Aqua News

Contact Aqua PR

NPM flaw let attackers add anyone as maintainer to malicious packages

April 28, 2022

A ‘logical flaw’ in the npm registry enabled authors of malicious packages to quietly add anyone and any number of users as ‘maintainers’ to their packages in an attempt to boost the trust in their packages. The GitHub-owned repository of NodeJS components has now fixed the flaw after the issue was responsibly reported by cloud native security company, Aqua.

Read more

Kubernetes security targeted by perfect storm of threats

April 28, 2022

Although attackers are becoming more sophisticated, they’re equally on the search for easy, broad targets — and Kubernetes is delivering such a target,” read the 2022 “Cloud Native Threat Report” published last week by container runtime security vendor Aqua.

Read more

Aqua Security’s KubeSec Enterprise 2022 Opens Call for Proposals

April 27, 2022

BOSTON — April 27, 2022 — Aqua Security, the leading pure-play cloud native security provider, today announced that its KubeSec Enterprise Global Webinar Series 2022 has opened its call for proposals. The deadline to submit a proposal is May 12, 2022. Kubernetes users and experts are invited to share their experiences implementing Kubernetes and adjacent …

Read more

Video: An update from Aqua Security

April 26, 2022

Techday’s 10 Minute IT Jams features Aqua Security Area VP for APAC and Japan Rob D’Amico, who shares with us some insight around the company’s role in providing cloud native security solutions to a wide range of markets.

Read more

The Ins and Outs of Secure Infrastructure as Code

April 26, 2022

The move to IaC has its challenges but done right can fundamentally improve an organization’s overall security posture. An Aqua Security expert shares insights in this contributed article.

Read more

NPM Bug Allowed Attackers to Distribute Malware as Legitimate Packages

April 26, 2022

The supply chain threat has been dubbed “Package Planting” by researchers from cloud security firm Aqua. “Up until recently, NPM allowed adding anyone as a maintainer of the package without notifying these users or getting their consent,” Aqua’s Yakir Kadkoda said in a report published Tuesday.

Read more

Aqua Security Named a 2022 Best Place to Work by the Boston Business Journal

April 26, 2022

BOSTON — April 26, 2022 — Aqua Security, the leading pure-play cloud native security provider, announced today that the Boston Business Journal has named the company a 2022 Best Place to Work. The BBJ’s exclusive ranking honors Massachusetts companies that have built outstanding work environments for their people.  “Aqua’s values are at the core of everything we …

Read more

Aqua Security Research Shows Nearly 70% of CISOs Believe OSS Offers a Faster Path to Security

April 26, 2022

BOSTON — April 26, 2022 — Aqua Security, the leading pure-play cloud native security provider, today issued new research, which shows that nearly 70% of chief information security officers (CISOs) believe open source security solutions provide a faster way to secure their environments. Likewise, 78% of CISOs believe open source solutions provide them with access …

Read more