Company
Cloud security vendor whose agentless platform scans cloud accounts and workloads to build an asset inventory and rank the risks it finds.
Orca Security cut query cost 90%, input tokens 93% and latency 75% in Discovery AI, its natural-language agent for Sonar queries on Amazon Bedrock. The baseline was a one-prompt proof of concept, so the savings transfer only to teams that start from one.
Reality
Checkmarx says function-flag, malicious since July 2025 and downloaded more than 37,000 times, is still on npm with no advisory flagging it. Advisory-based scanners have nothing to match, so finding it means checking lockfiles for the campaign's eight names.
Perspective Coverage
3 publishersReality
CVE-2026-93485 was fixed on September 17 in WordPress 7.1.1. An anonymous comment plants a script, an administrator opens the page, and the script uploads a plugin carrying a web shell. Affected versions go back to 4.7.
Perspective Coverage
5 publishersReality
CISA has rewired the Known Exploited Vulnerabilities catalog to a binding directive issued June 10, 2026. The inclusion criteria are unchanged; the deadlines and the paperwork copying them are not.
Reality
CVE-2026-32475 carries a CVSS of 9.0 and needs nothing more than a published form with a file upload field. Patchstack says version 4.2.2 fixes it.
Perspective Coverage
4 publishersReality
Orca Security found four abuse paths in one of the biggest AI agent skills marketplaces. The install counter accepts unauthenticated requests, and the security audit only reruns once a skill gets popular.
Reality
A security scanner now owns the create, update and retire lifecycle for cloud configuration items. That moves the accuracy of IT's record of record onto whatever the scanner can reach.
Reality
Claudia Buch's 7 July letter gives supervised institutions 116 days to produce named owners, resourcing and timelines, on the ECB's stated view that AI has changed the speed of cyber risk rather than its substance.
Reality
Version 1.1 of the Agentic Security Initiative's guide enumerates T1 through T17, up from fifteen. Cite the version, and stop reviewing agents one tool call at a time.
Reality