RationaleWhat Is SGLang?Technical AnalysisRoot Cause: Python's pickle on Untrusted Network DataHow Pickle Deserialization Becomes Code ExecutionProposed...
Thought Leadership
New Malware Approaches, Same Key Indicators
Table of contentsKey TakeawaysIntroductionThe Industrialization of MaliceAI as the Producer, and Emerging Director, of MalwareAI-Written MalwareAI-Powered MalwareNo Matter How It’s...
Command Your Cloud at Mach Speed: Find Orca Security at RSAC 2026
RSAC is one of our favorite weeks of the year. A chance to get off Zoom, get into the same...
‘Orca Watch’ Series
HackerBot-Claw: An AI-Assisted Campaign Targeting GitHub Actions Pipelines
Table of contentsExecutive summaryIntroductionWhy GitHub Actions Are a New Frontier for AttackersWhat Happened?What Is the Impact?How HackerBot-Claw Works (Attack Chain)Scan...
Research
Post-Exploitation at Scale: The Rise of AILM
AILM (AI-Induced Lateral Movement) is a new post-exploitation attack-vector where the pivot mechanism isn’t a subnet or an identity, but...
Data and AI Security
Top 5 Takeaways from the Webinar on Agentic AI and Cloud Native Protection
In the webinar titled "Runtime Reinvented: How Agentic AI is Transforming Cloud Native Protection," experts from Orca Security and Software...
Container and Kubernetes
Unlocking Kubernetes Security: Insights from Our Session at SANS Kubernetes & CNAPP Forum
In the intricate world of cloud-native technologies, Kubernetes stands as a formidable force, reshaping the way applications are managed and...
‘Orca Watch’ Series
Four Critical SolarWinds Serv-U RCE Flaws Enable Root Access
SolarWinds has released Serv-U 15.5.4 to address four critical vulnerabilities — CVE-2025-40538, CVE-2025-40539, CVE-2025-40540, and CVE-2025-40541 (CVSS 9.1) — that...