‘Orca Watch’ Series
How to Protect Against Midnight Blizzard-Style Kill Chains
Last week, Microsoft revealed that the Russia-based threat actor group known as Midnight Blizzard, Cozy Bear, and APT29 had compromised...
Blog
Discovered Vulnerabilities
Sys:All: How A Simple Loophole in Google Kubernetes Engine Puts Clusters at Risk of Compromise
The Orca Research Pod has uncovered a dangerous loophole in Google Kubernetes Engine (GKE) that could allow an attacker with...
Discovered Vulnerabilities
How the Sys:All Loophole Allowed Us To Penetrate GKE Clusters in Production
Following our discovery of a critical loophole in Google Kubernetes Engine (GKE) dubbed Sys:All, we decided to conduct research into...
Cloud Security Use Cases
Vulnerability Mismanagement: Why Patch Faster, Fix Faster Is a Broken Model
Eric Goldstein, the executive assistant director for cybersecurity at the US government’s Cybersecurity and Infrastructure Security Agency (CISA), recently said...
Cloud Security Use Cases
Now What?: Keeping Ahead of the SEC’s Incident and Risk Management Reporting Requirements
The recent decision by the US Securities & Exchange Commission to require companies to report on cybersecurity risk and “material”...
‘Orca Watch’ Series
The Biggest Cloud Security Threats to Watch Out for in 2024
It’s hard to believe that 2023 is nearing its end. As we look ahead to 2024, the Orca Research Pod...
CISO Corner
Don’t Leave Your Data Under the Christmas Tree
I recall an incident many years ago – one of those facepalm moments – where a company, in an urge...
Orca Platform
How Agentless Cloud Security Brings Consulting Value in Under 30 Days
Orca Security was recently named to the 2023 CRN Stellar Startups List, recognizing that our leading-edge cloud security platform creates...
Discovered Vulnerabilities
Unauthenticated Access to GCP Dataproc Can Lead to Data Leak
The Orca Research Pod has made an important discovery that puts Google Cloud Dataproc clusters at risk for data theft,...