How Orca Found Server-Side Request Forgery (SSRF) Vulnerabilities in Four Different Azure Services
As part of the Orca Research Pod efforts, we regularly research various cloud provider services and capabilities to help our...
As part of the Orca Research Pod efforts, we regularly research various cloud provider services and capabilities to help our...
In this blog we describe how we uncovered an SSRF Vulnerability in the Azure DigitalTwins Explorer service, allowing any unauthenticated...
In this blog we describe how we uncovered an SSRF Vulnerability in Azure Functions allowing any unauthenticated user to request...
In this blog we describe how we uncovered an important Server-Side Request Forgery (SSRF) Vulnerability on Azure API Management Service,...
In this blog we describe how we uncovered an SSRF Vulnerability in the Azure Machine Learning service, allowing any authenticated...
In addition to supporting existing cloud data center locations in North America, Europe, and Australia, Orca Security today announced support...
“Defenders think in lists. Attackers think in graphs,” is a familiar saying in cybersecurity. Sophisticated attackers perform reconnaissance to find...
We have found that the web-service {service_detailed} on the system was not patched for several months. It is important to...
File excluded from your antimalware scanner at the same time as code was executed via a custom script extension on...