Top all-time · #3653
Aqua
Company blog · aquasec.com/blogsecurity
Aqua is the company blog at aquasec.com, writing about security. Since 2019, 20 different Hacker News readers have linked it 25 times, most often “Trivy report prior incident part of 'ongoing and evolving attack'”. It is still writing: the last post was on 2026-10-29, and you can follow it by feed.
Too few sampled comments (15) to say how often HN recommends it.?
Why HN links it
HN readers link Aqua Security's blog for cloud-native and container security write-ups, such as the Perfctl Linux malware, container isolation, and the Trivy supply-chain attack. Many linking comments are job posts.
Summarised by Claude from a sample of 15 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Aquasec monitors code and running workloads, detects real threats, and enforces policy at runtime, turning deep runtime context into powerful control.
Most-linked posts?
- Trivy report prior incident part of 'ongoing and evolving attack'2 people · 3 mentions · first linked 2026-03-23
- A Brief History of Containers: From the 1970s Till Now2 people · 2 mentions · first linked 2025-02-21
- AWS CDK Risk: Exploiting a Missing S3 Bucket Allowed Account Takeover2 people · 2 mentions · first linked 2024-10-25
What Hacker News says?
They're OCI images now, and Docker was largely a stolen idea from UNIXes* (unices?), including the term containers . As much as I like what Podman to open it up using Containerfiles and not defaulting to this, it might as well go even farther tweak the standard a bit - provide something like Dockerfile that's less golang-inspired and more linux-inspired, and improve the format for images - so the industry can move o…
Comment linking /blog/a-brief-history-of-containers-from-1970s-chroot-to-docker-2016/
on “Docker limits unauthenticated pulls to 10/HR/IP from Docker Hub, from March 1”Submitted Perfctl: Stealthy malware targeting Linux servers as a story · 168 points
HN discussionAqua Security | Open Source Engineer | Remote | Full-time | https://github.com/aquasecurity Aqua Security provides the next generation of Cloud Native security solutions, and open source has been a core part to our DNA and strategy. Our Open Source team is fully remote worldwide. We are looking to expand with: - Golang / Kubernetes engineer for https://github.com/aquasecurity/starboard - Golang engineer for https://…
Comment linking /about-us/careers/co/engineering/81.E1B/open-source-engineer/all/
on “Ask HN: Who is hiring? (April 2021)”Submitted Pg_mem: A Malware Hidden in the Postgres Processes as a story · 7 points
HN discussionAqua Security | Open Source Engineer | Remote Aqua Security provides the next generation of Cloud Native security solutions, and open source has been core to our DNA and strategy. Our Open Source team is fully remote worldwide. We are looking to expand with: - Open Source Engineer for maintaining https://github.com/aquasecurity/starboard : Golang, Kubernetes, K8s operator. - Open Source engineer for working on https…
Comment linking /about-us/careers/co/engineering/81.E1B/open-source-engineer/all/
on “Ask HN: Who is hiring? (June 2021)”Submitted AI-Generated Malware in Panda Image Hides Persistent Linux Threat as a story · 5 points
HN discussionAqua Security | Open Source Engineer (Go) | Remote Aqua Security provides the next generation of Cloud Native security solutions, and open source has been core to our DNA and strategy. Our Open Source team is fully remote worldwide. We are looking for engineers to work on: - https://github.com/aquasecurity/starboard : Golang, Kubernetes, K8s operator. - https://github.com/aquasecurity/trivy : Golang, OPA, vulnerabil…
Comment linking /about-us/careers/co/engineering/81.E1B/open-source-engineer/all/
on “Ask HN: Who is hiring? (August 2021)”Submitted AWS CDK Risk: Exploiting a Missing S3 Bucket Allowed Account Takeover as a story · 3 points
HN discussionAqua Security | Open Source Engineer (Golang) | Remote | Full-time Aqua Security provides the next generation of Cloud Native security solutions, and open source has been core to our DNA and strategy. Our Open Source team is fully remote worldwide. - https://github.com/aquasecurity/starboard : Kubernetes security, api-machinery and operators, security tool orchastration. - https://github.com/aquasecurity/trivy : Vul…
