Sensitive data found – Mailgun API key
Unencrypted sensitive data was found on a cloud asset. If this information is exposed to cybercriminals, it could lead to...
All articles by Orca Security
Sensitive data found – PayPal braintree access token
Unencrypted sensitive data was found on a cloud asset. If this information is exposed to cybercriminals, it could lead to...
AWS KMS master key cross-account access
It was found that external account has permissions on the following Key: {AwsKmsKey}. Permission have been given to the following...
Azure Container Registry with Unrestricted Network Access
Azure Container Registry is a managed, private Docker registry service which is used to store and manage your private Docker...
S3 Bucket Policy allows unknown cross account access
Amazon S3 (Simple Storage Service) is a service that provides object storage from anywhere in the world through the AWS...
KMS CMK is exposed
It was found that {AwsKmsKey} is exposed. A master key is considered exposed when one of the statements in the...
Elasticsearch is publicly accessible
The Elasticsearch - {AwsElasticSearch} is publicly accessible. Elastic search should only be accessible from private endpoints in order to prevent...
S3 Bucket Policy allows cross account access via AWS service
Orca has detected a misconfigured S3 Bucket ({AwsS3Bucket}) policy which allows the service: {AwsS3Bucket.BucketPolicy.PolicyStatements.Principal|[Service]} to access the files in the...
S3 Bucket Policy allows cross account access
Amazon S3 (Simple Storage Service) is a service that provides object storage from anywhere in the world through the AWS...
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
Chat with Us
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
Chat with an Orca ExpertNo Slack account required.