Cloud Native Security, Container Security & Serverless Security Thu, 29 Oct 2026 17:49:26 +0000 en-US hourly 1 https://wordpress.org/?v=7.1.4 https://www.aquasec.com/blog/http2shell-vulnerability-how-should-security-teams-assess-and-reduce-exposure/ Tue, 27 Oct 2026 13:17:22 +0000 https://www.aquasec.com/?p=28248 Updated: October 29th, 2026 TL;DR: The HTTP2Shell vulnerability (CVE-2026-111497) is a critical flaw in Google’s Brotli decompression decoder that could allow attackers to corrupt memory and potentially execute malicious code. With a CVSS v4.0 score of 9.2, the vulnerability affects software beyond Node.js, creating potential exposure across cloud native applications and their dependencies. Security teams …]]> https://www.aquasec.com/blog/php2shell-how-to-protect-vulnerable-php-workloads-while-patching/ Wed, 21 Oct 2026 19:50:31 +0000 https://www.aquasec.com/?p=28211 TL;DR: PHP2Shell comprises two critical vulnerabilities that can allow unauthenticated attackers to execute code on affected PHP installations. Security researchers have reported exploitation attempts, and the vulnerabilities may also expose sensitive information from PHP worker memory. Aquasec’s platform and services are not affected by PHP2Shell, but customers running PHP applications may have vulnerable workloads in …]]> https://www.aquasec.com/blog/top-cloud-native-threats-and-vulnerabilities/ Sun, 23 Feb 2025 17:06:58 +0000 https://www.aquasec.com/?p=24675 The complexity of cloud environments means that there is a virtually infinite list of potential security risks and vulnerabilities that could arise within cloud infrastructure or workloads. That said, some cloud security threats are more prevalent than others – and knowing which risks and vulnerabilities are trending is key to knowing what to prioritize when …]]>