All articles by Orca Security

The user {GcpUser} was granted an access to BigQuery as an Admin or Data Owner or Data Editor. This can...

The internet-facing asset {AwsEc2Instance} ({AwsEc2Instance.InstanceId}) was found to have full access to your EC2 resources. Instance Profiles with the AmazonEC2FullAccess...

RBAC is not enabled in {AzureAksCluster}. By enabling and configuring RBAC in your Kubernetes cluster you can grant users, groups,...

The AWS EC2 Instance was found to have full administrative privileges to your account. Instance Profiles with full administrative privileges...

User has roles which allows Privilege escalation, while the user does not have multi-factor authentication activated. If the user will...

Principal has a role assignment that allows privilege escalation. If the principal will be compromised, the entire account can be...

AWS IAM roles can grant access to AWS resources or actions. It is recommended that all roles that have been...

Azure Files exposes settings that let you toggle the SMB protocol to be more compatible or more secure, depending on...

If Double Encryption is enabled, another layer of encryption is implemented at the hardware level before the storage or network...