Secure AI Infrastructure On-Premises from Day One

Aqua Cloud Native Blog

Expert insight, best practices and advice on cloud native security, trends, threat intelligence and compliance.

Your company rolls out a new claims system powered by AI. It is fast, efficient, and customers love the experience. Then one day, a single malicious input slips through. The model is tricked into revealing sensitive records, or a workload spins out of control and consumes expensive GPU cycles. What began as a breakthrough quickly …

From Prompt to Production: Runtime Protection for AI Workloads thumbnail

Securing LLM Apps with Aqua: Beyond the OWASP Checklist

PG_MEM: A Malware Hidden in the Postgres Processes

Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources

Security Threat

OPA Gatekeeper Bypass Reveals Risks in Kubernetes Policy Engines

Security Threat

AI SECURITY

Navigating the OWASP LLM and GenAI Security Landscape

The rush to adopt generative AI has created an explosion of new security tools targeting different aspects of an increasingly complex landscape. Every week, a solution promises to stop prompt injection, prevent data leakage, or harden models against attack. For security leaders, it can feel overwhelming. Which solutions matter, how do they fit together, and …

AI SECURITY

Why AI-SPM Alone is Not Enough to Secure AI Workloads

From writing code to serving customers, companies worldwide are capitalizing on AI to enhance their applications and business processes. But this boom is poised to turn into a bust if security can’t keep pace with AI adoption. And make no mistake: LLMs and AI services, whether they are consumed by the application or hosted and …

Subscribe to Aqua Blog

CONTAINER SECURITY UNBOXED

Investigate and Respond to Sobolan Malware with Aqua Security

When malware attacks like Sobolan are detected, Aqua helps security teams thoroughly analyze and mitigate these threats. Whether it is threat hunting in cloud environments or following an alert, the Aqua Hub provides logs and captured artifacts so you can see how Sobolan gained access, what processes it ran, and how it attempted to persist. …

AI SECURITY

MCP to Agentic AI: Shaping AI Security for What’s Next

Enterprises are rapidly adopting large language model applications, AI assistants, and model orchestration platforms at a pace that rivals the early days of cloud computing. With this acceleration comes both significant opportunity and risk. Yet AI security is lagging behind, struggling to match the speed and scale of adoption. One of the hottest topics right …

SOFTWARE SUPPLY CHAIN SECURITY

NPM Supply Chain: A Critical Threat to Cloud-Native

A new software supply chain attack is targeting a series of highly popular open-source NPM packages unleashing malware across 18 foundational JavaScript packages that collectively accounted for a staggering 2.6 billion weekly downloads. This incident highlights how a compromised open-source package can quickly reach production environments, emphasizing the importance of visibility, security controls, and proactive …

AI SECURITY

AI Container Security Begins Inside the Workload

AI security is often discussed at the edge, through firewalls, proxies, SDKs, or prompt filtering. These approaches serve a purpose, but they overlook where many of the most serious risks actually take place, inside the container.

CONTAINER SECURITY UNBOXED

How to Detect and Block AI-Assisted Malware Like Koske

The Aqua Platform offers full lifecycle protection for cloud native workloads, with runtime defenses designed to detect and stop threats like the Koske. As part of the platform, Aqua Secure AI extends these protections to AI-powered applications and infrastructure, helping teams monitor and mitigate emerging AI threats. From traditional malware to AI-shaped attacks, Aqua provides …

Aqua Trivy

Dev-First Security: Aqua Trivy Scanning Now in VS Code

In modern development workflows, integrating security seamlessly into the development process is crucial for delivering secure applications efficiently. Developers need security tools that work naturally within their development environment, providing immediate feedback without disrupting their workflow. The new Trivy extension for Visual Studio Code addresses this need by directly bringing comprehensive security scanning capabilities into …

SECURITY RESEARCH

AI-Generated Malware in Panda Image Hides Persistent Linux Threat

The line between human and machine-generated threats is starting to blur. Aqua Nautilus recently uncovered a malware campaign that hints at this unsettling shift. Koske, a sophisticated Linux threat, shows clear signs of AI-assisted development, likely with help from a large language model. With modular payloads, evasive rootkits, and delivery through weaponized image files, Koske …

AI SECURITY

Operationalizing AI Security: Protecting Workloads Where AI Runs

Security teams are facing urgent questions as AI moves from experimentation to production. What models are running in our environment? Where are they deployed? Are they operating within policy and if not, can we stop them? Existing tools offer limited answers and they rarely provide governance without slowing developers down. To move forward, security leaders …

AI SECURITY

Securing LLM Apps with Aqua: Beyond the OWASP Checklist

It started with a single LLM API call buried in a product prototype. By the time the team noticed, that call had turned into a full-blown feature. Customers were using it, business logic was being shaped by it, and the security team had not even seen it. That is the pattern we are seeing across …

Page 1 of 3812 3 4 5 Next ›

Need to secure enterprise workloads?

Aqua Cloud Native Application Protection Platform (CNAPP)

Go cloud native with the experts!

Get Demo

Aqua Security

Aqua Security is the pioneer in securing containerized cloud native applications from development to production. Aqua's full lifecycle solution prevents attacks by enforcing pre-deployment hygiene and mitigates attacks in real time in production, reducing mean time to repair and overall business risk. The Aqua Platform, a Cloud Native Application Protection Platform (CNAPP), integrates security from Code to Cloud, combining the power of agent and agentless technology into a single solution. With enterprise scale that doesn’t slow development pipelines, Aqua secures your future in the cloud. Founded in 2015, Aqua is headquartered in Boston, MA and Ramat Gan, IL protecting over 500 of the world’s largest enterprises.

Use Cases

Environments

Partners

Products

Get Started