All articles by The Orca Security Team

The Compute Engine default service account is created with the primitive editor role within the project scope. These roles are...

Orca has detected that the role {AwsIamRole} was granted full administrative privileges on the account. These privileges grant them the...

The snapshot {AwsEc2EbsSnapshot} is not encrypted.

In the storage account creation process, there are three connectivity methods: Public for all networks, Public for specified networks or...

The API server of {GcpGkeCluster} is publicly accessible from anywhere on the internet. This leaves the Kubernetes API server exposed...

It was detected that the read/write autoscaling of DynamoDB table ({AwsDynamodbTable}) is disabled. Amazon DynamoDB auto scaling uses the AWS...

We have found that the web-service {service_detailed} on the system was not patched for several months. It is important to...

File excluded from your antimalware scanner at the same time as code was executed via a custom script extension on...

The memory of the process specified below contains evidence of a fileless attack technique. Fileless attacks are used by attackers...