Aquasec · Blogs

Blogs listings from Aquasec on TechiSeek. 420 public listings.

• Securing LLM Apps with Aqua: Beyond the OWASP Checklist (Aquasec)
  It started with a single LLM API call buried in a product prototype. By the time the team noticed, that call had turned into a full-blown f…
• AI-Generated Malware in Panda Image Hides Persistent Linux Threat (Aquasec)
  The line between human and machine-generated threats is starting to blur. Aqua Nautilus recently uncovered a malware campaign that hints at…
• HeadCrab 2.0: Evolving Threat in Redis Malware Landscape (Aquasec)
  This is a second blog about HeadCrab, further analysis of the scope of threat, the malware, the techniques etc.
• Gartner Report for SBOMs: Key Takeaways You Should Know (Aquasec)
  In its recent Innovation Insight for SBOMs report,* Gartner highlights the benefits of using software bills of materials (SBOMs) to secure…
• Scan Container Images for Vulnerabilities & Hidden Malware (Aquasec)
  With an ever-evolving threat landscape, bad actors increasingly target container infrastructure, installing sophisticated malware into imag…
• Codecov Breach: Lessons Learned from the CI Poisoning Attack (Aquasec)
  A recent security incident disclosed by Codecov has again placed the spotlight on supply chain attacks.
• Using Kubernetes Admission Controller for Image Assurance - Aqua (Aquasec)
  The kube-enforcer is Aqua's cloud native Admission Controller ensuring that only scanned, non-compromised or compliant images are used in y…
• AWS Fargate Security, and The Importance of Immutability (Aquasec)
  The Aqua MicroEnforcer enables us to secure runtime workload running on AWS Fargate and Azure Container Instances.
• Mainframes Are the New AI Infrastructure. Protect it with Secure AI (Aquasec)
  AI is moving to containers on mainframes like IBM Z.
• A Security Review of Docker Official Images: Which Do You Trust? (Aquasec)
  A key element in building secure containerized applications is to ensure that the base image that you use is well-maintained and secure.
• Aqua at KubeCon 2025: Securing Cloud Native and AI Apps (Aquasec)
  Aqua Security at KubeCon 2025 showcases Secure AI and Trivy innovations, uniting cloud native and AI security across the entire application…
• Snap Trap: The Hidden Dangers Within Ubuntu’s Package Suggestion System (Aquasec)
  Aqua Nautilus researchers have identified a security issue that arises from the interaction between Ubuntu's command-not-found package and…
• Trivy VEX Hub:The Solution to Vulnerability Fatigue (Aquasec)
  VEX Hub is the missing repository of VEX statements. It aggregates VEX documents from software maintainers and organizes them in a central…
• Securing Container Workloads on AWS with Aqua (Aquasec)
  Aqua's seamless integrations with AWS services makes it easy to secure the entire container DevOps chain and monitor and protect container…
• Injecting Secrets - Kubernetes, HashiCorp Vault and Aqua on Azure (Aquasec)
  Injecting secrets in Kubeneretes: how to set up an Aqua installation on Azure using Kubernetes as the orchestrator and HashiCorp Vault as t…
• Elevating Security: Protecting Containerized Workloads on Mainframes (Aquasec)
  Mainframes and containers represent two distinct yet impactful elements in today’s modern computing architecture.
• What is vmlinux.h and Why is It Important for eBPF Programs? (Aquasec)
  Aqua Team March 30, 2021 eBPF is a powerful and exciting technology that allows developers to add custom code to strategic points in the Li…
• Vulnerability Scanning for Kubernetes Applications: Why and How (Aquasec)
  By automating vulnerability scanning into the Kubernetes applications lifecycle, you can spot risky dependencies in your code and reduce th…
• Acting on Cloud Native Security Data with Splunk (Aquasec)
  Aqua & Splunk integration brings cloud native security data into the Splunk dashboard, allowing holistic monitoring, contextual analysis, a…
• Shadow Roles: AWS Defaults Can Lead to Service Takeover (Aquasec)
  What if the biggest risk to your cloud environment wasn’t a misconfiguration you made, but one baked into the defaults?
• AI-Guided Remediation: Unify Teams & Speed Vulnerability Resolution (Aquasec)
  Announcing our new AI-Guided Remediation capabilities in the Aqua Cloud Security Platform.
• Tracee Runtime Security Series: Writing Custom Tracee Rules (Aquasec)
  In addition to Tracee's base security rule set, Tracee supports custom rules written in Golang or Rego to address the specific security thr…
• Aqua Helps Close the DevSec Gap with Shift Left Security (Aquasec)
  Shifting security left has many benefits. Developers today have more ownership and responsibility for secure coding practices than ever bef…
• Why Is Detection and Response Too Slow for Machine Speed Attacks? (Aquasec)
  TLDR: Runtime security built around detecting activity, correlating signals and then responding assumes there is enough time to act after s…
• Out-of the-Box Policies Simplify Container Compliance (Aquasec)
  One of the challenges organizations have in using cloud native technologies is in figuring out how compliance requirements translate into a…
• How Do Containers Contain? Container Isolation Techniques (Aquasec)
  If you work with containers long enough, you already know that containers should not be considered as security boundaries.
