Aquasec · Blogs

Blogs listings from Aquasec on TechiSeek. 420 public listings.

• Threat Alert: TeamTNT Pwn Campaign Against Docker and K8s Environments (Aquasec)
  TeamTNT campaign exploits container images targeting Docker and K8s environments to steal cloud credentials, open backdoors, and mine crypt…
• Malware Forensic Analysis: Capturing What Attackers Leave Behind (Aquasec)
  Container attacks vanish fast—before you even detect them.
• Cloud Workload Security: Aqua Shines in GigaOm's Radar Report (Aquasec)
  Aqua's positioning on the GigaOm Radar emphasizes our commitment to delivering a comprehensive solution that addresses the evolving securit…
• Deceptive Deprecation: The Truth About npm Deprecated Packages (Aquasec)
  Researchers at Aqua Nautilus found that 8.2% percent of the most downloaded npm packages are officially deprecated, but the real number is…
• Aqua and HashiCorp Enable Cloud Native Security, Zero-Trust Approaches (Aquasec)
  As a cloud native security pioneer and a leading Cloud Native Application Protection Platform (CNAPP) provider, Aqua recognizes the value t…
• Sink or Swim: Tackling 2024's Record-Breaking Vulnerability Wave (Aquasec)
  28,821 — that’s the number of vulnerabilities reported last year alone. With over 28,000 CVEs this year so far, 2024 is on track to set an…
• PowerHell: Active Flaws in PowerShell Gallery Expose Users to Attacks (Aquasec)
  We expose significant flaws in PowerShell Gallery's policy package names and owners, that open potential supply chain attacks on the regist…
• Real-world Cyber Attacks Targeting Data Science Tools (Aquasec)
  Aqua's Team Nautilus provides deep analysis of cyber attacks targeting data science tools and recommendations on how you can protect agains…
• Looney Tunables Vulnerability Exploited by Kinsing (Aquasec)
  We intercepted Kinsing's experimental incursions into cloud environments and have uncovered their efforts to manipulate the Looney Tunables…
• Lucifer DDoS botnet Malware is Targeting Apache Big-Data Stack (Aquasec)
  Aqua Nautilus has unveiled a new campaign targeting Apache big-data stack, specifically Apache Hadoop and Apache Druid.
• Gafgyt Malware Variant Exploits GPU Power and Cloud Native Environments (Aquasec)
  Aqua Nautilus researchers discovered a new variant of Gafgyt botnet targeting machines with weak SSH passwords.
• TrailShark: Understanding AWS API and Service Interactions (Aquasec)
  TrailShark is a plugin that connects Wireshark with AWS CloudTrail logs. This open-source tool was developed as part of the “Bucket Monopol…
• Detecting and Capturing Kernel Modules with Tracee and eBPF (Aquasec)
  Security practitioners often need to investigate malicious artifacts in their environments, which can be challenging if those are deleted o…
• Kubernetes Secrets: How to Create, Use, and Secure Them (Aquasec)
  In Kubernetes, a secret is any type of sensitive data – such as login credentials, tokens, and certificates – that can be used for authenti…
• Go deeper: Linux runtime visibility meets Wireshark (Aquasec)
  Aqua Tracee is an open source runtime security and forensics tool for Linux, built to address common Linux security issues.
• Cloud VM Security with Aqua CSP (Aquasec)
  Aqua's Cloud Native Security Platform (CSP) provides a full-stack security solution across all workloads: containers, Serverless and VMs, L…
• Empowering Security: Bridging Talk to Action at RSA 2024 (Aquasec)
  As we gear up for another exciting RSA Conference, it’s time to take stock of what’s making waves in the world of cybersecurity.
• Vulnerability Management in Container Images (Aquasec)
  When it comes to containerized workloads, resolving the underlying image’s security vulnerabilities is paramount to ensuring the safety of…
• Istio Security: Zero-Trust Networking (Aquasec)
  Building, deploying and maintaining secure, cloud native applications require multiple overlapping solutions at different stages of the sof…
• Run Secure Applications on OpenShift with IBM Power Systems (Aquasec)
  As an important component of end-to-end application modernization and hybrid cloud adoption, Aqua Security integrates with Open Shift on Po…
• Remediate Vulnerabilities with Integrated Aqua and ServiceNow Workflows (Aquasec)
  The move to cloud native changed the daily operations of security teams. This shift requires teams to monitor the risk embedded within clou…
• Cloud Native Security Best Practices: Vulnerability Management (Aquasec)
  In a series of posts, we review cloud native workloads security concerns that are solved by Aqua Cloud Native Security Platform.
• A Brief Guide to Supply Chain Security Best Practices (Aquasec)
  With the rise in attacks targeting the supply chain of cloud native applications, it’s important to understand how you can prepare for and…
• Embracing the Future: AWS Customers Leverage Fargate for ECS and EKS Deployments (Aquasec)
  Aqua's MicroEnforcer bridges this gap, offering a powerful and flexible solution for securing Fargate environments.
• Why the time for CNAPP is now (Aquasec)
  Gartner defines CNAPP as a single platform joining multiple disparate security and protection capabilities across cloud-native applications.
