All articles by Orca Security

It was found that the API server contains an insecure bind address. Setting an insecure bind address allows anyone to...

Filestore instances are fully managed NFS file servers on Google Cloud for use with applications running on Compute Engine virtual...

Domain Name System Security Extensions (DNSSEC) in Cloud DNS enables domain owners to take easy steps to protect their domains...

DNSSEC algorithm numbers in this registry may be used in CERT RRs. Zone signing (DNSSEC) and transaction security mechanisms (SIG(0)...

Secure Sockets Layer (SSL) policies determine what port Transport Layer Security (TLS) features clients are permitted to use when connecting...

Amazon S3 provides a variety of no, or low, cost encryption options to protect data at rest. Encrypting data at...

Using MFA-protected S3 buckets will enable an extra layer of protection to ensure that the S3 objects (files) cannot be...

DynamoDB table {AwsDynamodbTable} does not have point in time recovery enabled. Point in time recovery enables automatic backups of the...

{AzureDisk} is not encrypted with customer managed key (CMK). Encrypting managed disks ensures that the entire content is fully unrecoverable...