Orca Platform
Enhancing the Orca Security Risk Dashboard With an Integrated News Feed
This newest widget is called “From the News” and consists of a news feed of articles in a scrolling format.
Blog
Discovered Vulnerabilities
AutoWarp: Critical Cross-Account Vulnerability in Microsoft Azure Automation Service
AutoWarp is a critical vulnerability in Microsoft Azure Automation Service that allows unauthorized access to other customer accounts using the...
Research
Lateral Movement in Google Cloud: Abusing the Infamous Default Service Account Misconfiguration
How a malicious actor can conduct lateral movement in Google Cloud across compute engine instances using the default service account.
Orca Platform
Orca Security Score: Benchmark Your Cloud Security Posture
The Orca Security Score enables you to assess and monitor your cloud security posture.
Orca Platform
CIEM: Beyond Identity Hygiene – Prioritized Identity Risks
CIEM Mantra: 1) identity hygiene, 2) detecting deviation from best practices, and 3) using identity data to understand/prioritize risks in...
Discovered Vulnerabilities
Oracle Server Side Request Forgery (SSRF) Metadata
Analyzing customer environments is always a detective task, and when we find structural flaws in a service provider, this is...
Discovered Vulnerabilities
A Tale About Vulnerability Research and Early Detection
Orca Security, as part of an ongoing research effort, discovered a vulnerability in the Databricks platform, and Databricks took swift...
Research
Orca Cloud Risk Encyclopedia: The Ultimate Resource for Security Practitioners
Orca Security's Cloud Risk Encyclopedia is a collection of 900+ cloud risks along with remediation strategies for AWS, Azure, and...
Ensure the default ulimit is configured appropriately (Manual)
ulimit provides control over the resources available to the shell and to processes which it starts. Setting system resource limits...
