Mainframes Are the New AI Infrastructure. Protect it with Secure AI

Aqua Cloud Native Blog

Expert insight, best practices and advice on cloud native security, trends, threat intelligence and compliance.

If your AI workloads run in containers, then securing those containers is the first and most important step in protecting your AI. And as enterprises begin to deploy containerized AI workloads on Red Hat OpenShift for mainframe environments, that priority becomes even more urgent.

Security Threat

300,000+ Prometheus Servers and Exporters Exposed to DoS Attacks thumbnail

perfctl: A Stealthy Malware Targeting Millions of Linux Servers

Security Threat

50 Shades of Vulnerabilities: Uncovering Flaws in Open-Source Vulnerability Disclosures

Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources

Security Threat

CorePlague: Critical Vulnerabilities in Jenkins Server Lead to RCE

SECURITY RESEARCH

Shadow Roles: AWS Defaults Can Open the Door to Service Takeover

Security Threat

What if the biggest risk to your cloud environment wasn’t a misconfiguration you made, but one baked into the defaults? Our research uncovered security concerns in the deployment of resources within a few AWS services, specifically in the default AWS service roles. These roles, often created automatically or recommended during setup, grant overly broad permissions, …

AI SECURITY

From Prompt to Production: Runtime Protection for AI Workloads

The moment your app calls an LLM, it stops being just containerized software, and becomes an entirely new attack surface. Artificial Intelligence is transforming how applications behave and how they need to be secured. As generative AI and large language models (LLMs) become embedded into everything from customer support bots to internal data tools, security …

Subscribe to Aqua Blog

CONTAINER SECURITY

What’s Really Happening in Your Containers? Aqua’s Risk Assessment Has the Answer

Containers may be mainstream, but securing them in production remains a moving target. As AI adoption scales and environments grow more complex, so too do the risks, especially at runtime, where traditional tools struggle to provide meaningful visibility. These are not legacy exploits like port scans or brute force attempts. Attackers are targeting what happens …

CONTAINER SECURITY UNBOXED

How to Secure Your Containers from TeamTNT’s Docker Gatling Gun Campaign

Aqua’s Runtime Protection acts as a powerful last line of defense when threats bypass your perimeter controls. In attacks like TeamTNT’s Docker Gatling Gun, Aqua monitors container behavior in real time to detect and stop suspicious activity such as file-less execution or resource hijacking. With flexible policies, you can automatically alert and/or block compromised containers …

FEDERAL & GOV

Aqua Security Achieves FedRAMP® High Authorization

Aqua Security’s Cloud Native Application Protection Platform (CNAPP) has achieved FedRAMP® High Impact Authorization, making Aqua one of the few CNAPP providers authorized at the highest level of federal cloud security compliance. This milestone opens the door for U.S. federal agencies, commercial organizations that require FedRAMP High, and cloud service providers operating in FedRAMP-authorized environments …

SECURITY RESEARCH

Tomcat in the Crosshairs: New Research Reveals Ongoing Attacks

News headlines reported that it took just 30 hours for attackers to exploit a newly discovered vulnerability in Apache Tomcat servers. But what does this mean for workloads relying on Tomcat? Aqua Nautilus researchers discovered a new attack campaign targeting Apache Tomcat. In this blog, we shed light on newly discovered malware that targets Tomcat …

VULNERABILITY MANAGEMENT

Cut Through Alert Noise and Fix Toxic Combinations First

Not every security alert is a threat, but the right combination can bring down your cloud native and containerized applications. Security incidents rarely happen because of a single weak point. Instead, they stem from toxic combinations. A misconfigured workload might seem harmless on its own, but add exposed credentials and an unpatched vulnerability, and attackers …

VULNERABILITY MANAGEMENT

IngressNightmare Vulnerabilities: All You Need to Know

CVE-2025-1974 * CVE-2025-24514 * CVE-2025-1097 * CVE-2025-1098 * CVE-2025-24513

On March 24, 2025, a set of critical vulnerabilities (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974 — collectively referred to as IngressNightmare was disclosed in the ingress-nginx Controller for Kubernetes. These vulnerabilities could lead to a complete cluster takeover by granting attackers unauthorized access to all secrets stored across all namespaces in the Kubernetes cluster.

Expert Insights

How the Google-Wiz acquisition redefines cloud security

Google’s acquisition of Wiz, announced last week, is a pivotal moment as it marks a strategic shift in how cyber security will evolve over the next few years. It instantly turns Google into a major player in security, adding Wiz to other building blocks Google has racked up in the past couple of years, most …

RUNTIME SECURITY

Supply Chain Security Risk: GitHub Action tj-actions/changed-files Compromised

CVE-2025-30066

On March 14th, 2025, security researchers discovered a critical software supply chain vulnerability in the widely-used GitHub Action tj-actions/changed-files (CVE-2025-30066). This vulnerability allows remote attackers to expose CI/CD secrets via the action’s build logs. The issue affects users who rely on the tj-actions/changed-files action in GitHub workflows to track changed files within a pull request. …

SECURITY RESEARCH

Stopping Sobolan Malware with Aqua Runtime Protection

Aqua Nautilus researchers have discovered a new attack campaign targeting interactive computing environments such as Jupyter Notebooks. The attack consists of multiple stages, beginning with the download of a compressed file from a remote server. Once executed, the attacker deploys several malicious tools to exploit the server and establish persistence. This campaign poses a significant …

Page 1 of 3712 3 4 5 Next ›

Need to secure enterprise workloads?

Aqua Cloud Native Application Protection Platform (CNAPP)

Go cloud native with the experts!

Get Demo

Aqua Security

Aqua Security is the pioneer in securing containerized cloud native applications from development to production. Aqua's full lifecycle solution prevents attacks by enforcing pre-deployment hygiene and mitigates attacks in real time in production, reducing mean time to repair and overall business risk. The Aqua Platform, a Cloud Native Application Protection Platform (CNAPP), integrates security from Code to Cloud, combining the power of agent and agentless technology into a single solution. With enterprise scale that doesn’t slow development pipelines, Aqua secures your future in the cloud. Founded in 2015, Aqua is headquartered in Boston, MA and Ramat Gan, IL protecting over 500 of the world’s largest enterprises.

Use Cases

Environments

Partners

Products

Get Started