Web-service unpatched
We have found that the web-service {service_detailed} on the system was not patched for several months. It is important to...
All articles by Orca Security
Defender for Cloud: Antimalware file exclusion and code execution in your virtual machine
File excluded from your antimalware scanner at the same time as code was executed via a custom script extension on...
Defender for Cloud: Fileless Attack Technique Detected
The memory of the process specified below contains evidence of a fileless attack technique. Fileless attacks are used by attackers...
Defender for Cloud: Executable found running from a suspicious location
Analysis of host data detected an executable file on host that is running from a location in common with known...
Ensure the PostgreSQL Audit Extension (pgAudit) is enabled (Automated)
Basic statement logging can be provided by the standard logging facility with log_statement = all. This is acceptable for monitoring...
AWS EC2 instance allows public ingress access on Oracle port 1521
Oracle TNS(Transparent Network Substrate) port - 1521 is used by Oracle client to connect to the database server over Oracle...
AWS EC2 instance allows public ingress access on Redis port 6379
Redis is a caching service to store application related information which is sensitive and confidential. Allowing inbound traffic from external...
Cloud function without HTTPS Trigger
GCP cloud function {GcpCloudFunction} was detected running without HTTPS trigger, allowing unauthenticated invocation by default.
AWS EC2 instance allows public ingress access on LDAP port 389
LDAP (Lightweight Directory Access Protocol) is used to connect to directory services for user authentication and retrieval. Allowing Inbound traffic...
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.