Research Pod

A GCP Organization is the top node of the permissions hierarchy, making policies defined at this level powerful, automatically applying...

Orca researcher Lidor Ben Shitrit reveals how Log4 shell TTPs in an AWS cloud environment can be used to open...

On March 25, 2022, a PoC was published for the 4-year old CVE-2018-25032 in Zlib open source software that everyone...

BreakingFormation is an XML External Entity (XXE) vulnerability found in AWS CloudFormation that led to local file disclosure, directory listing,...

Overview of key threats for cloud environments, with a focus on Linux malware, database malware, malicious cryptomining code, and ransomware.

Kubernetes was designed for functionality, not security, but it does include several key settings and policies. Learn more about Kubernetes...

The ‘Google Cloud Platform Storage Explorer’ tool crawls all of your Google Cloud projects and detects which have access to...

The Orca Security Research Pod has been actively tracking cyber attacks leading up to and occurring as part of Russia’s...

A new critical Linux privilege escalation vulnerability was published under the ID CVE-2022-0847, named “Dirty Pipe.”