Role Can be Assumed by External Identity
Orca has detected a IAM Role which can be assumed by an entity which is not a member of the...
Blog
Externally Exposed AMI
We found that your Amazon Machine Image (AMI) {AwsEc2Image} is public. A public AMI is available for use by all...
S3 Bucket Allows Public READ Access
Ensure that your S3 buckets content cannot be publicly listed in order to protect against unauthorized access. An S3 bucket...
Unused Credentials Found
AWS IAM users can access AWS resources using different types of credentials, such as passwords or access keys. It is...
Cross-Account Access Without External ID or MFA
Ensure that Amazon IAM roles used to establish a trusted relationship between your AWS account and a third-party entity (also...
Cloud Security Insights
Cybersecurity Awareness Is No Joke….or Maybe It Is!
Cloud security tips with a healthy dose of humor.
Cloud Security Insights
Are Agent-based Cloud Security Solutions Putting You at Risk for a Supply Chain Attack?
Agent-based cloud security solutions can expose your cloud estate to a supply chain attack.
Research
Privilege Escalation on Azure (Part I): An Introduction to Azure AD & IAM
A short tutorial on Azure Active Directory (AD) & IAM to lay the the groundwork for future posts.
Orca Platform
Orca Security Secures $550M to Mature the Security Industry Beyond the Age of Cyber Gimmicks
After raising $550M this year from top investors such as Temasek, CapitalG (Alphabet’s VC arm), RedPoint, GGV, Iconiq Capital, Lone...
