AWS Guard Duty: EC2 with suspicious traffic from an instance with malware
Suspicious traffic was found by AWS GuardDuty service on EC2 instance {AwsEc2Instance} ({AwsEc2Instance.InstanceId}) detected with malware by Orca. AWS GuardDuty...
Blog
Security group allows inbound access to TCP port 5432 (PostgreSQL Database)
An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. We identified...
Azure virtual machine with Windows distribution allows direct public RDP access
Remote Desktop Protocol (RDP) allows a user to connect to another computer ,with Windows operating systems, over a network connection....
Security group allows inbound access to TCP port 135 (RPC)
An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. We identified...
Security group allows inbound access to TCP port 3389 (RDP)
An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. We identified...
Azure Key vault is publicly accessible
By default, when you create a new key vault, the Azure Key Vault firewall is disabled. It's possible to enable...
Security group allows inbound access to Hadoop HDFS service ports
An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. We identified...
Security group allows inbound access to TCP port 4505 and 4506 (SALT)
An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. We identified...
Security group allows inbound access to TCP port 443 (HTTPS)
An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. We identified...