Research
The Expansion of Malware to the Cloud
Overview of key threats for cloud environments, with a focus on Linux malware, database malware, malicious cryptomining code, and ransomware.
Blog
Orca Platform
Cloud Host Security: Protecting Running and Stopped VMs
This blog post provides a comprehensive overview of why you need cloud VM security, for both running and stopped VMs,...
Research
Key Security Capabilities in Kubernetes
Kubernetes was designed for functionality, not security, but it does include several key settings and policies. Learn more about Kubernetes...
Alicloud OSS Bucket without Access Logging
Alibaba Cloud OSS (Object Storage Service) provides storage service to your files and data in the account. The files are...
Alicloud OSS Bucket is Public
Alibaba Cloud OSS (Object Storage Service) provides storage service to your files and data in the account. The files are...
Research
Google Cloud Storage Explorer: Enumerating Google Cloud’s Bucket Access Permissions
The ‘Google Cloud Platform Storage Explorer’ tool crawls all of your Google Cloud projects and detects which have access to...
Research
Blog: The Orca Security 2022 Cloud Security Alert Fatigue Report
The 2022 Cloud Security Alert Fatigue Report discusses the scale of the cybersecurity alert fatigue problem, its causes and impacts,...
‘Orca Watch’ Series
Cyber Attacks in Russia’s Invasion of Ukraine: Orca Security Research Pod Perspectives
The Orca Security Research Pod has been actively tracking cyber attacks leading up to and occurring as part of Russia’s...
‘Orca Watch’ Series
CVE-2022-0847: Linux Dirty Pipe Local Privilege Escalation Vulnerability
A new critical Linux privilege escalation vulnerability was published under the ID CVE-2022-0847, named “Dirty Pipe.”
