Discovered Vulnerabilities
Unauthenticated Access to GCP Dataproc Can Lead to Data Leak
The Orca Research Pod has made an important discovery that puts Google Cloud Dataproc clusters at risk for data theft,...
Research Pod
Research
The Great CVSS Bake Off: Testing How CVSS v4 Performs Versus v3
The highly anticipated Common Vulnerability Scoring System (CVSS) version 4 is planned to be released on October 31st by the...
Research
Meet Orca Security Cloud Threat Researcher Lidor B.
Fun Facts About Lidor Beverage of choice: Coffee or soda Go-to snack: Any kind of chocolate Hobbies (Present and Past):...
Discovered Vulnerabilities
Azure HDInsight Riddled With XSS Vulnerabilities via Apache Services
The Orca Research Pod recently discovered a total of 8 important Cross-Site Scripting (XSS) vulnerabilities within various Apache services on...
Research
Beware the Azure Guest User: How to Detect When a Guest User Account Is Being Exploited
In Azure environments, guest users are the go-to option when giving access to a user from a different tenant. Often,...
Discovered Vulnerabilities
Bad.Build: A Critical Privilege Escalation Design Flaw in Google Cloud Build Enables a Supply Chain Attack
Bad.Build is a critical design flaw discovered by the Orca Research Pod in the Google Cloud Build service that enables...
Research
Using AI to Detect Cloud Anomalies: A Supply Chain Attack Example
Although it’s always preferable to prevent security incidents before they occur, it’s only a matter of time before an attacker...
‘Orca Watch’ Series
2023 Honeypotting in the Cloud Report: Attackers Discover and Weaponize Exposed Cloud Assets and Secrets in Minutes
The state of cloud security is a dynamic and ever-evolving landscape, as both attackers and defenders continuously adapt their tactics...
Discovered Vulnerabilities
Two XSS Vulnerabilities in Azure with Embedded postMessage IFrames
Microsoft Azure offers a diverse range of services that empower organizations with convenient and scalable cloud infrastructure solutions. However, even...
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.