#aquasecurity — Public Fediverse posts

CVE Alert: CVE-2026-33634 - aquasecurity - setup-trivy - https://www.redpacketsecurity.com/cve-alert-cve-2026-33634-aquasecurity-setup-trivy/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-33634 #aquasecurity #berriai

Now sure how much #AquaSecurity has cost the software industry by not rotating their keys after already being exploited - but at the time of posting there is at least 188 people in an internal channel related to their repos being exposed, and that's just our part of IKEA. I'd estimate for us it's at least €150k-€200k just for today wasted because the entire software industry seems to treat security as 'something to be done' instead of at the heart of everything we do. #trivy #secOps

‘CanisterWorm’ Springs Wiper Attack Targeting Iran

https://krebsonsecurity.com/2026/03/canisterworm-springs-wiper-attack-targeting-iran/

#InternetComputerProtocol #Ne'er-Do-WellNews #ALittleSunshine #LatestWarnings #TheComingStorm #CatalinCimpanu #CharlieEriksen #AquaSecurity #CanisterWorm #Ransomware #AssafMorag #TeamPCP #Aikido #Flare #Trivy #ICP

‘CanisterWorm’ Springs Wiper Attack Targeting Iran

https://krebsonsecurity.com/2026/03/canisterworm-springs-wiper-attack-targeting-iran/

#InternetComputerProtocol #Ne'er-Do-WellNews #ALittleSunshine #LatestWarnings #TheComingStorm #CatalinCimpanu #CharlieEriksen #AquaSecurity #CanisterWorm #Ransomware #AssafMorag #TeamPCP #Aikido #Flare #Trivy #ICP

‘CanisterWorm’ Springs Wiper Attack Targeting Iran

https://krebsonsecurity.com/2026/03/canisterworm-springs-wiper-attack-targeting-iran/

#InternetComputerProtocol #Ne'er-Do-WellNews #ALittleSunshine #LatestWarnings #TheComingStorm #CatalinCimpanu #CharlieEriksen #AquaSecurity #CanisterWorm #Ransomware #AssafMorag #TeamPCP #Aikido #Flare #Trivy #ICP

‘CanisterWorm’ Springs Wiper Attack Targeting Iran

https://krebsonsecurity.com/2026/03/canisterworm-springs-wiper-attack-targeting-iran/

#InternetComputerProtocol #Ne'er-Do-WellNews #ALittleSunshine #LatestWarnings #TheComingStorm #CatalinCimpanu #CharlieEriksen #AquaSecurity #CanisterWorm #Ransomware #AssafMorag #TeamPCP #Aikido #Flare #Trivy #ICP

‘CanisterWorm’ Springs Wiper Attack Targeting Iran

https://krebsonsecurity.com/2026/03/canisterworm-springs-wiper-attack-targeting-iran/

#InternetComputerProtocol #Ne'er-Do-WellNews #ALittleSunshine #LatestWarnings #TheComingStorm #CatalinCimpanu #CharlieEriksen #AquaSecurity #CanisterWorm #Ransomware #AssafMorag #TeamPCP #Aikido #Flare #Trivy #ICP

https://winbuzzer.com/2026/03/23/trivy-breach-pushed-infostealer-via-github-actions-xcxwbn/

Trivy Breached Twice in a Month via GitHub Actions

#GitHub #GitHubActions #Cybersecurity #Malware #Cybercrime #SecurityBreach #OpenSource #Hackers #npm #Javascript #SoftwareDevelopment #CloudComputing #DataBreaches #Trivy #AquaSecurity #TeamPCP #CanisterWorm

Trivy ecosystem supply chain briefly compromised

https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23

#HackerNews #Trivy #Ecosystem #Supply #Chain #Compromise #Cybersecurity #Vulnerability #SupplyChainSecurity #AquaSecurity

Linux systems targeted with stealthy “Perfctl” cryptomining malware https://www.helpnetsecurity.com/2024/10/07/perfctl-perfcc-cryptomining-linux/ #misconfiguration #cryptojacking #vulnerability #AquaSecurity #Don'tmiss #Hotstuff #rootkits #malware #Linux #News

Malware exploits weak passwords in PostgreSQL for cryptojacking - Up to 800,000 internet-connected databases could be vulnerable to crypto... - https://cointelegraph.com/news/pg-mem-malware-targets-postgresql-databases-crypto-mining #cloud-nativesecurity #postgresqldatabases #cryptominingmalware #databasesecurity #pg_memmalware #weakpasswords #cryptojacking #cybersecurity #aquasecurity #miningpool

