Aqua Cloud Native Blog

Expert insight, best practices and advice on cloud native security, trends, threat intelligence and compliance.

Integrate Aqua and VMware Tanzu to Control What Happens in Your Private Cloud

TL;DR Highly regulated industries like financial services often choose private cloud platforms such as VMware Tanzu Application Service (TAS) to retain greater control over their infrastructure, applications and sensitive data. That control does not remove risk at runtime, where exploitation actually happens and where a patch cycle often cannot catch up in time. Aqua’s integration …

Popular Posts

Securing LLM Apps with Aqua: Beyond the OWASP Checklist

Securing LLM Apps with Aqua: Beyond the OWASP Checklist thumbnail

MCP to Agentic AI: Shaping AI Security for What’s Next

MCP to Agentic AI: Shaping AI Security for What’s Next thumbnail

AI-Generated Malware in Panda Image Hides Persistent Linux Threat

AI-Generated Malware in Panda Image Hides Persistent Linux Threat thumbnail

PRODUCT INTEGRATIONS

Integrate Aqua and Datadog to Connect Runtime Security with Application Performance

TL;DR AI is compressing the time between vulnerability discovery and exploitation, while security teams still depend on workflows that require people to review alerts and piece together context. A vulnerable or unauthorized image, a runtime policy violation or a change in workload protection can become relevant to application availability before teams understand what happened. Aqua …

SECURITY RESEARCH

How Did Aqua Catch a Cryptomining Attack Hiding in Memory?

TLDR: The attacks most likely to go undetected are the ones that never touch disk. They leave no files, trigger no signatures and are specifically engineered to evade the scanners and sensors most organizations depend on. Aqua’s runtime behavioral detection engine identified a multistage fileless cryptojacking campaign in a customer environment and surfaced malicious activity …

Subscribe to Aqua Blog

What Can the World Cup Teach Us About Stopping Agentic AI Attacks?

TL;DR: The OpenAI agent’s attack on Hugging Face showed how quickly AI can chain vulnerabilities, steal credentials, and move through an environment. It also showed why strong runtime defense matters. Like a World Cup goalkeeper, runtime security does not need to know how the attack developed. It needs to stop the final action, contain the …

PRODUCT INTEGRATIONS

Integrate Aqua and ServiceNow to Prioritize Vulnerabilities by Runtime Reality

TL;DR Most of the vulnerabilities in a container environment will never be exploited, the hard part is knowing which ones will. The remediation timeline for production workloads is not shrinking fast enough to keep up with attacks that adapt at machine speed, so teams cannot afford to work the list in severity order and hope. …

When Security Scans Break the Brain: Solving Trivy’s etcd Exhaustion Problem

This post comes from Pushkar Joglekar, Principal Security Engineer at Broadcom, where he focuses on VMware Kubernetes distributions. Pushkar is a Kubernetes security maintainer and co-author of the security chapters in Nigel Poulton’s “The Kubernetes Book.” He writes from experience securing infrastructure at scale. It starts with a failing deployment. You attempt a quick fix—maybe …

VULNERABILITY MANAGEMENT

How Do You Protect a Workload You Cannot Afford to Patch Right Now?

TL;DR Vulnerability management is collapsing under scale and the remediation timeline for production workloads is not going to shorten fast enough to keep pace with attacks that adapt at machine speed. Aqua vShield is a patented runtime capability that closes the gap between discovery and remediation by enforcing compensating controls directly inside running containers, blocking …

PRODUCT INTEGRATIONS, RUNTIME SECURITY

Integrate Aqua and Splunk for Full Visibility Into Runtime Threats

TL;DR When a container is compromised, the SOC needs the full picture of what happened and fast. The problem is that runtime security data from cloud native workloads often lives outside Splunk, in a separate tool the analyst must pivot to at exactly the wrong moment. Aqua’s integration with Splunk solves this by streaming its …

RUNTIME SECURITY

How Do You Measure FAIR Risk in the Mythos Era?

TL;DR: Frontier AI models are discovering zero day vulnerabilities and weaponizing them in hours. Boards, regulators and underwriters have noticed, and they are asking a question most CISOs cannot answer: “What does our exposure cost in dollars?” Reporting in CVE counts and CVSS scores made sense when the threat timeline gave security teams room to …

Autonomous Runtime Security

Known Techniques, Unknown Speed: How AI Changes the Attack Chain

TL;DR AI-driven attacks on containerized environments are no longer theoretical. Frontier models can find vulnerabilities in hardened systems in hours and chain them into working exploits before your team has finished triaging the alert. When an attack moves that fast, the time your security program depends on between discovery and exploitation no longer exists. This …

Autonomous Runtime Security: Turning Runtime Intelligence into Agentic Response

TL;DR Security teams have spent years and billions of dollars shifting security left. This has changed what teams can see and introduced a new level of visibility, but it has not helped with what they can control. Last year, more than 48,000 new vulnerabilities were cataloged, growing at roughly 20 percent annually. Add to that …

Unveiling the Mythos Behind Runtime Security

TL;DR We are about to have a serious problem: attackers no longer need months to investigate and exploit systems, they need minutes. Anthropic says its unreleased Claude Mythos Preview can autonomously find severe vulnerabilities, reproduce them and in some cases chain them into working exploits across hardened systems. The model was deemed too dangerous to …

Page 1 of 4012 3 4 5 Next ›

Need to secure enterprise workloads?

Aqua Cloud Native Application Protection Platform (CNAPP)

Go cloud native with the experts!

Get Demo