All articles by Orca Security

Ensure SSL/TLS Certificates are Using 2048/4096 Bit Encryption Keys

It was found that {AwsKmsKey} could not be rotated. Ensure KMS key rotation feature is enabled for all your Customer...

AWS Secrets Manager helps you to store and protect secrets needed to access your applications, services, and IT resources. We...

API keys are used for authentication, they are simple encrypted strings that identify an application without any principal. Project '{CloudAccount}'...

API keys are used for authentication, they are simple encrypted strings that identify an application without any principal. API key...

API keys are used for authentication, they are simple encrypted strings that identify an application without any principal. API key...

Suspicious traffic was found by AWS GuardDuty service on EC2 instance {AwsEc2Instance} ({AwsEc2Instance.InstanceId}) detected with malware by Orca. AWS GuardDuty...

Brute force attempts were detected by AWS GuardDuty service on the Internet facing Unpatched Windows EC2 instance {AwsEc2Instance} ({AwsEc2Instance.InstanceId}). AWS...

GuardDuty finding was triggered for s3 bucket. It was found that the 'BucketBlockPublicAccessDisabled' feature was disabled for {AwsS3Bucket} bucket. This...