Aqua Security announced that it has achieved both ISO 27001 and SOC Type II certifications. These certifications demonstrate Aqua’s adherence to the highest operational standards for security controls and information management across company functions and the readiness of its SaaS offerings to serve enterprise-grade customers. “As the DevOps movement transforms the way we think about information […]
In 2020, our Nautilus research team saw yet more attacks targeting the cloud native supply chain and infrastructure. These security threats, including fileless malware in containers, taking advantage of misconfigured Docker API ports, and using container images for attacks are, admittedly, relatively unsophisticated. However, despite this lack of sophistication they are still successful, and it […]
“First impressions count, so take a look at the README for your project’s GitHub repo,” says Liz Rice, VP of open source engineering at Aqua Security. “This is often the first thing that a potential user might see, so it needs to make it very clear what this project will do and how it’s going to […]
Digital transformation has become a key initiative for many enterprises, facilitated by the emergence of easy-to-use cloud-native technologies such as containers and Kubernetes. This year, the COVID-19 outbreak has pushed enterprises even further to accelerate their digital journeys. As they do this, security is constantly raised as a key concern, but it should also be viewed as […]
Aqua Security’s research team, Nautilus, recently revealed that several SaaS services used by container developers are susceptible to cryptocurrency mining. While the risks are real, organizations will not stop using open source software. The efficiency benefits are too great to simply go back and write software from scratch. Open source is here to stay.
Aqua Security in April debuted Dynamic Threat Analysis to defend container-based environments from sophisticated malware that can only be detected using dynamic analysis of a running container. Six months later, the company debuted new Kubernetes-native security capabilities to secure applications that run on Kubernetes across the development, deployment and runtime phases of the application life […]
Tsvi Korren, field CTO of application security company Aqua Security, recommended laying down rules for developers for using open-source components. “An organization can say it’s okay to use open-source components, but you need components that have had a commit in the last three months or a project that has more than 10 maintainers so it isn’t […]
Happy New Year! For us in cloud native industry, 2021 promises to be an exciting one. As companies accelerate their digital transformation, security will be more critical than ever. There’s a lot to look forward to – starting this month, KubeSec Enterprise Summit will bring together industry thought leaders and discuss all things cloud native […]