‘Orca Watch’ Series
Cyber Attacks in Russia’s Invasion of Ukraine: Orca Security Research Pod Perspectives
The Orca Security Research Pod has been actively tracking cyber attacks leading up to and occurring as part of Russia’s...
Blog
‘Orca Watch’ Series
CVE-2022-0847: Linux Dirty Pipe Local Privilege Escalation Vulnerability
A new critical Linux privilege escalation vulnerability was published under the ID CVE-2022-0847, named “Dirty Pipe.”
Orca Platform
Enhancing the Orca Security Risk Dashboard With an Integrated News Feed
This newest widget is called “From the News” and consists of a news feed of articles in a scrolling format.
Discovered Vulnerabilities
AutoWarp: Critical Cross-Account Vulnerability in Microsoft Azure Automation Service
AutoWarp is a critical vulnerability in Microsoft Azure Automation Service that allows unauthorized access to other customer accounts using the...
Research
Lateral Movement in Google Cloud: Abusing the Infamous Default Service Account Misconfiguration
How a malicious actor can conduct lateral movement in Google Cloud across compute engine instances using the default service account.
Orca Platform
Orca Security Score: Benchmark Your Cloud Security Posture
The Orca Security Score enables you to assess and monitor your cloud security posture.
Orca Platform
CIEM: Beyond Identity Hygiene – Prioritized Identity Risks
CIEM Mantra: 1) identity hygiene, 2) detecting deviation from best practices, and 3) using identity data to understand/prioritize risks in...
Discovered Vulnerabilities
Oracle Server Side Request Forgery (SSRF) Metadata
Analyzing customer environments is always a detective task, and when we find structural flaws in a service provider, this is...
Discovered Vulnerabilities
A Tale About Vulnerability Research and Early Detection
Orca Security, as part of an ongoing research effort, discovered a vulnerability in the Databricks platform, and Databricks took swift...