Cloud Security Learning
Security Visibility: Best Practices for Cloud Security Teams
Key Takeaways Security visibility is coverage plus context: a complete inventory of what you run, and enough relationship data to...
Blog
‘Orca Watch’ Series
WordPress Core Pre-Auth RCE Chain Exploited in the Wild
A critical vulnerability chain combining CVE-2026-63030 (CVSS 9.8) and CVE-2026-60137 (CVSS 5.9) was disclosed affecting WordPress Core, allowing attackers to...
Data and AI Security
AI on Both Sides: Key Takeaways From Cloud Security LIVE 2026
AI security splits into two conversations: stopping attackers who use AI, and using AI to defend faster. At Cloud Security...
Cloud Security Learning
Affordable Government Cloud Security Guide
Affordable government cloud security means meeting NIST SP 800-53, CISA’s Binding Operational Directives (BOD), and compliance mandates without exceeding constrained...
Orca Platform
Security for the Way You Work: Orca Integrates with Claude’s Compliance API
Anyone who can prompt Claude is now a builder. Engineers are writing code with it. Analysts are drafting research with...
Orca Platform
It Was Not a Warning Shot. It Was the First of Many.
Last week Sandy Carter wrote in Forbes that Starbucks is building its own AI-assisted software to replace a Microsoft inventory...
‘Orca Watch’ Series
Critical Heap Buffer Overflow in NGINX Allows Unauthenticated Remote Code Execution
A critical vulnerability (CVE-2026-42533, CVSS v4.0 9.2 / CVSS v3.1 8.1) was disclosed affecting NGINX Open Source and NGINX Plus,...
‘Orca Watch’ Series
Critical Ubuntu Pro Client Vulnerability Enables Root Code Execution Across Cloud Workloads
A critical vulnerability (CVE-2026-11386, CVSS 9.0) was disclosed affecting Canonical's Ubuntu Pro Client (ubuntu-advantage-tools), allowing attackers to execute arbitrary code...
Cloud Security Learning
Cloud Risk Dashboards for Executives: A Practical Guide to KPIs, Examples, and Best Practices
An executive cloud risk dashboard is a real-time visual interface that consolidates security posture, compliance status, and risk severity data...