Discovered Vulnerabilities
Unauthenticated SSRF Vulnerability on Azure Digital Twins Explorer
In this blog we describe how we uncovered an SSRF Vulnerability in the Azure DigitalTwins Explorer service, allowing any unauthenticated...
Research Pod
Discovered Vulnerabilities
Unauthenticated SSRF Vulnerability on Azure Functions
In this blog we describe how we uncovered an SSRF Vulnerability in Azure Functions allowing any unauthenticated user to request...
Discovered Vulnerabilities
Authenticated SSRF Vulnerability on Azure API Management Service
In this blog we describe how we uncovered an important Server-Side Request Forgery (SSRF) Vulnerability on Azure API Management Service,...
Discovered Vulnerabilities
Authenticated SSRF Vulnerability on Azure Machine Learning Service
In this blog we describe how we uncovered an SSRF Vulnerability in the Azure Machine Learning service, allowing any authenticated...
‘Orca Watch’ Series
The Top 5 Cloud Security Threats to Be Prepared For in 2023
It’s been a busy year in cloud security. We’ve seen data breaches, tens of thousands of new vulnerabilities, and an...
Discovered Vulnerabilities
CosMiss: Azure Cosmos DB Notebook Remote Code Execution Vulnerability
The Orca Research Pod has discovered CosMiss, a vulnerability in Microsoft Azure Cosmos DB where authentication checks were missing from...
Discovered Vulnerabilities
FabriXss (CVE-2022-35829): How We Managed to Abuse a Custom Role User Using CSTI and Stored XSS in Azure Fabric Explorer
The Orca Research Pod has discovered FabriXss, a vulnerability in Azure Service Fabric Explorer
‘Orca Watch’ Series
2022 State of Public Cloud Security Report Reveals Critical Cloud Security Gaps
Orca Security has released the 2022 State of the Public Cloud Security report, which provides crucial insights into the current...
Discovered Vulnerabilities
Azure Synapse: Local Privilege Escalation Vulnerability in Spark
The story of a simple race condition leading to a local privilege escalation vulnerability in Azure Synapse Analytics
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.