Aquasec · Blogs
Blogs listings from Aquasec on TechiSeek. 420 public listings.
- Detecting and Analyzing an Apache Struts Exploit with Tracee (Aquasec)When running third-party applications in your cloud environments, you inherently put your workloads at greater risk.
- Winning with Cloud Native Security: Joe Sexton on Why He Joined Aqua’s BOD (Aquasec)I’m thrilled to be joining the Aqua board of directors to drive the company’s aggressive growth and help enterprises all over the world acc…
- New in Trivy: Kubernetes CIS Benchmark Scanning (Aquasec)CIS (Center for Internet Security) compliance scanning is a standard in Kubernetes (K8 s) security and is widely adopted across the industr…
- Employee Personal GitHub Repos Expose Internal Azure and Red Hat Secrets (Aquasec)What happens when employees at some of the world’s largest organizations like Microsoft and Red Hat use personal Git Hub repos for their si…
- GitHub Dataset Research Reveals Millions Potentially Vulnerable to RepoJacking (Aquasec)Millions of Git Hub repositories are potentially vulnerable to Repo Jacking. New research by Aqua Nautilus sheds light on the extent of Rep…
- Triaging Trivy AWS Alerts with Postee and AWS Security Hub (Aquasec)Security operators are getting overloaded with alerts and information coming from a variety of sources.
- Technical Review: A Deep Analysis of the Dirty Pipe Vulnerability (Aquasec)Aqua discusses how Tracee monitors for the Dirty Pipe vulnerability and how in-kernel technology like eBPF monitors writes that result from…
- Threat Alert: New Malware in the Cloud By TeamTNT (Aquasec)Our honeypots were attacked by malware that bears a resemblance to these threat actors and we analyze the possible connection.
- Why Agent vs Agentless is a False Choice (Aquasec)The assumption is that you will always need both agent & agentless security, this blog guides you through the implementation decisions acro…
- Using Aqua to Secure Applications on Pivotal Cloud Foundry (Aquasec)Aqua just launched an open Beta of our solution to scan Pivotal droplets and ensure that only secure droplets are stored in blobs and deplo…
- The Agent vs Agentless Debate is Over (Aquasec)It’s humbling to see customers adopt Aqua’s cloud security vision. It’s humbling to see our predictions come true, doubly so when competito…
- Trivy v0.29.0 Release: RBAC, Helm, Custom Extensions, and More (Aquasec)As ever, there are tons of exciting updates and features, such as role-based access control (RBAC) and Helm chart scanning, support for cus…
- First-Ever Attack Leveraging Kubernetes RBAC to Backdoor Clusters (Aquasec)For the first time evidence that attackers are exploiting Kubernetes (K8s) Role-Based Access Control (RBAC) in the wild to create backdoors.
- Kube-Query: A Simpler Way to Query Your Kubernetes Clusters (Aquasec)kube-query is an open source tool, an osquery extension bridging the gap between osquery and Kubernetes clusters, providing visibility into…
- Improving Kubernetes Security: Upgrade Clusters to Avoid Exposure (Aquasec)With the move to cloud native development comes potentially increased risk of services that are exposed to the Internet and can easily be d…
- Ensuring Business Continuity at Aqua While Israel is at War (Aquasec)In a world fraught with uncertainties, global companies must be prepared to ensure continuity of operations, particularly in the face of th…
- Tracee Runtime Security Series: Centralizing Alerts with Aqua Postee (Aquasec)A great way to get started with runtime security in your Kubernetes environments is using Tracee, an open source runtime security and foren…
- Kubernetes Exposed: One Yaml away from Disaster (Aquasec)We found two main misconfigurations in Kubernetes clusters belonging to more than 350 organizations openly accessible and largely unprotect…
- Vulnerability in Containerd Can Leak Cloud Credential (Aquasec)A vulnerability in containerd allows attackers to craft an image that can leak the host’s registry or cloud credentials when pulled from a…
- CVE-2019-5021: Alpine Docker Image ‘null root password’ Vulnerability (Aquasec)A vulnerability in Alpine Docker images allows NULL password for root user. Update Alpine images, and mitigate using Aqua's Image Assurance.
- Securing Kubernetes Deployments on Amazon EKS with Aqua (Aquasec)AWS made its Elastic Container Services for Kubernetes (EKS) generally available today. We at Aqua had access to the preview version for so…
- Securing the World’s Software Supply Chains: Why Argon Joined Aqua (Aquasec)Last year, Argon set out on an exciting mission to solve one of the industry’s most urgent problems: secure the way companies build and rel…
- Trivy Vulnerability Scanner Joins the Aqua Open-source Family (Aquasec)Trivy, the popular open source container image vulnerability scanner has joined the Aqua Security family.
- Scan IaC Code in Dev with Trivy’s Extensions (Aquasec)When developing new software, a key element of improving security is providing security feedback as early and seamlessly as possible.
