When Security Scans Break the Brain: Solving Trivy’s etcd Exhaustion Problem

Aqua Cloud Native Blog

Expert insight, best practices and advice on cloud native security, trends, threat intelligence and compliance.

This post comes from Pushkar Joglekar, Principal Security Engineer at Broadcom, where he focuses on VMware Kubernetes distributions. Pushkar is a Kubernetes security maintainer and co-author of the security chapters in Nigel Poulton’s “The Kubernetes Book.” He writes from experience securing infrastructure at scale. It starts with a failing deployment. You attempt a quick fix—maybe …

From Prompt to Production: Runtime Protection for AI Workloads thumbnail

Securing LLM Apps with Aqua: Beyond the OWASP Checklist

MCP to Agentic AI: Shaping AI Security for What’s Next

AI-Generated Malware in Panda Image Hides Persistent Linux Threat

Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources

Security Threat

VULNERABILITY MANAGEMENT

How Do You Protect a Workload You Cannot Afford to Patch Right Now?

TL;DR Vulnerability management is collapsing under scale and the remediation timeline for production workloads is not going to shorten fast enough to keep pace with attacks that adapt at machine speed. Aqua vShield is a patented runtime capability that closes the gap between discovery and remediation by enforcing compensating controls directly inside running containers, blocking …

RUNTIME SECURITY

Integrate Aqua and Splunk for Full Visibility Into Runtime Threats

TL;DR When a container is compromised, the SOC needs the full picture of what happened and fast. The problem is that runtime security data from cloud native workloads often lives outside Splunk, in a separate tool the analyst must pivot to at exactly the wrong moment. Aqua’s integration with Splunk solves this by streaming its …

Subscribe to Aqua Blog

RUNTIME SECURITY

How Do You Measure FAIR Risk in the Mythos Era?

TL;DR: Frontier AI models are discovering zero day vulnerabilities and weaponizing them in hours. Boards, regulators and underwriters have noticed, and they are asking a question most CISOs cannot answer: “What does our exposure cost in dollars?” Reporting in CVE counts and CVSS scores made sense when the threat timeline gave security teams room to …

Autonomous Runtime Security

Known Techniques, Unknown Speed: How AI Changes the Attack Chain

TL;DR AI-driven attacks on containerized environments are no longer theoretical. Frontier models can find vulnerabilities in hardened systems in hours and chain them into working exploits before your team has finished triaging the alert. When an attack moves that fast, the time your security program depends on between discovery and exploitation no longer exists. This …

AI SECURITY

Autonomous Runtime Security: Turning Runtime Intelligence into Agentic Response

TL;DR Security teams have spent years and billions of dollars shifting security left. This has changed what teams can see and introduced a new level of visibility, but it has not helped with what they can control. Last year, more than 48,000 new vulnerabilities were cataloged, growing at roughly 20 percent annually. Add to that …

AI SECURITY

Unveiling the Mythos Behind Runtime Security

TL;DR We are about to have a serious problem: attackers no longer need months to investigate and exploit systems, they need minutes. Anthropic says its unreleased Claude Mythos Preview can autonomously find severe vulnerabilities, reproduce them and in some cases chain them into working exploits across hardened systems. The model was deemed too dangerous to …

Aqua Trivy

Update: Ongoing Investigation and Continued Remediation

Open Source Security Advisory Update: Wednesday, April 1, 2026 Boston, MA 10:00 AM ET Over the past week, we have nearly finalized our investigation and are now in the final stages of documentation and review. There continues to be no indication that Aqua’s commercial products have been affected. As part of this process, we identified …

RUNTIME SECURITY

When AI Writes, Scans and Fixes Code, Runtime Becomes the Last Line of Defense

TL;DR Anthropic recently launched Claude Code Security. Using its most advanced model, Claude Opus 4.6, the tool found over 500 high-severity vulnerabilities in production open-source codebases. These are bugs with security implications that had survived decades of expert review, continuous fuzzing, and multiple layers of automated scanning. The cybersecurity market reacted badly: roughly $15 billion …

CNAPP

Aqua Security: Built for This Moment

Cyber Security is cyclical. For years now cloud security has been focused on visibility: perform the scans, collect the data, generate the alerts, centralize the dashboards. That made sense when cloud native was new and teams were still figuring out how to operate in containers, Kubernetes, and ephemeral infrastructure. But the environment has changed.

RUNTIME SECURITY

Cloud Threat Detection in 2026: The Growing Role of SecOps

Cloud threat detection is changing as attacks increasingly unfold inside running workloads rather than in static code or configuration layers. This shift affects how detection works in practice and how security teams are able to investigate incidents once alerts appear.

SECURITY RESEARCH

Critical CVE in React Server Components Actively Exploited

CVE-2025-55182

A newly disclosed vulnerability in React Server Components (RSC) dubbed as CVE-2025-55182, and also known as React2Shell, has introduced a severe remote code execution (RCE) vector impacting applications built with React 19 and frameworks that rely heavily on RSC, most notably Next.js.

Page 1 of 4012 3 4 5 Next ›

Need to secure enterprise workloads?

Aqua Cloud Native Application Protection Platform (CNAPP)

Go cloud native with the experts!

Get Demo

Aqua Security

Aqua Security is the pioneer in securing containerized cloud native applications from development to production. Aqua's full lifecycle solution prevents attacks by enforcing pre-deployment hygiene and mitigates attacks in real time in production, reducing mean time to repair and overall business risk. The Aqua Platform, a Cloud Native Application Protection Platform (CNAPP), integrates security from Code to Cloud, combining the power of agent and agentless technology into a single solution. With enterprise scale that doesn’t slow development pipelines, Aqua secures your future in the cloud. Founded in 2015, Aqua is headquartered in Boston, MA and Ramat Gan, IL protecting over 500 of the world’s largest enterprises.

Use Cases

Environments

Partners

Products

Get Started