Understanding cyber risks beyond data breaches https://www.helpnetsecurity.com/2024/05/20/cyber-risk-trends-video/ #cybersecurity #AquaSecurity #Bitdefender #cyberrisk #Seraphic #Imperva #Tanium #Video #video

New IBM LinuxONE 4 Express – Rack-mounted pre-configured Linux mainframe
https://newsroom.ibm.com/2024-02-06-New-IBM-LinuxONE-4-Express-to-Offer-Cost-Savings-and-Client-Value-through-a-Cyber-Resilient-Hybrid-Cloud-and-AI-Platform
#ycombinator #IBM #LinuxONE_4Express #hybrid_cloud #LinuxONE #Tina_Tarquinio #Dr_Owain_Kenway #Steven_Dickens #IBM_LinuxONE_Ecosystem #AquaSecurity #Clari5 #Exponential_AI #Opollo_Technologies #Pennant #Spiking

Infosec products of the month: November 2023 https://www.helpnetsecurity.com/2023/11/30/infosec-products-of-the-month-november-2023/ #DevoTechnology #ThreatModeler #AquaSecurity #Malwarebytes #PaladinCloud #Ironscales #Fortanix #Lacework #Action1 #Datadog #Entrust #Illumio #OneSpan #Varonis #Amazon #Enzoic #GitHub #Immuta #Kasada #Snappt #Druva #News #ARMO

Infosec products of the month: November 2023 https://www.helpnetsecurity.com/2023/11/30/infosec-products-of-the-month-november-2023/ #DevoTechnology #ThreatModeler #AquaSecurity #Malwarebytes #PaladinCloud #Ironscales #Fortanix #Lacework #Action1 #Datadog #Entrust #Illumio #OneSpan #Varonis #Amazon #Enzoic #GitHub #Immuta #Kasada #Snappt #Druva #News #ARMO

New infosec products of the week: November 10, 2023 https://www.helpnetsecurity.com/2023/11/10/new-infosec-products-of-the-week-november-10-2023/ #AquaSecurity #Malwarebytes #Ironscales #Varonis #Druva #News #ARMO

New infosec products of the week: November 10, 2023 https://www.helpnetsecurity.com/2023/11/10/new-infosec-products-of-the-week-november-10-2023/ #AquaSecurity #Malwarebytes #Ironscales #Varonis #Druva #News #ARMO

Episode 14 - K8 misconfig exposes Fortune 500s’ data - The Reluctant Sysadmin's Guide to Securing a Linux Server - John maddog Hall’s take on RHELs license changes

K8 misconfig exposes Fortune 500s’ data
The Reluctant Sysadmin’s Guide to Securing a Linux Server
John maddog Hall’s take on RHELs license changes
A podcast recommendation

K8 misconfig exposes Fortune 500s’ data

Professionally, I work in the security space, and because of that, I’m always interested in hearing about security issues, risks, attacks, or anything really going on in that space. So right now my Infosec exchange feed is full of people traveling to Vegas, of course and a lot of activities directed towards finding and reporting on security issues. One of the most forward companies in the K8 security space is Aqua Security.

The Reluctant Sysadmin’s Guide to Securing a Linux Server 

Since we’re talking about security already, why not cover the basics in case you’re someone using a Linux server or workstation somewhere in your network. I am a huge fan of revisiting basics over and over again, just to make sure everyone is getting the same message, consistently and frequently. It deepens and freshens knowledge of any topic. Some call it wax on, wax off or sharpening the saw.
I recently came across The Reluctant Sysadmin’s Guide to Securing a Linux Server and I think it has some great information and is very useful.

John maddog Hall’s take on RHELs license changes

Lots and lots has been written about Red Hat’s changes in releasing source code for RHEL and I talked about it in the last show or two. As with everything, people are calming down after a frenzy of discussion and disagreements and the waters are calming a little bit. The distros competing with RHEL have made their business decisions and are moving on with their lives. An assessment by John maddog Hall is worth noting in this discussion

[🖼 Apple podcast link]

#podcast #k8 #kubernetes #aquasecurity #redhat #rhel #security #linux 

Aqua Security raises $135M at a $1B valuation for its cloud native security service - Aqua Security, a Boston- and Tel Aviv-based security startup that focuses squarely on securing cloud... - http://feedproxy.google.com/~r/Techcrunch/~3/_RJZZYZKV3g/ #lightspeedventurepartners #greenspringassociates #ioncrossoverpartners #cloudinfrastructure #serverlesscomputing #insightpartners #cloudcomputing #recentfunding #acrewcapital #aquasecurity #cloudstorage #tlvpartners #enterprise #checkpoint