Cloud Security Fundamentals
What Is Cloud Detection and Response (CDR)?
Table of contentsKey TakeawaysWhat Is Cloud Detection and Response?Why Do You Need Cloud Detection and Response?Reducing Alert FatigueQuick Threat Analysis...
Blog
‘Orca Watch’ Series
Linux kernel vulnerability enables local theft of SSH host keys and /etc/shadow
Table of contentsExecutive SummaryVulnerability DetailsWhy This MattersAffected Systems and Proof of Concept (PoC)Recommended MitigationExploitation Risk and Threat OutlookPotential ImpactHow can...
‘Orca Watch’ Series
18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated DoS and Potential RCE
Table of contentsTechnical Root CauseAffected Products and VersionsRecommended ActionExploitation Risk and Threat OutlookPotential Business ImpactUPDATE May 15, 2026How can Orca...
Data and AI Security
Announcing Cloud Security Agent Skills for Orca’s MCP Server
Table of contentsOrca’s Unified Data Model Drives Reliable AI WorkflowsWhat Connecting the Orca MCP Server DoesAgent Skills to Operationalize Orca...
‘Orca Watch’ Series
TanStack and 160+ npm/PyPI Packages Compromised in Supply Chain Worm Attack
Table of contentsKey TakeawaysExecutive SummaryHow the Exploit Chain WorkedHow the Worm PropagatesThe gh-token-monitor WiperScope of CompromiseImmediate Mitigation StepsWhy This Attack...
‘Orca Watch’ Series
Dirty Frag: Linux Kernel Vulnerability Chain Enables Local Privilege Escalation to Root
Table of contentsExecutive SummaryAbout the vulnerability: CVE-2026-43284 and CVE-2026-43500Risk impactAffected systemsMitigation recommendationsRecommended actions:How can Orca help? Executive Summary A Linux...
‘Orca Watch’ Series
Critical Apache HTTP Server HTTP/2 Vulnerability Could Enable Remote Code Execution
Table of contentsAbout the Vulnerability: CVE-2026-23918Risk ImpactMitigation RecommendationsHow can Orca help? A high-severity vulnerability (CVE-2026-23918, CVSS 8.8) was disclosed affecting...
Application Security
Skill Issues: How We Discovered Supply Chain Attack Vectors in an AI Agent Skills Marketplace
Table of contentsExecutive summaryBreaking Down Agent SkillsMalicious Skill: A Real-World ExamplePrimitive 1: Weaponizing Malicious AI Agent Skills via Artificial Install...
Cloud Security Fundamentals
What Is an Incident Response Plan?
Table of contentsKey TakeawaysHow an Incident Response Plan WorksWhat Types of Cyberattacks Require an Incident Response Plan? What Are the Benefits...