• Amazon Firecracker: Isolating Serverless Containers and Functions (Aquasec)
  AWS Firecracker focuses on one aspect of security – restricting the blast-radius of an attack emanating from a container or function.
• Istio: The Enterprise Upgrade Path to Microservices (Aquasec)
  Istio, Google’s open source project for large-scale, containerized application management was released in May 2017, adopted by CNCF and has…
• Mitigating Leaky Vessels Vulnerabilities in runc, BuildKit and Moby (Aquasec)
  In this blog we explain the Leaky Vessels vulnerabilities, its implications, and how Aqua security can help you detect it.
• Linguistic Lumberjack: Understanding CVE-2024-4323 in Fluent Bit (Aquasec)
  Linguistic Lumberjack is a new critical severity vulnerability (CVE-2024-4323) that affects Fluent Bit versions 2.0.7 through 3.0.3.
• PG_MEM: A Malware Hidden in the Postgres Processes (Aquasec)
  Nautilus researchers have uncovered a new malware, that forces its way into PostgreSQL databases, delivers payloads to hide its operations.
• Trivy: The Universal Scanner to Secure Your Cloud Migration (Aquasec)
  Aqua Trivy, a universal open source vulnerability scanning engine, 8 tools in 1 powering Aqua software supply chain security, incl.
• Threat Alert: Tracking Real-World Apache Log4j Attacks (Aquasec)
  Due to CVE-2021-44228, Apache Log4j is vulnerable to arbitrary code execution.
• Kubernetes Version 1.22: Security Features You Need to Know (Aquasec)
  A review of the security features in Kubernetes version 1.22 incl.
• Tracee Release: Rules Detect Attackers Out-of-the-Box (Aquasec)
  Aqua Tracee is an open source runtime security and forensics tool for Linux. It can help you detect suspicious behavior at runtime using an…
• New npm Flaws Let Attackers Better Target Packages for Account Takeover (Aquasec)
  For the past few years, cybercriminals have been hijacking popular npm packages by taking over maintainers’ accounts.
• Kubernetes Benchmark Scans with Trivy: CIS and NSA Reports (Aquasec)
  One of Trivy’s core features is Trivy Kubernetes for in-cluster security scans of running workloads.
• RATs in the Cloud: Kubernetes UI Tools Turn into a Weapon (Aquasec)
  For many years, threat actors have been using legitimate remote access tools (RATs) in their campaigns, tricking users into installing them…
• Threat Alert: Private npm Packages Disclosed via Timing Attacks (Aquasec)
  We at Aqua Nautilus have discovered that npm’s API allows threat actors to execute a timing attack that can detect whether private packages…
• CorePlague: Critical Vulnerabilities in Jenkins Server Lead to RCE (Aquasec)
  Aqua Nautilus researchers have discovered a chain of critical vulnerabilities, dubbed Core Plague, in the widely used Jenkins Server and Up…
• Crypto-Mining Malware Outsmarting Image Scanners (Aquasec)
  As crypto-mining malware gets more sophisticated and tries to outsmart image scanners, a second line of defense with runtime controls is ne…
• Blocking Attacks in Runtime with Drift Prevention - Aquasec (Aquasec)
  Drift prevention is the cloud native answer to malware, worms and zero-day exploits, and one of the best things to happen to security since…
• Knative: The Serverless Environment for Kubernetes Fans (Aquasec)
  Knative enables the deployment of container-based serverless applications as part of Kubernetes.
• CVE-2019-11246: Another kubectl Path Traversal Vulnerability Disclosed (Aquasec)
  A new vulnerability CVE-2019-11246 enables path traversal in kubectl. Interestingly, it is similar to two recent CVEs that were considered…
• Threat Alert: First Python Ransomware Attack Targeting Jupyter Notebooks (Aquasec)
  Team Nautilus uncovered and analyzed the first Python-based ransomware attack that targets misconfigured Jupyter Notebooks in the wild and…
• Supply Chain Security: Shifting Left to the Golden Pipeline - Aqua (Aquasec)
  In this webinar recap, we explore how initiating a Golden Pipeline helps stop backdoor supply chain attacks, with Microsoft cloud expert St…
• Revisiting AWS Fargate with Aqua 3.0 (Aquasec)
  How Aqua Security's runtime security solution, MicroEnforcer, can help protect containers running in a CaaS environment such as AWS Fargate.
• 2023 Nautilus Cyber Security Report - Insights Revealed (Aquasec)
  Because of the intricacies of cloud native environments, threats are not only becoming more frequent, but the tactics used rapidly change.
• Automatically Secure Your CI/CD Pipelines Using Tracee GitHub Action (Aquasec)
  In my previous post, I covered how you can secure your CI/CD pipeline with Tracee from potentially malicious code executions.
• Threat Alert: Cloud Network Bandwidth Now Stolen through Cryptojacking (Aquasec)
  Threat actors are looking to increase their financial gain and thus deploy cryptominers which are considered easy to use and lucrative.
• Advanced Persistent Threat Techniques Used in Container Attacks (Aquasec)
  Aqua’s Team Nautilus detected an intensive campaign targeting cloud native environments that uses advanced persistent threat (APT) techniqu…