Jenkins Vulnerability Estimated to Affect 43% of Cloud Environments
On January 24th, Jenkins, a widely used open source CI/CD automation tool, released a security advisory regarding a new critical...
On January 24th, Jenkins, a widely used open source CI/CD automation tool, released a security advisory regarding a new critical...
Publicly disclosed computer vulnerabilities are compiled into a list called Common Vulnerabilities and Exposures (CVE). To understand the severity of...
Last week, Microsoft revealed that the Russia-based threat actor group known as Midnight Blizzard, Cozy Bear, and APT29 had compromised...
The Orca Research Pod has uncovered a dangerous loophole in Google Kubernetes Engine (GKE) that could allow an attacker with...
Following our discovery of a critical loophole in Google Kubernetes Engine (GKE) dubbed Sys:All, we decided to conduct research into...
Eric Goldstein, the executive assistant director for cybersecurity at the US government’s Cybersecurity and Infrastructure Security Agency (CISA), recently said...
The recent decision by the US Securities & Exchange Commission to require companies to report on cybersecurity risk and “material”...
It’s hard to believe that 2023 is nearing its end. As we look ahead to 2024, the Orca Research Pod...
I recall an incident many years ago – one of those facepalm moments – where a company, in an urge...