What Gartner Wants Every CTO to Know About Kubernetes Security

Aqua Cloud Native Blog

Expert insight, best practices and advice on cloud native security, trends, threat intelligence and compliance.

What Gartner Wants Every CTO to Know About Kubernetes Security

In the new Gartner Top 10 FAQs for CTOs on container and Kubernetes infrastructure report, there’s a strategic planning assumption that “by 2029, more than 95% of global organizations will be running containerized applications in production, which is a significant increase from less than 50% in 2023.” So is that it? Will container and Kubernetes …

Popular Posts

300,000+ Prometheus Servers and Exporters Exposed to DoS Attacks

Security Threat

300,000+ Prometheus Servers and Exporters Exposed to DoS Attacks thumbnail

perfctl: A Stealthy Malware Targeting Millions of Linux Servers

Security Threat

perfctl: A Stealthy Malware Targeting Millions of Linux Servers thumbnail

50 Shades of Vulnerabilities: Uncovering Flaws in Open-Source Vulnerability Disclosures

50 Shades of Vulnerabilities: Uncovering Flaws in Open-Source Vulnerability Disclosures thumbnail

Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources

Security Threat

Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources thumbnail

CorePlague: Critical Vulnerabilities in Jenkins Server Lead to RCE

CorePlague: Critical Vulnerabilities in Jenkins Server Lead to RCE thumbnail

CONTAINER SECURITY UNBOXED

How To Protect Your Containers from pg_mem Malware with Aqua Runtime Security

Protecting against stealthy malware like pg_mem requires a layered defense. While signature-based tools can catch known threats, pg_mem is designed to blend in and bypass traditional detection. Aqua combines behavioral analysis with MITRE ATT&CK-based detection to uncover evasion techniques and suspicious activity that would otherwise go unnoticed. With flexible runtime policies, you can automatically block …

Unify to Fortify: Security for AI, Containers, and Every Cloud

Cloud adoption has transformed the enterprise IT landscape, but that transformation has not followed a clean or linear path. Instead of standardizing on a single platform, most organizations now operate across a patchwork of public clouds, private data centers, and legacy systems. Hybrid and multi cloud strategies have become the norm, not by design but …

Subscribe to Aqua Blog

CONTAINER SECURITY UNBOXED

How to Secure AI Workloads from Code to Cloud to Prompt

Aqua protects AI workloads against new and emerging attacks, such as code injection and jailbreak, with a complete lifecycle approach. It starts with the code, where Aqua embeds AI security directly into your secure coding practices. This includes SAST checks that identify insecure usage of AI/ML packages, all aligned with OWASP Top 10 for Large …

Mainframes Are the New AI Infrastructure. Protect it with Secure AI

If your AI workloads run in containers, then securing those containers is the first and most important step in protecting your AI. And as enterprises begin to deploy containerized AI workloads on Red Hat OpenShift for mainframe environments, that priority becomes even more urgent.

SECURITY RESEARCH

Shadow Roles: AWS Defaults Can Open the Door to Service Takeover

Security Threat

What if the biggest risk to your cloud environment wasn’t a misconfiguration you made, but one baked into the defaults? Our research uncovered security concerns in the deployment of resources within a few AWS services, specifically in the default AWS service roles. These roles, often created automatically or recommended during setup, grant overly broad permissions, …

From Prompt to Production: Runtime Protection for AI Workloads

The moment your app calls an LLM, it stops being just containerized software, and becomes an entirely new attack surface. Artificial Intelligence is transforming how applications behave and how they need to be secured. As generative AI and large language models (LLMs) become embedded into everything from customer support bots to internal data tools, security …

CONTAINER SECURITY

What’s Really Happening in Your Containers? Aqua’s Risk Assessment Has the Answer

Containers may be mainstream, but securing them in production remains a moving target. As AI adoption scales and environments grow more complex, so too do the risks, especially at runtime, where traditional tools struggle to provide meaningful visibility. These are not legacy exploits like port scans or brute force attempts. Attackers are targeting what happens …

CONTAINER SECURITY UNBOXED

How to Secure Your Containers from TeamTNT’s Docker Gatling Gun Campaign

Aqua’s Runtime Protection acts as a powerful last line of defense when threats bypass your perimeter controls. In attacks like TeamTNT’s Docker Gatling Gun, Aqua monitors container behavior in real time to detect and stop suspicious activity such as file-less execution or resource hijacking. With flexible policies, you can automatically alert and/or block compromised containers …

Aqua Security Achieves FedRAMP® High Authorization

Aqua Security’s Cloud Native Application Protection Platform (CNAPP) has achieved FedRAMP® High Impact Authorization, making Aqua one of the few CNAPP providers authorized at the highest level of federal cloud security compliance. This milestone opens the door for U.S. federal agencies, commercial organizations that require FedRAMP High, and cloud service providers operating in FedRAMP-authorized environments …

SECURITY RESEARCH

Tomcat in the Crosshairs: New Research Reveals Ongoing Attacks

News headlines reported that it took just 30 hours for attackers to exploit a newly discovered vulnerability in Apache Tomcat servers. But what does this mean for workloads relying on Tomcat? Aqua Nautilus researchers discovered a new attack campaign targeting Apache Tomcat. In this blog, we shed light on newly discovered malware that targets Tomcat …

VULNERABILITY MANAGEMENT

Cut Through Alert Noise and Fix Toxic Combinations First

Not every security alert is a threat, but the right combination can bring down your cloud native and containerized applications. Security incidents rarely happen because of a single weak point. Instead, they stem from toxic combinations. A misconfigured workload might seem harmless on its own, but add exposed credentials and an unpatched vulnerability, and attackers …

Page 1 of 3712 3 4 5 Next ›

Need to secure enterprise workloads?

Aqua Cloud Native Application Protection Platform (CNAPP)

Go cloud native with the experts!

Get Demo

Aqua Security is the pioneer in securing containerized cloud native applications from development to production. Aqua's full lifecycle solution prevents attacks by enforcing pre-deployment hygiene and mitigates attacks in real time in production, reducing mean time to repair and overall business risk. The Aqua Platform, a Cloud Native Application Protection Platform (CNAPP), integrates security from Code to Cloud, combining the power of agent and agentless technology into a single solution. With enterprise scale that doesn’t slow development pipelines, Aqua secures your future in the cloud. Founded in 2015, Aqua is headquartered in Boston, MA and Ramat Gan, IL protecting over 500 of the world’s largest enterprises.

Read Aqua Security reviews on G2

Use Cases

Environments

Partners

Products

Get Started

Copyright © 2025 Aqua Security Software Ltd. Privacy Policy | Terms of Use | |