• CIS Benchmark for Kubernetes 1.6 (Aquasec)
  CIS recently released a new security benchmark for Kubernetes 1.6 - this is a summary of the most important security measures you should kn…
• Infrastructure as Code (IaC) Security: Securing Top 5 IaC Platforms (Aquasec)
  IaC security is the practice of securing infrastructure that is managed using infrastructure as code - including platforms like Ansible, Te…
• Digital Operational Resilience Act (DORA) (Aquasec)
  The Digital Operational Resilience Act (DORA) is an EU framework to boost the resilience of the financial sector's digital infrastructure.
• The Challenges of Uniquely Identifying Your Images (Aquasec)
  One of the challenges of container security is ensuring that the image you’re getting is exactly what you expect it to be.
• AWS CDK Risk: Exploiting a Missing S3 Bucket Allow Takeover (Aquasec)
  In June 2024, we uncovered a security issue related to the AWS Cloud Development Kit (CDK), an open-source project.
• The Ticking Supply Chain Attack Bomb of Exposed Kubernetes Secrets (Aquasec)
  Aqua Nautilus researchers found exposed Kubernetes secrets that pose a critical threat of supply chain attack to hundreds of organizations…
• CVE-2022-32223 Discovery: DLL Hijacking via npm CLI (Aquasec)
  Aqua Team Nautilus recently discovered that all Node.js versions earlier than 16.16.0 (LTS) and 14.20.0 on Windows are vulnerable to dynami…
• Aqua Secures Container Image Support in AWS Lambda (Aquasec)
  AWS Lambda enables packaging/deploying functions as containers. Aqua delivers consistent Lambda security across the entire container ecosys…
• How to Secure Amazon ECS Workloads On Demand (Aquasec)
  Aqua Container Security Platform is now available for on-demand consumption (pay as you go), via the newly minted AWS Container category in…
• Securing at Cloud Native Pace with Aqua Terraform Provider (Aquasec)
  At Aqua, we believe that cloud native is an opportunity to do security right. With the release of our Terraform Provider, we’ve added anoth…
• How to Detect and Block AI-Assisted Malware Like Koske (Aquasec)
  The Aqua Platform offers full lifecycle protection for cloud native workloads, with runtime defenses designed to detect and stop threats li…
• Bugs Gone Wild: Container (Stack) Clash and CVE-2017-1000253 (Aquasec)
  “Stack Clash” is a vulnerability in the memory management of OSs. It can be exploited to corrupt the memory of a privileged process and exe…
• Aqua MicroScanner: Free Image Vulnerability Scanning Plugin for Jenkins (Aquasec)
  Aqua MicroScanner - Easy to use MicroScanner Jenkins plugin for automated image vulnerability scanning.
• Auto-Remediation for Secure Configuration in Azure Cloud (Aquasec)
  Aqua CSPM enables auto remediation to automatically address security risks in AWS and Azure Cloud, reducing the time between detection and…
• Software Supply Chain Attacks: 2021 in Review (Aquasec)
  2021 saw a huge rise in software supply chain attacks that more than tripled.
• Improving Your Kubernetes Authorization: Don’t Use system:masters (Aquasec)
  Rory Mc Cune May 20, 2021 When you’re operating Kubernetes clusters, an important area of focus is in ensuring your authorization model is…
• Performance-Optimized Runtime Protection for Serverless Functions (Aquasec)
  In order to protect serverless functions while they are running, you need to consider the very short execution times and ensure that you’re…
• Aqua Security Receives “Deployed on AWS” Badge (Aquasec)
  Aqua earns the “Deployed on AWS” badge, recognizing proven, enterprise-ready CNAPP deployments that help secure cloud native apps across AW…
• Kubernetes Pod Escape Using Log Mounts (Aquasec)
  A Kubernetes pod running as root and with a mount point to its node’s /var/log directory could result in a pod escape that puts the entire…
• TeamTNT’s Docker Gatling Gun Campaign (Aquasec)
  TeamTNT appears to be returning to its roots while preparing for a large-scale attack on cloud native environments.
• Cloud Native Best Practices: Security Policies in CI/CD Pipelines (Aquasec)
  With the continual leftward shifting movement of traditional Dev Ops responsibilities, organizations can now detect security issues earlier…
• Provision Aqua on AWS CloudFormation Public Registry with IaC Automation (Aquasec)
  The availability of AWS Cloud Formation Public Registry makes it possible to manage Aqua components using Infrastructure as Code (IaC) work…
• Impressions from KubeSec, Our Third Enterprise Summit for K8s Security (Aquasec)
  This year, the focus of KubeSec Enterprise Summit was on end-users sharing their organizations’ experiences in securing Kubernetes in produ…
• Kube-hunter - an open source tool for Kubernetes penetration testing (Aquasec)
  Kube-hunter is an open source free tool for Kubernetes automated penetration testing.