Aqua News

In a blog post Aqua security researchers Yakir Kadkoda, Ilay Goldman, Assaf Morag, and Ofek Itach said they had found tens of thousands of user tokens were accessible through the Travis CI API, which provides a way to fetch clear-text log files.

Singapore — June 14, 2022 — Aqua Security, the leading pure-play cloud native security provider, today announced the general availability (GA) of cloud native security SaaS in Singapore, serving the broader APJ region. Customers can immediately take advantage of the data sovereignty, platform security and flexibility provided by the SaaS service to prevent cloud native …

These access keys and credentials are linked to popular cloud service providers, including GitHub, AWS, and Docker Hub,” Aqua Security said. “Attackers can use this sensitive data to initiate massive cyberattacks and to move laterally in the cloud. Anyone who has ever used Travis CI is potentially exposed, so we recommend rotating your keys immediately.

Implementing containers can be economical, efficient, and effective for internal team resources,” says Tsvi Korren, field CTO, Aqua Security. “Though containerization is more operationally complex than maintaining applications on physical servers or VMs, containers have excellent economies of scale.

Aqua’s collaboration with IBM Power demonstrates our support for the platform and our commitment to solving the cloud native security problem for organizations around the world,” said Aqua Security co-founder and CTO Amir Jerbi.

BOSTON — June 2, 2022 — Aqua Security, the pure-play cloud native security provider, today announced general availability of runtime security for customers using Red Hat OpenShift on IBM Power Systems to drive infrastructure and application modernization. With Aqua’s runtime technology, IBM Power customers can now protect the full lifecycle of Red Hat OpenShift containerized …

Whoa, what a month! While we’ve been busy meeting the community at the two major cloud native events, KubeCon Europe and DockerCon, we also had some important news of our own. As the first unified scanner for cloud native applications, the open source Aqua Trivy now allows you to scan a broad range of targets across …

Trivy is now one tool for all cloud native scanning needs including source code, repositories, images, artifact registries, Infrastructure as Code (IaC) templates and Kubernetes environments. With fewer tools to manage, developers, DevOps and DevSecOps now have a more efficient, simplified tool to ensure security of their cloud native applications.