Gil Geron, chief executive and co-founder of Orca Security, said finding vulnerabilities is no longer the hard part for enterprise security teams, with the bottleneck shifting to remediation. Orca's 2…
Threat intelligence firm VulnCheck and the Cloud Security Alliance report that attackers exploited CVE-2026-0768, an unauthenticated remote code execution vulnerability in the open-source AI framework…
Aikido Security's 2026 State of AI in Security and Development report found that 90% of organizations using 6-8 security tools experienced an incident, compared with 64% of those using 1-2 tools, and …
Orca Security's 2026 State of AI Security Report, based on Q2 2026 telemetry from over 1,200 production organizations, finds that 81% of organizations running AI packages have at least one known vulne…
Wiz Research disclosed CosmosEscape, a chained vulnerability in Azure Cosmos DB's Gremlin API that allowed a researcher to execute arbitrary code on the shared Gateway and retrieve the primary key for…
Orca Security launched AI AppGen Security and AI Code Security Auditor on July 30, extending its cloud security platform to cover applications built with AI-powered builders like Claude, Supabase, and…
Orca Security announced two new AI-powered capabilities: Orca AI AppGen Security, which discovers and secures AI applications built on platforms like Claude, Supabase, and Lovable, and AI Code Securit…
Orca Security's 2026 State of AI Security Report found that 99.9% of fixable AI vulnerabilities remain unpatched across 1,200+ production cloud environments, with 50% of AI package vulnerabilities now…
Orca Security's 2026 State of AI Security Report found that 99.9% of fixable AI vulnerabilities remain unpatched, with 81.2% of companies running AI packages having at least one known vulnerability. T…
Orca Security's 2026 State of AI Security Report reveals that 99.9% of fixable AI vulnerabilities remain unpatched across over 1,200 production cloud environments, with 81% of organizations running vu…
GitHub now allows pull requests created by github-actions[bot] to trigger CI/CD workflows, but only after a maintainer with write access explicitly approves the PR. The change, effective June 11, fixe…