How Did Aqua Catch a Cryptomining Attack Hiding in Memory?
Get Started

Integrate Aqua and VMware Tanzu to Control What Happens in Your Private Cloud

Aqua Cloud Native Blog

Expert insight, best practices and advice on cloud native security, trends, threat intelligence and compliance.

Integrate Aqua and VMware Tanzu to Control What Happens in Your Private Cloud
TL;DR Highly regulated industries like financial services often choose private cloud platforms such as VMware Tanzu Application Service (TAS) to retain greater control over their infrastructure, applications and sensitive data. That control does not remove risk at runtime, where exploitation actually happens and where a patch cycle often cannot catch up in time. Aqua’s integration …
Read more
Popular Posts
Securing LLM Apps with Aqua: Beyond the OWASP Checklist
Securing LLM Apps with Aqua: Beyond the OWASP Checklist thumbnail
MCP to Agentic AI: Shaping AI Security for What’s Next
MCP to Agentic AI: Shaping AI Security for What’s Next thumbnail
AI-Generated Malware in Panda Image Hides Persistent Linux Threat
AI-Generated Malware in Panda Image Hides Persistent Linux Threat thumbnail
PRODUCT INTEGRATIONS
Integrate Aqua and Datadog to Connect Runtime Security with Application Performance
TL;DR AI is compressing the time between vulnerability discovery and exploitation, while security teams still depend on workflows that require people to review alerts and piece together context. A vulnerable or unauthorized image, a runtime policy violation or a change in workload protection can become relevant to application availability before teams understand what happened. Aqua …
Read more
SECURITY RESEARCH
How Did Aqua Catch a Cryptomining Attack Hiding in Memory?
TLDR: The attacks most likely to go undetected are the ones that never touch disk. They leave no files, trigger no signatures and are specifically engineered to evade the scanners and sensors most organizations depend on. Aqua’s runtime behavioral detection engine identified a multistage fileless cryptojacking campaign in a customer environment and surfaced malicious activity …
Read more
Subscribe to Aqua Blog
AI SECURITY
What Can the World Cup Teach Us About Stopping Agentic AI Attacks?
TL;DR:  The OpenAI agent’s attack on Hugging Face showed how quickly AI can chain vulnerabilities, steal credentials, and move through an environment. It also showed why strong runtime defense matters. Like a World Cup goalkeeper, runtime security does not need to know how the attack developed. It needs to stop the final action, contain the …
Read more
PRODUCT INTEGRATIONS
Integrate Aqua and ServiceNow to Prioritize Vulnerabilities by Runtime Reality
TL;DR Most of the vulnerabilities in a container environment will never be exploited, the hard part is knowing which ones will. The remediation timeline for production workloads is not shrinking fast enough to keep up with attacks that adapt at machine speed, so teams cannot afford to work the list in severity order and hope. …
Read more
Aqua Trivy
When Security Scans Break the Brain: Solving Trivy’s etcd Exhaustion Problem
This post comes from Pushkar Joglekar, Principal Security Engineer at Broadcom, where he focuses on VMware Kubernetes distributions. Pushkar is a Kubernetes security maintainer and co-author of the security chapters in Nigel Poulton’s “The Kubernetes Book.” He writes from experience securing infrastructure at scale. It starts with a failing deployment. You attempt a quick fix—maybe …
Read more
VULNERABILITY MANAGEMENT
How Do You Protect a Workload You Cannot Afford to Patch Right Now?
TL;DR Vulnerability management is collapsing under scale and the remediation timeline for production workloads is not going to shorten fast enough to keep pace with attacks that adapt at machine speed. Aqua vShield is a patented runtime capability that closes the gap between discovery and remediation by enforcing compensating controls directly inside running containers, blocking …
Read more
PRODUCT INTEGRATIONS, RUNTIME SECURITY
Integrate Aqua and Splunk for Full Visibility Into Runtime Threats
TL;DR When a container is compromised, the SOC needs the full picture of what happened and fast. The problem is that runtime security data from cloud native workloads often lives outside Splunk, in a separate tool the analyst must pivot to at exactly the wrong moment. Aqua’s integration with Splunk solves this by streaming its …
Read more
RUNTIME SECURITY
How Do You Measure FAIR Risk in the Mythos Era?
TL;DR: Frontier AI models are discovering zero day vulnerabilities and weaponizing them in hours. Boards, regulators and underwriters have noticed, and they are asking a question most CISOs cannot answer: “What does our exposure cost in dollars?” Reporting in CVE counts and CVSS scores made sense when the threat timeline gave security teams room to …
Read more
Autonomous Runtime Security
Known Techniques, Unknown Speed: How AI Changes the Attack Chain
TL;DR AI-driven attacks on containerized environments are no longer theoretical. Frontier models can find vulnerabilities in hardened systems in hours and chain them into working exploits before your team has finished triaging the alert. When an attack moves that fast, the time your security program depends on between discovery and exploitation no longer exists. This …
Read more
AI SECURITY
Autonomous Runtime Security: Turning Runtime Intelligence into Agentic Response
TL;DR Security teams have spent years and billions of dollars shifting security left. This has changed what teams can see and introduced a new level of visibility, but it has not helped with what they can control. Last year, more than 48,000 new vulnerabilities were cataloged, growing at roughly 20 percent annually. Add to that …
Read more
AI SECURITY
Unveiling the Mythos Behind Runtime Security
TL;DR We are about to have a serious problem: attackers no longer need months to investigate and exploit systems, they need minutes. Anthropic says its unreleased Claude Mythos Preview can autonomously find severe vulnerabilities, reproduce them and in some cases chain them into working exploits across hardened systems. The model was deemed too dangerous to …
Read more
Page 1 of 4012345Next ›
Need to secure enterprise workloads?

Aqua Cloud Native Application Protection Platform (CNAPP)

Go cloud native with the experts!

Get Demo