Ransomware in public clouds is rare, but cloud threat actors could adapt their TTPs to be more cloud native. Now is the time to get ahead of it.

Intro

<p>AWS have released their own security maturity model, which contains a lot of detail on their take as to how to secure your AWS estate. Does it stack up against what we’re seeing in real-world attacks, or the approaches being suggested by the rest of the…

Python library to carry out DFIR analysis on the Cloud - google/cloud-forensics-utils

IT organizations must take steps to protect their users against cloud Squatting. This post discusses the root causes of cloud squatting from an IT practitioner's perspective, and demonstrates the steps companies can take to harden their infrastructure.

A tool to bring existing Azure resources under Terraform's management - GitHub - Azure/aztfy: A tool to bring existing Azure resources under Terraform's management

This guide provides a comprehensive set of controls for startups that want to establish a strong security foundation in the AWS Cloud.

In this three part blog series we will explore attack paths that emerge out of Managed Identity assignments in three Azure services.

This write up is about a pentest we did in which we managed to compromise a hybrid GCP hosted infrastructure using native GCP tools for…

Look at a realistic cloud penetration test situation and see how to utilize the AWS CloudTrail service to discover AWS accounts that you could pivot to.

Contribute to wiz-sec-public/cloud-middleware-dataset development by creating an account on GitHub.

The cloud control plane can be difficult to understand. In this article we examine attack scenarios and how to harden your GCP environment. Learn more.

Wiz Research builds upon previous “OMIGOD” findings with a presentation at RSA Conference 2022; details how cloud middleware use across cloud service providers can expose customers' virtual machines to new attack vectors

SynLapse was a vulnerability in the Azure Synapse Analytics service discovered by one of Orca Security’s vulnerability researchers, Tzah Pahima.

Our guide details a GCP incident, from initial attacker access to resolution. Learn our key takeaways for securing your cloud environment.

With this initial analysis, Tempest researchers identified at least 41 actions that can lead to improper data access

Identity and access management is a pillar of security. With the advent of the cloud, it got a lot more complicated. Here is a recap of the best practices to put in place to secure AWS IAM.

Learn more about a potentially harmful Office 365 functionality that allows ransomware to encrypt files stored on SharePoint and OneDrive. Read more with Proofpoint.

The Orca Cloud Security Platform delivers the world's most comprehensive coverage and visibility of risks across the cloud. Read our most recent blog posts!