Aquasec · Blogs

Blogs listings from Aquasec on TechiSeek. 420 public listings.

• Image Vulnerability Scanning in Azure Container Registry (Aquasec)
  Windows containers and Microsoft VSTS support. I'm happy to announce that Aqua now supports the new Azure Container Registry, or ACR.
• Unveiling CNDR: eBPF-Based Cloud Native Detection and Response (Aquasec)
  Amir Jerbi October 13, 2021 Today, Aqua announced the addition of a new, industry-leading detection and response capability to its Cloud Na…
• Walk the Line: High-Fidelity Incident Detection Without Disruption (Aquasec)
  In the dynamic world of cloud native, security teams are inundated with an overwhelming flood of alerts—far too many for any team to realis…
• Enhancing UK Cybersecurity and Resilience: Impact of the New National Bill (Aquasec)
  The UK's Cyber Security and Resilience Bill represents a significant stride towards fortifying the nation’s defenses against these threats.
• Intro to Fileless Malware in Containers (Aquasec)
  A fileless attack is a technique that takes incremental steps toward gaining control of your environment while remaining undetected.
• Supply Chain Security Has the Operating Model Backwards (Aquasec)
  Supply chain security usually treats runtime as the final stage, the place where teams find out whether earlier controls worked.
• JDWP Misconfiguration in Container Images and K8s (Aquasec)
  Java Debug Wire Protocol (JDWP) is a great way to remotely debug applications during development.
• 2024 Cybersecurity Trends: AI, Cloud, and Threat Intelligence (Aquasec)
  2024 is shaping up to be where AI may become battleground in cybersecurity. Our Nautilus team of researchers shed light on what we might ex…
• Public Travis CI Logs (Still) Expose Users to Cyber Attacks (Aquasec)
  Yakir Kadkoda Ilay Goldman Assaf Morag Ofek Itach June 13, 2022 In our latest research, we at Team Nautilus found that tens of thousands of…
• 10 Essential Container CI/CD Tools (Aquasec)
  Integrate CI/CD with Docker to create optimal environments for building, testing and deploying containers.
• CVE-2021-45046: Second Log4j Security Vulnerability Discovered (Aquasec)
  Rory Mc Cune December 15, 2021 Dec 17 update: The CVSSv3 score for CVE-2021-45046 has been raised from 3.7 to 9.0.
• Securing Flexible Amazon ECS Anywhere Deployments with Aqua (Aquasec)
  Amazon ECS has been a popular service for deploying and managing containers at scale since 2014.
• Evolving Attack Techniques of Autom Cryptomining Campaig (Aquasec)
  Over the past three years, we at Team Nautilus have been tracking an ongoing cryptomining campaign attacking our honeypots.
• Private Cloud vs. Public Cloud: 7 Key Differences & How to Choose (Aquasec)
  Public cloud services are offered by third parties over the Internet, accessible to all. A private cloud is exclusive to a single business…
• A Brief History of Containers: From the 1970s Till Now (Aquasec)
  When we first published this blog post in 2017, the technology landscape for containers was quite different than it is today.
• Mapping Risks and Threats in Kubernetes to the MITRE ATT&CK Framework (Aquasec)
  Aqua Nautilus June 3, 2021 In April, MITRE published the ATT&CK matrix for Containers covering adversarial techniques that target container…
• What Can the World Cup Teach Us About Stopping Agentic AI Attacks? (Aquasec)
  TL;DR: The OpenAI agent’s attack on Hugging Face showed how quickly AI can chain vulnerabilities, steal credentials, and move through an en…
• Gartner Names Container Security Among Top 10 Security Projects for 2019 (Aquasec)
  Gartner's recent research “Top 10 Security Projects for 2019” highlights Container security as one of ten initiatives that security and ris…
• Identify Security Risks in AWS CloudFormation Templates with Trivy (Aquasec)
  Steve Coplan February 8, 2022 Aqua Security’s open source project Trivy now includes scanning of AWS Cloud Formation templates to help deve…
• 8220 Gang Deploys a New Campaign with Upgraded Techniques (Aquasec)
  Nitzan Yaakov July 7, 2022 A recent campaign by the 8220 gang, who have been known to exploit the newly discovered critical Confluence vuln…