Aquasec · Blogs

Blogs listings from Aquasec on TechiSeek. 420 public listings.

• Investigate and Respond to Sobolan Malware with Aqua (Aquasec)
  Learn how to detect, block, and investigate Sobolan malware.
• Preparing Container-Based Applications for GDPR - Aquasec (Aquasec)
  Everything you need to know to ensure that the data or processes your containers handle are in compliance with the EU's General Data Protec…
• How to Secure Your Kubernetes Clusters with Trivy (Aquasec)
  Trivy’s Kubernetes security scanning allows you to scan running Kubernetes workloads for misconfigurations to ensure Kubernetes cluster sec…
• Threat Alert: Supply Chain Attacks Using Container Images (Aquasec)
  Assaf Morag August 11, 2021 Team Nautilus, Aqua Security’s threat research team, has uncovered several supply chain attacks that use malici…
• Expanding into CSPM with CloudSploit and Security for Cloud VMs (Aquasec)
  For IaaS & PaaS environments, cloud security posture management (CSPM) is the layer required for continual visibility, remediation and comp…
• Securing GenAI: Safeguarding LLM-Powered Applications with Aqua (Aquasec)
  The Aqua solution equips security teams with the tools and expertise needed to navigate the evolving landscape of LLM security.
• A Popular npm Library Compromised in a Supply Chain Attack (Aquasec)
  Andrew Akers November 11, 2021 https://www.aquasec.com/cloud-native-academy/application-security/cyber-kill-chain/In late October, a supply…
• Building Success Together: Driving Customer Satisfaction and Growth (Aquasec)
  Proactive engagement and continuous support are essential to ensuring that our clients consistently achieve their goals.
• Securing Hybrid Cloud Workloads on Google Anthos (Aquasec)
  Aqua provides seamless security for Google Anthos, facilitating secure hybrid cloud deployments of Kubernetes and GKE clusters.
• Kubernetes Version 1.21: What You Need to Know (Aquasec)
  As with every new Kubernetes release there are a great number of new features, however there are a couple of key changes which could have i…
• Audit Your Software Supply Chain for CIS Compliance (Aquasec)
  Mor WeinbergerJuly 14, 2022 The Center for Internet Security (CIS) has recently released the Software Supply Chain Security Guide, a set o…
• CloudSploit Delivers Best Practices for Oracle Cloud Security (Aquasec)
  Aqua CSPM (AKA CloudSploit) adds supports for Oracle Cloud, providing a set of security best practices to keep your Oracle Cloud environmen…
• 5 Must-See Sessions at KubeCon North America (Aquasec)
  We've already pinned down a few can’t-miss events at Cloud Native Computing Foundation’s flagship conference, KubeCon + CloudNativeCon.
• Top 10 Cyber Security Threats and How to Prevent Them (Aquasec)
  Cybersecurity threats encompass any malicious activity aimed at compromising the integrity, confidentiality, or availability of information.
• Top 22 Docker Security Best Practices: Ultimate Guide (Aquasec)
  Get brief, practical guidance to securing your Docker containers - Docker and host configuration, securing images, and monitoring container…
• Top Cloud Native Threats and Vulnerabilities of 2024 (Aquasec)
  The complexity of cloud environments means that there is a virtually infinite list of potential security risks and vulnerabilities that cou…
• TeamTNT Reemerged with New Aggressive Cloud Campaign (Aquasec)
  The botnet run by TeamTNT has set its sights on Docker and Kubernetes environments, Redis servers, Postgres databases, Hadoop clusters, Tom…
• AI Container Security Begins Inside the Workload (Aquasec)
  AI container security is where real protection happens.
• Aqua Integrates with AWS Security Hub (Aquasec)
  The integration of Aqua Cloud Native Platform with AWS Security Hub provides visibility into vulnerabilities and threats in cloud native ap…
• Operationalizing AI Security: Protecting Workloads Where AI Runs (Aquasec)
  Security teams are facing urgent questions as AI moves from experimentation to production.
• Shifting Left: Infrastructure as Code security with Trivy (Aquasec)
  Rory Mc Cune July 27, 2021 One of the great security benefits of the move to cloud native development is the increased use of Infrastructur…
• Apache Applications Targeted by Stealthy Attacker (Aquasec)
  New attack targeting Apache Hadoop and Flink applications that is intriguing due to the attacker's use of packers and rootkits to conceal t…
• Stopping a DreamBus Botnet Attack with Aqua’s CNDR (Aquasec)
  We recently came across a real-life scenario that is very common for organizations. A developer with admin access launched a cloud native a…
• Integrate Aqua and VMware Tanzu to Control What Happens in Your Private Cloud (Aquasec)
  Highly regulated industries like financial services often choose private cloud platforms such as VMware Tanzu Application Service (TAS) to…
• Update: Ongoing Investigation and Continued Remediation (Aquasec)
  Open Source Security Advisory Update: Wednesday, April 1, 2026 Boston, MA 10:00 AM ET Over the past week, we have nearly finalized our inve…
• Mean Time to Repair (MTTR) (Aquasec)
  MTTR refers to a series of metrics that can be used to measure how quickly teams manage technical issues.
