Aquasec · Blogs

Blogs listings from Aquasec on TechiSeek. 420 public listings.

• What Gartner Wants CTOs to Know About Kubernetes Security (Aquasec)
  What every CTO must know about containers, Kubernetes, and security models as cloud-native adoption goes mainstream.
• Selective Memory Dump for Deeper Container Forensic Analysis (Aquasec)
  Every attack leaves a trail, but in containerized environments, that trail can vanish before you even realize you have been attacked.
• Achieve Software Supply Chain Compliance with EO 14028 (Aquasec)
  As Executive Order 14028 goes into effect, we detail best practices preparing your organization to meet Software Supply Chain compliance wi…
• Securing Container Workloads on Azure Container Apps (ACA) (Aquasec)
  Azure Container Apps (ACA) is a serverless platform for scalable containerized applications, while abstracting the underlying infrastructur…
• Which Kubernetes Management Platform is Right for You? (Aquasec)
  Explore the top 10 Kubernetes solutions, from cloud services to enterprise platforms, for on-premises, cloud, or hybrid setups.
• In-depth Analysis of the PyTorch Dependency Confusion - Aqua (Aquasec)
  PyTorch-nightly dependency chain was compromised. In this blog, we will provide an explanation of this attack and how to safeguard against…
• Visualize and Prioritize Risks in Kubernetes with Aqua (Aquasec)
  Aqua Risk Explorer provides visualization and easy prioritization of risks in Kubernetes environments, to help DevSecOps teams manage Kuber…
• CVE-2019-14287 sudo Vulnerability - Aqua Security (Aquasec)
  The sudo vulnerability is a security policy bypass issue enabling to execute commands as root when the sudoers configuration explicitly dis…
• Secure Your Containers from Perfctl with Aqua Runtime Protection (Aquasec)
  perfctl can evolve and evade signature-based detection. To stay protected combine signature-based and behavioral-based monitoring.
• Matrix Unleashes A New Widespread DDoS Campaign (Aquasec)
  Aqua Nautilus researchers uncovered a new and widespread DDoS campaign orchestrated by a threat actor named Matrix.
• perfctl: A Stealthy Malware Targeting Millions of Linux Servers (Aquasec)
  If you have a Linux server connected to the internet, you could be at risk. In fact, given the scale, we strongly believe the attackers tar…
• “Thin OS” Security for Container Hosts - Aqua (Aquasec)
  Since containers share the host OS Linux kernel, securing the host and securing the containerized applications that run on it are inseparab…
• White House Shifts Cybersecurity Strategy to Drive Resilience (Aquasec)
  This week, the White House released its updated National Cybersecurity Strategy detailing the comprehensive approach the U.S.
• What Is the Secure Software Development Lifecycle (SSDLC)? (Aquasec)
  The SSDLC is an approach to software development and delivery that emphasizes security at all relevant stages of the process.
• Streamline Image Vulnerability Management for OpenShift Image Streams (Aquasec)
  Red Hat’s Openshift Container Platform allows building environments that work more efficiently for large and diversified setups, by using I…
• Cloud Security Trends: Predictions and Strategies for Resilience (Aquasec)
  2025 will see accelerated innovation in areas like automation, code-to-cloud security, AI-driven defenses, and runtime protections.
• Container Isolation: Is a Container a Security Boundary? (Aquasec)
  Does a container constitute a security boundary?
• Cloud Threat Detection in 2026: The Growing Role of SecOps (Aquasec)
  Cloud threat detection is changing as attacks increasingly unfold inside running workloads rather than in static code or configuration laye…
• Optimized Logging for Container Workloads Using AWS FireLens (Aquasec)
  Integrating with AWS FireLens extends our existing AWS solutions to enable developers to build, manage & monitor their applications quickly…
• Conquer Cloud Security Risk: Introducing Real-Time CSPM (Aquasec)
  Real-Time CSPM provides a deeper layer of visibility and context across the entirety of your cloud environment, to prioritize critical secu…
• Navigating Container Security within the FedRAMP Guidelines (Aquasec)
  The digital transformation journey of many organizations heavily leans on cloud technologies.
• Unify to Fortify: Security for AI, Containers, and Every Cloud (Aquasec)
  Cloud adoption has transformed the enterprise IT landscape, but that transformation has not followed a clean or linear path.
• Panamorfi: A New Discord DDoS Campaign (Aquasec)
  Aqua Nautilus researchers uncovered a new Distributed Denial of Service (DDoS) campaign dubbed ‘Panamorfi’.
• Threat Actors Hijack Misconfigured Servers for Live Sports Streaming (Aquasec)
  Learn how Nautilus threat-hunting operation analyzed attackers exploiting misconfigured JupyterLab for illegal stream ripping with Traceesh…
• Docker Hub Unauthorized Access Incident: What You Should Know (Aquasec)
  A database holding the credentials of Docker Hub accounts was exposed to unauthorized access.
