Aquasec · Blogs

Blogs listings from Aquasec on TechiSeek. 420 public listings.

• GitHub Bug Allowed Third-Party Apps to Gain Elevated Permissions (Aquasec)
  Due to a bug in February, third-party apps could generate new GitHub App tokens with elevated permissions, which could have led to major se…
• Why Container Security Matters for PCI Compliant Organizations (Aquasec)
  Learn how container technology can affect the PCI-DSS standard and make sure your organization complies with PCI requirements.
• A Deep Dive into eBPF: The Technology that Powers Tracee (Aquasec)
  Tracee, by Aqua Security, is an open source, lightweight, and easy to use container and system tracing utility.
• Combat Zero-Day Threats with the eBPF Lightning Enforcer (Aquasec)
  We are excited to announce the latest addition to our portfolio, our eBPF-based Aqua Lightning Enforcer.
• Find the New OpenSSL Vulnerabilities with Trivy (Aquasec)
  Today, OpenSSL announced two new CVEs and mitigation recommendations. This blog provides guidance as to how you can identify the Open SSL v…
• Unleashing Scale for Hybrid Cloud: Aqua to Protect Containerized Environments on LinuxONE 4 Express (Aquasec)
  Announcing the support of Aqua CNAPP on IBM Z and LinuxONE, alongside IBM’s unveiling of LinuxONE 4 Express system.
• CVE-2021-44228 aka Log4Shell Vulnerability Explained (Aquasec)
  Log4 Shell, a new, critical zero-day vulnerability that crashed onto the scene last Friday, shows how issues that are hidden in seemingly b…
• CVE-2022-0185 in Linux Kernel Can Allow Container Escape in Kubernetes (Aquasec)
  Last week, a new high-severity CVE was released that affects the Linux kernel. This vulnerability provides an opportunity for an attacker w…
• Kinsing Malware Exploits Novel Openfire Vulnerability - Aqua (Aquasec)
  A new attack exploits the novel Openfire vulnerability (CVE-2023-32315) to deploy Kinsing malware and crypto miners to gain full control ov…
• RBAC Virtual Verbs: Teaching Kubernetes to Educate Dolphins (Aquasec)
  Most K8s clusters use RBAC to determine user access rights to specific operations.
• Welcome to Aqua’s Open Source Developer Slack Community! (Aquasec)
  Join the discussion in the open source developer slack community to chat about open source security tools like trivy, tracee, and others, i…
• Dynamic Threat Analysis for Container Images - Aqua (Aquasec)
  Container images are a growing path for external code to enter an organization. Docker has simplified image workflow in order to encourage…
• Severe Privilege Escalation Vulnerability in Kubernetes (CVE-2018-1002105) (Aquasec)
  A severe vulnerability (CVE-2018-1002105) in Kubernetes allows an unauthenticated user to perform privilege escalation and gain full admin…
• How GitLab Innovates DevOps Security Using Aqua Trivy (Aquasec)
  Digital leaders must adapt, scale, and fine-tune their operations and the solutions they provide to their customers to keep up with market…
• Kubernetes Version 1.26: An Overview (Aquasec)
  Kubernetes Version 1.26 was released with 37 new enhancements including 11 Stable, 10 Beta, 16 Alpha, and 12 features deprecated or removed.
• Unveiling Aqua Vulnerability Database (Aquasec)
  Published sources of vulnerabilities in cloud native environments are an important resource, but the information is often spread out across…
• DNS Spoofing on Kubernetes Clusters - Aqua (Aquasec)
  Describes how an attacker can successfully spoof DNS responses to all apps running on a K8s cluster, and from there execute a MITM attack.
• Detecting Drovorub's File Operations Hooking with Tracee (Aquasec)
  Two years ago, the NSA (the United States’ National Security Agency) revealed that Drovorub, an advanced Russian malware created by the GRU…
• Using CO:RE to Achieve Portable Tracee eBPF Code (Aquasec)
  One of the biggest challenges of eBPF development is distribution of your eBPF project. With so many different versions of the Linux kernel…
• Truth Revealed: Agentless Security is Not Real Security (Aquasec)
  Finally, the long-lasting “agentless vs. If you want great cloud workload security, you need an agent.
• Securing GitHub Actions with Trivy and Cosign (Aquasec)
  One of the advantages of automated CI/CD pipelines is that they’re a great place to implement regular security controls and checks.
• Golang Scanning with Trivy: Detect Vulnerabilities Accurately (Aquasec)
  A standard piece of security advice is to reduce the size of your container images, usually by using statically compiled binaries in a scra…
• Advanced Workload Protection for AWS Services on Graviton2 (Aquasec)
  Moving at the pace of innovation in cloud native infrastructure, Aqua is announcing container security support for the AWS Fargate serverle…
• Protecting Cloud Native Workloads on GKE Autopilot (Aquasec)
  As Aqua Security is a GKE selected security partner, customers can now run the Aqua platform seamlessly on a GKE Autopilot cluster.
• The Story of Tracee: The Path to Runtime Security Tool (Aquasec)
  eBPF technology is seeing strong growth, being widely adopted in the cloud native ecosystem for monitoring, networking, and security goals.
