All articles by The Orca Security Team

The following SSH Keys are defined with low level of encryption. This counfiguration might allow key cracking and compromise.

Rotating kms keys regularly helps prevent brute-force attacks enabled by cryptanalysis and limits the number of actual messages vulnerable in...

By Enabling Authentication, every incoming HTTP request passes through it before being handled by the application code. It also handles...

The root account is the highest privileged user in the cloud account. Multi-Factor Authentication (MFA) adds another mechanism of authentication...

An Amazon Relational Database Service (Amazon RDS) DB instance is an isolated database environment running in the cloud. The DB...

A client certificate is a base64-encoded public certificate used by clients to authenticate to the cluster endpoint. Client certificates can...

Basic Authentication allows a user to authenticate to a Kubernetes cluster with a username and static password which is stored...

Expiration time is not set for {AzureKeyVaultSecret}. It is recommended that secrets be rotated in the key vault and set...

The root user account is the most privileged user in an AWS account. MFA adds an extra layer of protection...