• Serverless Security: The Importance of FaaS Risk Assessment (Aquasec)
  Preliminary risk assessment checks contribute greatly to an effective security strategy. Unlike “classic” data-center security policies.
• Pluggable Image Vulnerability Scanners for Harbor (Aquasec)
  Harbor is an open source cloud native artifact registry, sponsored by the CNCF, that you can use as a repository for your container images.
• How Do You Measure FAIR Risk in the Mythos Era? (Aquasec)
  TL;DR: Frontier AI models are discovering zero day vulnerabilities and weaponizing them in hours.
• When Security Scans Break the Brain: Solving Trivy's etcd Exhaustion Problem (Aquasec)
  Pushkar is a Kubernetes security maintainer and co-author of the security chapters in Nigel Poulton’s “The Kubernetes Book.” He writes from…
• How to Build eBPF Programs with libbpfgo (Aquasec)
  In recent years, I have been I using a project called BCC to compile, load, and interact with my bpf programs.
• Key Requirements for CWPP (Cloud Workload Protection Platforms) (Aquasec)
  Gartner’s Market Guide for Cloud Workload Protection Platforms (CWPP) outlines the core capabilities and architecture for hybrid cloud work…
• Threat Alert: TeamTNT is Back and Attacking Vulnerable Redis Servers (Aquasec)
  Over the past few weeks, TeamTNT grabbed headlines after launching several novel attacks against cloud native infrastructure.
• Vulnerability Scanning: Trivy vs the Trivy Operator (Aquasec)
  Over the past few months Aqua Trivy, the all-in-one cloud native security scanner, has rapidly grown in features and tapped into new use ca…
• Kubernetes RBAC: Asking for Forgiveness or Getting Permission (Aquasec)
  Configuring Kubernetes RBAC properly is easier than recovering from a compromised cluster due to over-generous RBAC.
• Software Supply Chain Security with Trivy: Generating SBOMs (Aquasec)
  Anais Urlichs April 14, 2022 Trivy is an easy-to-use, comprehensive open source scanner that helps developers gain visibility into the soft…
• Protecting AWS Fargate Containers at Runtime (Aquasec)
  Containers as a Service (CaaS) like AWS Fargate have proven to be a valuable mechanism for Dev Ops teams to build and deploy complex applic…
• How to Set Up Runtime Protection Against Malware Like Kaiji (Aquasec)
  Defend your workloads with runtime security that detects rootkit activity, blocks fileless execution, and prevents container drift to stop…
• Six Free Tools to Make Your Container Deployments Easier (Aquasec)
  Like many of you working in Docker-space, over time I’ve come across a ton of third-party tools that improve management, cleanup, orchestra…
• Securing Serverless Functions with Aqua (Aquasec)
  Enhanced serverless protection and risk mitigation focused on preventative measures preceding the execution of a function, and monitoring t…
• Improve DevOps Processes: Multiple Security Policies Applied to Images (Aquasec)
  Automatically apply multiple security policies to an image to strike the right balance between efficiency and security in DevOps processes.
• Threat Alert: Fileless Malware Executing in Containers (Aquasec)
  Aqua detected a fileless malware attack that executes/runs from container memory. It can only be detected by dynamically scanning images be…
• How Did Aqua Catch a Cryptomining Attack Hiding in Memory? (Aquasec)
  TLDR: The attacks most likely to go undetected are the ones that never touch disk.
• RSA 2023: Stronger Together, with Aqua (Aquasec)
  We look to become stronger, together at RSA. Learn how to gain real time visibility in your cloud native applications.
• CVE-2020-15275: New Vulnerability Exploits containerd-shim API (Aquasec)
  Vulnerabilty CVE-2020-15257 found in containerd.
• Trivy Partners with echo: Slashing CVEs at the Source (Aquasec)
  This is a guest post by Echo Imagine starting every project with CVE-free base images, without adding any extra effort or tooling to your w…
• Threat Alert: Attackers Building Malicious Images Directly on Your Host (Aquasec)
  New attack exploits a misconfigured Docker API port to build and run a malicious container image on the host, rather than pull it from a pu…
• Container Platforms: 6 Best Practices and 15 Top Solutions (Aquasec)
  Container Platforms: 6 Best Practices and 15 Top Solutions Learn how to effectively use container platforms including container engines, or…
• Linux Kernel Vulnerability: Escaping Containers by Abusing Cgroups (Aquasec)
  CVE-2022-0492, a recently disclosed high-severity Linux vulnerability that relates to a weakness in the handling of release_agent in cgroup…
• Trivy Image Vulnerability Scanner Now Under Apache 2.0 License (Aquasec)
  Trivy, the open source image vulnerability scanner is now under Apache 2.0 license, allowing a wider usage beyond Harbor and Docker Enterpr…