- New Vulnerability in curl and libcurl Could Lead to Heap Buffer Overflow (Aquasec)A new vulnerability CVE-2023-38545 in curl and libcurl could lead to unexpected behavior, crashes, or potentially code execution.
- Fortune 500 at Risk: 250M Artifacts Exposed via Misconfigured Registries (Aquasec)What if you were told that you had a misconfigured registry with hundreds of millions of software artifacts containing highly confidential…
- Can You Trust Your VSCode Extensions? - Aqua Security (Aquasec)Aqua Nautilus researchers have recently discovered that attackers can easily impersonate popular Visual Studio Code extensions and trick un…
- Simplifying Access to the Aqua Platform with Okta (Aquasec)Aqua Cloud Native Security Platform is available on the Okta Integration Network. Okta customers can integrate Aqua to simplify the authent…
- Cryptocurrency Miners Abusing Containers: Anatomy of an Attack (Aquasec)We’ve heard many accounts of cryptocurrency mining attacks on container environments and decided to investigate and analyze an anatomy of s…
- Security for Pivotal PAS and PKS (Aquasec)Aqua's Cloud Native Security Platform with the PKS enforcers, helps VMware users secure their container deployments using Pivotal Container…
- Trivy Can Now Scan Unpackaged Binary Files (Aquasec)Trivy, the all-in-one security scanner, is now able to scan binary files in your scan targets such as container images.
- Text4Shell: CVE-2022-42889 in Apache Commons Text Explained (Aquasec)A new vulnerability in the Apache Commons Text library indicates that attackers can perform remote code execution (RCE).
- Securing the Cloud Transition for Windows Applications on AKS (Aquasec)At the same time that Microsoft customers are working through the container runtime transition, there is also a groundswell to migrate exis…
- Operationalize Your Cloud Native Security with Aqua’s Dashboard (Aquasec)Utilizing advanced cloud native tools without the ability to effectively unify, track, and display current conditions can create significan…
- Image Scanning in VPCs with Aqua and AWS PrivateLink (Aquasec)AWS announced today at re:Invent a new service called PrivateLink, that enables AWS Virtual Private Cloud customers to connect to SaaS apps…
- Overcoming the Top 5 Pain Points for DevOps (Aquasec)From manual testing to continuous integration, these are the top pain points for devops.
- Exploited SSH Servers Offered in the Dark web as Proxy Pools (Aquasec)Aqua Nautilus researchers show how SSH tunneling is done in the context of cloud native environment and how they are use as proxy pools.
- Lasting Legacy of Log4j: Lessons for Runtime Security (Aquasec)We discuss the lingering effects of Log4j, why CISOs are still concerned and how to protect against it and other zero-day vulnerabilities.
- Trivy’s Journey Continues: First Unified Scanner for Cloud Native Security (Aquasec)Over the past few years, the Aqua Trivy scanner has become a must-have tool in many developers’ toolkits, enabling them to easily shift lef…
- Aqua CyberArk Conjur Certification: Making DevSecOps Easier (Aquasec)Aqua Security is excited to announce that our newly certified integration with Cyber Ark Conjur Secrets Manger for both Conjur Secrets Mang…
- Tracee: Tracing Containers with eBPF (Aquasec)Tracee is an open source project developed by Aqua Security, using eBPF to trace events in containers, to help developers implementing cont…
- The Great Escape: A Blast Radius Analysis of Container Attacks (Aquasec)In 2021, container attacks have been on the rise. We observed numerous attacks that were designed to escape container environments to the u…
- Automating CIS Kubernetes Benchmark Compliance - Aqua (Aquasec)Aqua Starboard automates CIS Kubernetes benchmark compliance together with Aqua Kube-bench, allowing you to improve your Kubernetes securit…
- AWS Fargate Security with Sidecars - Aquasec (Aquasec)How to protect workloads on AWS Fargate by running Aqua MicroEnforcer as a sidecar container, so that the image doesn’t need to be modified.
- Threat Alert: Threat Actors Using release_agent Container Escape (Aquasec)Earlier this year, Aqua’s Team Nautilus detected a cryptocurrency mining campaign targeting our honeypots.
- Securing Struts in AWS Fargate - Aquasec (Aquasec)AWS Fargate allows you to provision containers without having to worry about the VM instances for them to run on & see how Aqua protects th…
- Zero-Day Attack Prevention Through Supply Chain Security (Aquasec)Supply chain security has made lots of headlines recently thanks to events like the Solar Winds breach.
- Discover Cloud Security Issues Faster with Event-based Scanning (Aquasec)Event-based Scanning —detects any changes to your cloud resources at the time they are made.
- Five Misconfigurations Threatening Your AWS Environment Today (Aquasec)In the ever-expanding realm of AWS, with over 200 services at your disposal, securing your cloud account configurations and mastering compl…
- Automating Kubernetes Security Reporting with Starboard (Aquasec)Back in June 2020, we released Starboard – an open source toolkit that integrates security tools into a Kubernetes environment.