Cloud Security Insights
Expert Roundup: How to Respond to Log4Shell
Have you and your security team been working weekends and long days to remediate Log4j2 vulnerabilities? With new Log4j vulnerabilities...
Blog
Research
Azure AD & IAM (Part II) – Leveraging Managed Identities For Privilege Escalation
Table of contentsWhat are managed identities?Getting a managed identity access tokenThe known privilege escalation methodMy research objectivesEscalation to managed identities’...
Network security group flow log retention period is less than 90 days or disabled
Logs can be used to check for anomalies and give insight into suspected breaches. Flow logs on network watcher {AzureNetworkFlowLog}...
Amazon Web Services
AWS re:Invent 2021 Recap: Cloud Security at the PagerDuty Theater
Orca Security presented "Invisible Security at the Speed of Cloud" at AWS Re:Invent 2021. Here’s a recap of what we...
Research
Google Cloud Platform IAM
Google’s approach to Identity and Access Management is relatively the most straightforward among the three major cloud providers.
CISO Corner
3 Hidden Security Costs Behind Many Failed Projects
Security projects are often derailed by hidden security costs that can place additional burdens on an organization.
