Research
Cloud Native Security: OWASP Kubernetes Top 10
As more organizations adopt containerized infrastructure, the need for effective security practices becomes increasingly important. Recently released by the OWASP...
Blog
CISO Corner
How to Find and Hire Cloud Security Professionals
TLDR: While there is a shortage of cybersecurity professionals, finding qualified candidates for open positions is possible if teams can...
Orca Platform
Artificial Intelligence and Cloud Security: Remediating Cloud Risks using GPT3
Recently, the continued rise of artificial intelligence has taken center stage in the media with the availability of new tools...
Research
Elastic IP Transfer: Identifying and Mitigating Risks from a New Attack-Vector on AWS
Elastic IPs (EIPs) are public and static IPv4 addresses provided by AWS. EIPs can be viewed as a pool of...
Discovered Vulnerabilities
How Orca Found Server-Side Request Forgery (SSRF) Vulnerabilities in Four Different Azure Services
As part of the Orca Research Pod efforts, we regularly research various cloud provider services and capabilities to help our...
Discovered Vulnerabilities
Unauthenticated SSRF Vulnerability on Azure Digital Twins Explorer
In this blog we describe how we uncovered an SSRF Vulnerability in the Azure DigitalTwins Explorer service, allowing any unauthenticated...
Discovered Vulnerabilities
Unauthenticated SSRF Vulnerability on Azure Functions
In this blog we describe how we uncovered an SSRF Vulnerability in Azure Functions allowing any unauthenticated user to request...
Discovered Vulnerabilities
Authenticated SSRF Vulnerability on Azure API Management Service
In this blog we describe how we uncovered an important Server-Side Request Forgery (SSRF) Vulnerability on Azure API Management Service,...
Discovered Vulnerabilities
Authenticated SSRF Vulnerability on Azure Machine Learning Service
In this blog we describe how we uncovered an SSRF Vulnerability in the Azure Machine Learning service, allowing any authenticated...