Research
Why You Should Disable Your Unauthenticated Read-only Ports On GKE Kubelet Servers
On July 26th, Google sent their Google Kubernetes Engine (GKE) customers an email about the fact that they identified an...
Research
Report
2024 Gartner Market Guide for CNAPP
2024 Gartner® Market Guide for Cloud-Native Application Protection Platforms (CNAPP) Read the report to learn why Gartner is recommending that...
‘Orca Watch’ Series
Addressing CrowdStrike on Cloud VMs in AWS with Automated Remediation
Remediating an issue like today’s outage on Windows machines with the CrowdStrike Falcon Sensor at cloud scale can be particularly...
‘Orca Watch’ Series
How to Remediate CrowdStrike Falcon Windows Outages with Orca
On Friday, July 19th, 2024, CrowdStrike customers experienced a major outage impacting Windows systems running the Falcon Sensor. This outage...
Technical Deep Dives
The Five Most Common AI Model Risks and How to Prevent Them
It’s hard to ignore how GenAI has already become an integral part of our daily lives, with people using LLMs...
Orca Platform
Critical CVE-2024-4577: PHP CGI Argument Injection Vulnerability
On June 6th, researchers from Shadowserver, a nonprofit security organization, discovered a heavily exploited vulnerability in PHP servers running on...
Research
2024 Cloud Security Strategies Report Reveals Resource Constraints and Lack of Visibility as the Biggest Challenges
Orca Security has released the 2023 & 2024 Cloud Security Strategies Report, which reveals key insights from senior executives about...
Discovered Vulnerabilities
LeakyCLI: AWS and Google Cloud Command-Line Tools Can Expose Sensitive Credentials in Build Logs
Table of contentsExecutive Summary:What are Azure, Gcloud and AWS CLI?Exposure of Serverless environment variablesAWS CLI LeakageGcloud CLI LeakageExploitation Proof of...
Technical Deep Dives
Leveraging Nuclei Templates to Identify Risks and Threats in Critical Cloud Applications
Table of contentsBuilding the vulnerable scenariosScenario 1: Web application vulnerabilityScenario 2: CI/CD server vulnerabilityAutomated vulnerability detection using Nuclei templatesScenario 1:...
