https://www.aquasec.com/ Cloud Native Security, Container Security & Serverless Security Tue, 25 Aug 2026 15:13:43 +0000 en-US hourly 1 https://wordpress.org/?v=7.0.4 https://www.aquasec.com/blog/integrate-aqua-and-vmware-tanzu-to-control-what-happens-in-your-private-cloud/ Tue, 25 Aug 2026 15:13:43 +0000 https://www.aquasec.com/?p=27819 TL;DR Highly regulated industries like financial services often choose private cloud platforms such as VMware Tanzu Application Service (TAS) to retain greater control over their infrastructure, applications and sensitive data. That control does not remove risk at runtime, where exploitation actually happens and where a patch cycle often cannot catch up in time. Aqua’s integration …]]> https://www.aquasec.com/blog/integrate-aqua-and-datadog-to-connect-runtime-security-with-application-performance/ Thu, 20 Aug 2026 12:27:22 +0000 https://www.aquasec.com/?p=27813 TL;DR AI is compressing the time between vulnerability discovery and exploitation, while security teams still depend on workflows that require people to review alerts and piece together context. A vulnerable or unauthorized image, a runtime policy violation or a change in workload protection can become relevant to application availability before teams understand what happened. Aqua …]]> https://www.aquasec.com/blog/how-did-aqua-catch-a-cryptomining-attack-hiding-in-memory/ Tue, 04 Aug 2026 15:02:02 +0000 https://www.aquasec.com/?p=27751 TLDR: The attacks most likely to go undetected are the ones that never touch disk. They leave no files, trigger no signatures and are specifically engineered to evade the scanners and sensors most organizations depend on. Aqua’s runtime behavioral detection engine identified a multistage fileless cryptojacking campaign in a customer environment and surfaced malicious activity …]]> https://www.aquasec.com/blog/what-can-the-world-cup-teach-us-about-stopping-agentic-ai-attacks/ Wed, 29 Jul 2026 15:17:38 +0000 https://www.aquasec.com/?p=27785 TL;DR:  The OpenAI agent’s attack on Hugging Face showed how quickly AI can chain vulnerabilities, steal credentials, and move through an environment. It also showed why strong runtime defense matters. Like a World Cup goalkeeper, runtime security does not need to know how the attack developed. It needs to stop the final action, contain the …]]> https://www.aquasec.com/blog/integrate-aqua-and-servicenow-to-prioritize-vulnerabilities-by-runtime-reality/ Tue, 21 Jul 2026 13:19:20 +0000 https://www.aquasec.com/?p=27732 TL;DR Most of the vulnerabilities in a container environment will never be exploited, the hard part is knowing which ones will. The remediation timeline for production workloads is not shrinking fast enough to keep up with attacks that adapt at machine speed, so teams cannot afford to work the list in severity order and hope. …]]> https://www.aquasec.com/blog/when-security-scans-break-the-brain-solving-trivys-etcd-exhaustion-problem/ Tue, 30 Jun 2026 22:37:11 +0000 https://www.aquasec.com/?p=27672 This post comes from Pushkar Joglekar, Principal Security Engineer at Broadcom, where he focuses on VMware Kubernetes distributions. Pushkar is a Kubernetes security maintainer and co-author of the security chapters in Nigel Poulton’s “The Kubernetes Book.” He writes from experience securing infrastructure at scale. It starts with a failing deployment. You attempt a quick fix—maybe …]]> https://www.aquasec.com/blog/how-do-you-protect-a-workload-you-cannot-afford-to-patch-right-now/ Tue, 30 Jun 2026 13:51:55 +0000 https://www.aquasec.com/?p=27619 TL;DR Vulnerability management is collapsing under scale and the remediation timeline for production workloads is not going to shorten fast enough to keep pace with attacks that adapt at machine speed. Aqua vShield is a patented runtime capability that closes the gap between discovery and remediation by enforcing compensating controls directly inside running containers, blocking …]]> https://www.aquasec.com/blog/integrate-aqua-and-splunk-for-full-visibility-into-runtime-threats/ Tue, 23 Jun 2026 13:20:42 +0000 https://www.aquasec.com/?p=27606 TL;DR When a container is compromised, the SOC needs the full picture of what happened and fast. The problem is that runtime security data from cloud native workloads often lives outside Splunk, in a separate tool the analyst must pivot to at exactly the wrong moment. Aqua’s integration with Splunk solves this by streaming its …]]> https://www.aquasec.com/blog/how-do-you-measure-fair-risk-in-the-mythos-era/ Tue, 09 Jun 2026 13:13:53 +0000 https://www.aquasec.com/?p=27584 TL;DR: Frontier AI models are discovering zero day vulnerabilities and weaponizing them in hours. Boards, regulators and underwriters have noticed, and they are asking a question most CISOs cannot answer: “What does our exposure cost in dollars?” Reporting in CVE counts and CVSS scores made sense when the threat timeline gave security teams room to …]]> https://www.aquasec.com/blog/known-techniques-unknown-speed-how-ai-changes-the-attack-chain/ Thu, 07 May 2026 12:58:05 +0000 https://www.aquasec.com/?p=27527 TL;DR AI-driven attacks on containerized environments are no longer theoretical. Frontier models can find vulnerabilities in hardened systems in hours and chain them into working exploits before your team has finished triaging the alert. When an attack moves that fast, the time your security program depends on between discovery and exploitation no longer exists. This …]]>