Aqua Security

Want a halloween costume that's perf(ctl) for spooking your security team? 👀 Meet 'perfctl'—the elusive malware targeting millions of Linux servers with stealth tactics, from hiding in plain sight to using rootkits and backdoors. With a cloak of invisibility and the ability to blend in, it’s the perfect disguise for giving your security team a fright!  👻💻 If you could design a malware costume, what stealthy accessories would you add? Share your ideas below! ⤵️ #Halloween2024 #cybersecurity #perfctl #malware

#KubeCon2024 is right around the corner! 🌟 Aqua Security is gearing up to be in Salt Lake City from November 13-15 at booth H4. Don’t miss the opportunity to meet our #opensource team and the creator of Trivy, Teppei Fukuda. Catch Teppei’s session on Wednesday, November 13, titled “Breaking Free from Vulnerability Scanning Noise: Automated VEX Aggregation for Accuracy”—a must-attend for anyone looking to reduce alert fatigue and enhance #vulnerabilitymanagement. Swing by to grab exclusive Aqua swag, score special giveaways, and connect with our experts. We can’t wait to see you there! ✨ Talk details ➡️ https://lnkd.in/e62HrDKx #KubeCon #VEXHub #AquaTrivy

🔒 Financial services organizations need a systemic approach to securing their cloud native lifecycle. That’s why we’ve created the Financial Services Security Resource Center to help businesses like yours navigate the complexities with: ➡️ Scalable DevSecOps-based strategies to secure workflows from dev through runtime. ➡️ Industry best practices and actionable insights to ensure compliance. ➡️ Demos and educational materials to fortify your cloud native defenses. Unlock all these resources with a single sign-up. Bookmark the page for future reference! 👉 https://lnkd.in/e9Tj9WD8 #finserv #financialservices #cloudnative #security #devsecops

In today's fast-paced cloud native environments, delivering applications quickly is essential, and security must be seamlessly integrated into the process. ☁️🔐 This upcoming webinar explores how #DevSecOps unites development, operations, and security to proactively identify and mitigate security risks, improving both development speed and security. Join this webinar to learn: 🌟 Best Practices 🤨 Challenges in Cloud Native Environments 👏 Real World Success Stories Register below to see how you can accelerate delivery without compromising security. #LinkedInLive #cloudnative #cloudsecurity #cybersecurity

Three events, three cities, one mission: Secure every cloud native application, everywhere. 🌐 Last week, our team was on the ground at AFCEA TechNet Indo-Pacific in Honolulu, SecTor in Toronto, and It-Sa in Nuremberg. From insightful conversations to live demos, we connected with cybersecurity professionals from around the world to share our expertise and innovations. 👏 A big thank you to everyone who stopped by to engage with our team and see Aqua in action. Some 📸 below ⤵️ #AquaSecTeam #CloudNativeSecurity AFCEA International #technetindopacific it-sa – Home of IT Security #itsaexpo #SecTor2024

👀 Spooky Challenge 👀 This haunted house is hiding 6 Aqua logos… Can you find them all? 🏠🔍 Have the chance to win a prize by getting in the spooky spirit with us! 1️⃣ Follow Aqua Security on LinkedIn and like this post 2️⃣ Search the image and find all 6 Aqua logos 3️⃣ Comment "#AquaSecChallenge complete 👻" **Winner will be randomly selected October 31st. #HappyHalloween #AquaSecChallenge

#Kubernetes has come a long way from its initial debut in 2014. What started as a solution to container orchestration challenges is now the backbone of modern application deployment. 🚀 In this reflection, Rani Osnat, Aqua’s SVP of Strategy, walks us through the incredible journey of Kubernetes—its early days, pivotal milestones, and where it's heading in the next decade. From the introduction of role-based access control (RBAC) to supporting persistent volumes and evolving security controls, Kubernetes has continually matured and adapted to new demands. What’s next? From multi-cloud clusters to enhanced security, the possibilities for Kubernetes' future are vast. 🌍🔒 Read more on Cyber Security Intelligence and dive into the key highlights and what admins need to keep on their radar: https://lnkd.in/e6kmXFvy #KuberTENes #celebr8k8s #cloudnative #10yearsofkubernetes

Long time no see, #TeamTNT! 👀 Aqua Nautilus researchers have uncovered a stealthy new campaign from this notorious hacking group, targeting exposed Docker daemons and using Docker Hub to spread their malware. Key Highlights: ➡️ Sliver malware: A stealthy replacement for their old Tsunami backdoor. ➡️ Resource hijacking: Victims’ computing power is being rented out. ➡️ Old tricks: They’re back to using their retired domain TeamTNT is preparing for another large-scale attack—find out how to protect your cloud native environment. 👉 Read the full analysis from Assaf Morag here: https://lnkd.in/eta4T7Tr #AquaNautilus #threatresearch #dockersecurity #cloudnative

Exploring the future of cybersecurity at GovWare 2024! 🌐 🎤 Philip TM Pearson, Aqua’s Field Chief Information Security Officer, joined an expert panel alongside Kwok Yan Lam, Jon Lau, Terry Ray, and Ian Wight to discuss “Preparing for a Quantum-Safe Future: Key Considerations and Strategies.” As quantum computing evolves, so do the threats to sensitive data. This insightful session provided actionable strategies for navigating quantum challenges and equipping organizations to safeguard their digital assets in a rapidly changing landscape. Did you catch the session? Share your biggest takeaway in the comments below! ⬇️ #GovWare2024 #GovWare

Imagine deleting an S3 bucket and unknowingly leaving the door open for an attacker to gain control of your #AWS account. 😱 Aqua Nautilus researchers, Ofek Itach and Yakir Kadkoda, uncovered a critical risk in the AWS Cloud Development Kit (CDK), where predictable naming patterns and default settings could lead to a full account takeover in some scenarios. AWS addressed the issue, but user action is needed if you’ve used CDK v2.148.1 or earlier. This research builds on our previous findings in "Bucket Monopoly" and explores security implications in open-source projects. Get all the details and steps to protect your environment in our latest blog ⤵️ https://lnkd.in/etNhqWAK #AquaNautilus #threatresearch #cybersecurity