Discovered Vulnerabilities
Authenticated SSRF Vulnerability on Azure API Management Service
In this blog we describe how we uncovered an important Server-Side Request Forgery (SSRF) Vulnerability on Azure API Management Service,...
Blog
Discovered Vulnerabilities
Authenticated SSRF Vulnerability on Azure Machine Learning Service
In this blog we describe how we uncovered an SSRF Vulnerability in the Azure Machine Learning service, allowing any authenticated...
Orca Platform
Orca Announces Support for India Cloud Data Center Further Demonstrating Commitment to Multi-National and APAC organizations
In addition to supporting existing cloud data center locations in North America, Europe, and Australia, Orca Security today announced support...
Orca Platform
Use Graph Visualization to Better Explore Interconnected Cloud Risks
“Defenders think in lists. Attackers think in graphs,” is a familiar saying in cybersecurity. Sophisticated attackers perform reconnaissance to find...
Web-service unpatched
We have found that the web-service {service_detailed} on the system was not patched for several months. It is important to...
Defender for Cloud: Antimalware file exclusion and code execution in your virtual machine
File excluded from your antimalware scanner at the same time as code was executed via a custom script extension on...
Defender for Cloud: Fileless Attack Technique Detected
The memory of the process specified below contains evidence of a fileless attack technique. Fileless attacks are used by attackers...
Defender for Cloud: Executable found running from a suspicious location
Analysis of host data detected an executable file on host that is running from a location in common with known...
Orca Platform
Further Left: Finding Secrets and Package Vulnerabilities Before Build with Orca Security
The fundamental principle of scanning artifacts at build time is, if I can fix a security issue before it’s ever...