• Why AI-SPM Alone is Not Enough to Secure AI Workloads (Aquasec)
  From writing code to serving customers, companies worldwide are capitalizing on AI to enhance their applications and business processes.
• Patch, Ditch, Dodge, or Deal? Your Call on Vulnerabilities (Aquasec)
  Security teams are drowning in vulnerabilities. Cloud native environments can generate tens of thousands of new findings every month, even…
• From Theory to Practice: How to Make DevSecOps Work in Your Organization (Aquasec)
  DevSecOps isn’t just about solving today’s problems, it’s about building a resilient, scalable foundation for the future.
• Native Runtime Protection for Pivotal Cloud Foundry (Aquasec)
  Full lifecycle security for Pivotal Application Service: from scanning & deployment assurance policies to runtime controls.
• Role-Based Access Control in Modern Cloud Native Security (Aquasec)
  Multi-tenant, role-based access control (RBAC) allows you to maintain least-privilege access to different cloud native applications, across…
• Protecting Workloads Against Real-World Attacks With Ease (Aquasec)
  Attackers are sophisticated, there is always a lag between zero days and mitigation, and production workloads are critical.
• How Aqua Scans Container Images On-Demand From The AWS Marketplace (Aquasec)
  The scanner is a full-featured version of Aqua’s image scanning capabilities found in the Aqua Container Security Platform, but with a lice…
• DevSecOps with Trivy and GitHub Actions (Aquasec)
  Configuration of a DevSecOps workflow, that leverages GitHub Actions to build a Docker container, and Trivy to scan for vulnerabilities, on…
• CUPS: A Critical 9.9 Linux Vulnerability Reviewed (Aquasec)
  In the past couple of days there has been many troubling publications and discussions about a mysterious critical Linux vulnerability allow…
• How to Set Up Runtime Defense Against Threats Like Gafgyt (Aquasec)
  Learn how to detect, block, and investigate Sobolan malware.
• Supply Chain Security Risk: GitHub Action tj-actions/changed-files Compromised (Aquasec)
  CVE-2024-29029 allow malicious code injection in a popular GitHub Action potentially exposing secrets.
• Tomcat in the Crosshairs: New Research Reveals Ongoing Attacks (Aquasec)
  New malware targets Apache Tomcat servers, hijacking resources through stealthy payloads & lateral movement.
• IngressNightmare Vulnerabilities: All You Need to Know (Aquasec)
  Practical steps to detection and remediation of the IngressNightmare vulnerabilities including CVE-2025-1974, CVE-2025-24514, CVE-2025-1097…
• Privilege Escalation from Node/Proxy Rights in Kubernetes RBAC (Aquasec)
  One of the side effects of Kubernetes’ rich API and extensive functionality is that sometimes there are security implications to granting u…
• Stopping Sobolan Malware with Aqua Runtime Protection (Aquasec)
  Aqua Nautilus researchers uncovered a multi-stage attack exploiting misconfigurations on tools like Jupyter Notebooks to deploy malware.
• Kubernetes Exposed: Exploiting the Kubelet API (Aquasec)
  Learn how to protect your Kubernetes clusters against Kubelet API attacks and ensure a robust security posture.
• Securing ISV-Provided Container Images (Aquasec)
  ISVs use Containers to easily package and deliver applications, while organizations use these third-party apps which translates into thousa…
• Phantom Secrets: Undetected Secrets Expose Major Corporations (Aquasec)
  Our research discovers that almost 18% of secrets might be overlooked and some cannot be discovered by current scanning tools.
• Muhstik Malware Targets Message Queuing Services Applications (Aquasec)
  Aqua Nautilus has uncovered a new Muhstik malware campaign targeting message queuing services by exploiting a vulnerability in RocketMQ.
• Aqua 3.2: Preventing Container Breakouts with Dynamic System Call Profiling (Aquasec)
  Aqua 3.2 dynamically whitelists syscalls, enforcing seccomp profiles and preventing kernel exploits launched from containers.
• How Thoughtworks Manages Cloud Security - Aquasec (Aquasec)
  Many companies, in an effort to modernize their software and cloud tech stacks, are beginning to confront the challenges of managing securi…
• Securing Kubernetes Everywhere with EKS Anywhere - Aqua (Aquasec)
  Aqua provides holistic Kubernetes security & advanced Kubernetes runtime protection for applications deployed on Amazon EKS Anywhere manage…
• Adopting Zero Trust in Kubernetes: The Fundamentals (Aquasec)
  In late January, the White House published a memo that lays the groundwork for creating a zero-trust architecture for federal agencies.
• NPM Supply Chain: A Critical Threat to Cloud-Native (Aquasec)
  A software supply chain attack hit 18 npm packages with 2.6B downloads. Learn how Aqua protects cloud native apps from tainted code.
• Known Techniques, Unknown Speed: How AI Changes the Attack Chain (Aquasec)
  AI-driven attacks on containerized environments are no longer theoretical. Frontier models can find vulnerabilities in hardened systems in…