Cloud Risk Encyclopedia Q3 Update: A Useful Resource for Kubernetes Security Risks and Best Practices
Orca has published a new update on Kubernetes security to the Cloud Risk Encyclopedia (CRE), a public resource featuring cloud...
Orca has published a new update on Kubernetes security to the Cloud Risk Encyclopedia (CRE), a public resource featuring cloud...
Basic statement logging can be provided by the standard logging facility with log_statement = all. This is acceptable for monitoring...
Oracle TNS(Transparent Network Substrate) port - 1521 is used by Oracle client to connect to the database server over Oracle...
Redis is a caching service to store application related information which is sensitive and confidential. Allowing inbound traffic from external...
GCP cloud function {GcpCloudFunction} was detected running without HTTPS trigger, allowing unauthenticated invocation by default.
LDAP (Lightweight Directory Access Protocol) is used to connect to directory services for user authentication and retrieval. Allowing Inbound traffic...
The asset {asset_name} ({asset_id}) is configured to use instance metadata service version 1 and 2 (Metadata_HttpToken = {Metadata_HttpTokens}, not enforcing...
Using versioning-enabled S3 buckets will allow you to preserve, retrieve, and restore every version of an S3 object. S3 versioning...
As more businesses have embraced modern cloud platforms like Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure,...