• Threat Alert: Kinsing Malware Attacks Targeting Container Environments (Aquasec)
  An ambitious attack campaign directed by resourceful actors targeting misconfigured container environments.
• New for Trivy: CSPM Identifies Misconfigurations of Your AWS Services (Aquasec)
  Every cloud provider has different resources that require detailed understanding to scan for security issues.
• What You Need to Know About AWS Lambda Functions Risk Mitigation (Aquasec)
  See a live demo of platform aqua securing AWS Lambda. Performance-optimized and scalable protection, with unique features tailored to AWS L…
• Why Is Cybersecurity Critical for Financial Services? (Aquasec)
  Cybersecurity breaches in financial institutes risk huge losses and trust erosion. The need for robust cybersecurity in financial services…
• Can Vulnerability Scanning Tell You What You’re Exposed to Right Now? (Aquasec)
  See how Aqua real time scanning gives a current answer across cloud, hybrid and air gapped environments.
• Aqua Integrates with Google’s Cloud Security Command Center (Aquasec)
  Aqua now provides an integration with Google's Cloud Security Command Center, allowing GCP users to centrally view container security event…
• Integrate Aqua and ServiceNow to Prioritize Vulnerabilities by Runtime Reality (Aquasec)
  Most of the vulnerabilities in a container environment will never be exploited, the hard part is knowing which ones will.
• The Russia-Ukraine Cyber Attacks: A CISO’s Advice (Aquasec)
  The devastating events in Ukraine have already affected millions of lives and organizations, with profound consequences extending far beyon…
• Using Trivy to Discover Vulnerabilities in VS Code Projects (Aquasec)
  A Visual Studio Code extension for Trivy open source vulnerability scanner, enables scanning of container images directly inside the VS Cod…
• Securing Serverless: Persistent Security for Ephemeral Environments (Aquasec)
  Aqua's solution for securing serverless functions is by minimizing the application's attack surface by scanning the function’s code for ope…
• Mitigating High Severity RunC Vulnerability (CVE-2019-5736) (Aquasec)
  A high severity (CVSS score 7.2) vulnerability (CVE-2019-5763) was found in runc, allowing attackers to compromise the container host.
• MCP to Agentic AI: Shaping AI Security for What’s Next (Aquasec)
  Learn the MCP security risks and best practices to strengthen AI security, protect MCP servers, defend against emerging agentic AI threats.
• Dev-First Security: Aqua Trivy Scanning Now in VS Code (Aquasec)
  In modern development workflows, integrating security seamlessly into the development process is crucial for delivering secure applications…
• Debunking Six Myths of Cloud Native Security (Aquasec)
  Understanding myths and how they are being addressed is crucial for organizations to secure their cloud native environments effectively.
• HeadCrab: A Novel State-of-the-Art Redis Malware (Aquasec)
  Asaf EitaniAssaf Morag February 1, 2023 Aqua Nautilus researchers discovered a new elusive and severe threat that has been infiltrating an…
• How Bayad is Securing Payment Collections for the Philippines (Aquasec)
  Digital innovation in the finance sector is an incredibly stressful proposition. The digital wallet and GDPR both fit into the same sentenc…
• Mitigating Container Image Vulnerabilities - Aqua (Aquasec)
  Aqua Vulnerability Shield™ detects and blocks exploitation of known vulnerabilities in container images, with no code changes or developer…
• Securing Container Workloads on AWS Bottlerocket (Aquasec)
  Aqua supports AWS Bottlerocket, providing best-in-market protection for containerized applications, including orchestrated environments lik…
• Cloud Native Forensics: Challenges and Best Practices (Aquasec)
  As no individual, business, or government is immune from being the victim of the next large-scale cyberattack, organizations need capabilit…
• Docker Image Scanning in your Codefresh Pipeline with Aqua (Aquasec)
  Image scanning integrates as a step in Codefresh's CI/CD, enabling discovery of image vulnerabilities and other issues early in the develop…
• 300,000+ Prometheus Servers and Exporters Exposed to DoS Attacks (Aquasec)
  In this research, we uncovered several vulnerabilities and security flaws within the Prometheus ecosystem.
• 6 (More) Free Docker Tools to Make Container Deployments Easier (Aquasec)
  There’s nothing wrong with seeking help, and that’s especially true for container processes.
• Elevating AWS Kubernetes Security and Compliance (Aquasec)
  Amazon Elastic Kubernetes Service (Amazon EKS) streamlines the process of deploying, managing, and scaling Kubernetes clusters on Amazon We…
• 50 Shades of Vulnerabilities: Uncovering Flaws in Open-Source Vulnerability Disclosures (Aquasec)
  Ilay Goldman Yakir Kadkoda November 8, 2023 Aqua Nautilus researchers evaluated the vulnerability disclosure process for tens of thousands…
• SEC vs. SolarWinds: A Cybersecurity Game Changer for CISOs (Aquasec)
  The SEC charges against SolarWinds and its CISO is a wake-up call, prompting a reevaluation of cybersecurity strategies and the responsibil…