The RSA Conference 2024 Survival Kit: A Guide to Making The Most of Your Conference Experience
The RSA Conference is the premier event for the cybersecurity community, bringing together experts, professionals, and enthusiasts from around the...
Blog
CISO Corner
AI Series Part III: AI Unleashed: Navigating the Maze of Generative AI and Neural Networks
In our journey through the landscapes of human and organizational thought, we've observed the OODA loop in action, revealing the...
Discovered Vulnerabilities
LeakyCLI: AWS and Google Cloud Command-Line Tools Can Expose Sensitive Credentials in Build Logs
Table of contentsExecutive Summary:What are Azure, Gcloud and AWS CLI?Exposure of Serverless environment variablesAWS CLI LeakageGcloud CLI LeakageExploitation Proof of...
Orca Security Named Official Google Cloud Generative AI Partner with Vertex AI Integration
We’re pleased to announce that Orca Security has been accepted into Google Cloud’s Generative AI Partner Initiative, following the integration...
Technical Deep Dives
Leveraging Nuclei Templates to Identify Risks and Threats in Critical Cloud Applications
Table of contentsBuilding the vulnerable scenariosScenario 1: Web application vulnerabilityScenario 2: CI/CD server vulnerabilityAutomated vulnerability detection using Nuclei templatesScenario 1:...
Dive Deep with the Orca Pod at RSA Conference 2024
At Orca Security, we’re proud to engage with customers, partners, and the cybersecurity community to make the cloud a safer,...
‘Orca Watch’ Series
Critical XZ Utils Supply Chain Compromise Affects Multiple Linux Distributions (CVE-2024-3094)
A malicious backdoor has been discovered in the XZ Utils package, a popular data compression library used in major Linux...
‘Orca Watch’ Series
POC and Explanation of Critical TeamCity Authentication Bypass Vulnerability (CVE-2024-27198)
With 84% of vulnerable and exposed TeamCity servers likely already compromised, the recent issue in JetBrains’ TeamCity illustrates how a...
Orca Platform
NVD Update Delays: What to Know and Impact to Orca Security Customers
The National Vulnerability Database (NVD), a US government repository of standards-based vulnerability data that enables organizations and cybersecurity solutions to...