All articles by Orca Security

It is recommended to configure your instance to not use the default Compute Engine service account because it has the...

Orca has detected a IAM Role which can be assumed by an entity which is not a member of the...

We found that your Amazon Machine Image (AMI) {AwsEc2Image} is public. A public AMI is available for use by all...

Ensure that your S3 buckets content cannot be publicly listed in order to protect against unauthorized access. An S3 bucket...

AWS IAM users can access AWS resources using different types of credentials, such as passwords or access keys. It is...

Ensure that Amazon IAM roles used to establish a trusted relationship between your AWS account and a third-party entity (also...

This report illuminates major gaps in virtual appliance security, finding many are being distributed with known, exploitable, and fixable vulnerabilities

The vast majority of breaches occur when assets aren’t fully protected by existing security solutions. Use these 3 metrics for...

Traditional security procedures and safeguards are often bypassed in the cloud. Be especially vigilant in monitoring these 6 cloud security...