All articles by The Orca Security Team

Amazon S3 (Simple Storage Service) is a service that provides object storage from anywhere in the world through the AWS...

Unencrypted sensitive data was found on a cloud asset. If this information is exposed to cybercriminals, it could lead to...

Ensure that your S3 buckets content cannot be listed by AWS authenticated accounts or IAM users in order to protect...

Ensure that your S3 buckets cannot be accessed for write actions by AWS authenticated accounts or IAM users in order...

The bucket's ACL Grants allow global Read access. This allows unknown and unauthenticated users to access all the data stored...

Ensure that your S3 buckets are not publicly accessible via bucket policies in order to protect against unauthorized access. Allowing...

GCP MemoryStore is a service that allows you to construct your apps by using open source caching engines: Memcached or...

Amazon Relational Database Service (RDS) allows setting up a relational database instance in the cloud. RDS snapshot is a point-in-time...

The EMR Cluster {AwsEmrCluster} is publicly accessible. Emr cluster should only be accessible from private endpoints in order to prevent...