Research Pod

Table of contentsExecutive SummaryVulnerability DetailsWhy This MattersAffected Systems and Proof of Concept (PoC)Recommended MitigationExploitation Risk and Threat OutlookPotential ImpactHow can...

Table of contentsKey TakeawaysExecutive SummaryHow the Exploit Chain WorkedHow the Worm PropagatesThe gh-token-monitor WiperScope of CompromiseImmediate Mitigation StepsWhy This Attack...

Table of contentsExecutive SummaryAbout the vulnerability: CVE-2026-43284 and CVE-2026-43500Risk impactAffected systemsMitigation recommendationsRecommended actions:How can Orca help? Executive Summary A Linux...

Table of contentsAbout the Vulnerability: CVE-2026-23918Risk ImpactMitigation RecommendationsHow can Orca help? A high-severity vulnerability (CVE-2026-23918, CVSS 8.8) was disclosed affecting...

Table of contentsExecutive summaryBreaking Down Agent SkillsMalicious Skill: A Real-World ExamplePrimitive 1: Weaponizing Malicious AI Agent Skills via Artificial Install...

A critical vulnerability (CVE-2026-3854, CVSS 8.7) was disclosed affecting GitHub Enterprise Server and GitHub.com, allowing attackers to execute arbitrary commands...

A Linux kernel vulnerability, CVE-2026-31431 dubbed Copy Fail, allows an unprivileged local user to gain root by corrupting the page...

Table of contentsWhat is the Xinference PyPI Package Compromise ?Assessing the Impact: Credential Theft and Full Environment TakeoverHow to Mitigate...

Table of contentsWhat is the Checkmarx Supply Chain Compromise ?Impact of the TeamPCP Campaign: Credential Theft and Lateral MovementMitigation RecommendationsHow...