Comment linking /about-us/careers/co/engineering/81.E1B/open-source-engineer/all/?coref=1.10.u65_A09&t=1641236373049
on “Ask HN: Who is hiring? (January 2022)”Submitted Snap Trap: The Hidden Dangers Within Ubuntu's Package Suggestion System as a story · 3 points
HN discussionAqua Security provides the next generation of Cloud Native security solutions, and open source has been a core part to our DNA and strategy. Our Open Source team is fully remote worldwide. We are looking to expand with: - Golang / Kubernetes engineer for https://github.com/aquasecurity/starboard - Golang engineer for https://github.com/aquasecurity/trivy - eBPF/kernel developer for https://github.com/aquasecurity/tr…
Comment linking /about-us/careers/co/engineering/81.E1B/open-source-engineer/all/
on “Ask HN: Who is hiring? (May 2021)”Submitted A Brief History of Containers: From the 1970s Till Now as a story · 2 points
HN discussionThere are lots of options out there. I'm currently exploring Cloud Foundry for our platform, since our core API is written in Spring Boot. This page from AquaSec has lots of links to articles comparing Cloud Foundry to Kubernetes. https://www.aquasec.com/wiki/display/containers/Kubernetes+v... I also found this book to be helpful https://www.amazon.com/gp/product/B07T1Y2JRJ/ref=ppx_yo_dt_b...
Comment linking /wiki/display/containers/Kubernetes+vs+Cloud+Foundry
on “Maybe You Don't Need Kubernetes (2019)”Submitted AWS CDK: Missing S3 Bucket Account Takeover Exploit as a story · 2 points
HN discussionThe article misses one critical point in these attacks: practically all these attacks require downloading remote files to the server once they gain access, using curl, wget or bash. Restricting arbitrary downloads from curl, wget or bash (or better, any binary) makes these attacks pretty much useless. Also these cryptominers are usually dropped to /tmp, /var/tmp or /dev/shm. They need internet access to work, so aga…
Comment linking /blog/kinsing-malware-exploits-novel-openfire-vulnerability/
on “A story on home server security”Submitted Phantom Secrets: Undetected Secrets Expose Major Corporations as a story · 2 points
HN discussionIt is unrealistic to fit Kubernetes Security Best Practices into a single blog post. Here are MANY other blog posts or other very similar content: https://kubernetes.io/blog/2016/08/security-best-practices-k... https://www.aquasec.com/wiki/display/containers/Kubernetes+S... https://dev.to/petermbenjamin/kubernetes-security-best-pract... https://techbeacon.com/hackers-guide-kubernetes-security https://www.sumologic.c…
Comment linking /wiki/display/containers/Kubernetes+Security+Best+Practices
on “Kubernetes Security Best Practices”Submitted Trivy report prior incident part of 'ongoing and evolving attack' as a story · 1 points
HN discussion>individual teams can’t deploy their code without coordinating with every other team, which yields long user feedback loops and a bunch of other knock-on effects Fine until one of the microservices needs an update with new features -> new API because Something Has Changed, and suddenly... >the whole purpose of containers is to decouple the application from the platform. Are containers not a de facto platform? >Liter…
Comment linking /cloud-native-academy/container-platforms/container-platforms-6-best-practices-and-15-top-solutions/
on “Why our team cancelled our move to microservices”Submitted Deceptive Deprecation: The Truth About NPM Deprecated Packages as a story · 1 points
HN discussionSee the mitigation section in the article: https://www.aquasec.com/blog/perfctl-a-stealthy-malware-targ... UEFI won't help here. But keeping your system up to date and limiting the system to the necessary functionality will help you.
Comment linking /blog/perfctl-a-stealthy-malware-targeting-millions-of-linux-servers/
on “Perfctl: Stealthy malware targeting Linux servers”This blog post[1] explains why that is not a safe assumption. [1]: https://www.aquasec.com/blog/container-isolation/
Comment linking /blog/container-isolation/
on “Building untrusted container images safely at scale”https://www.aquasec.com/blog/bucket-monopoly-breaching-aws-a...
Comment linking /blog/bucket-monopoly-breaching-aws-accounts-through-shadow-resources/
on “Bucketsquatting Is (Finally) Dead”They have written about it on github to my question: Trivvy hacked ( https://www.aquasec.com/blog/trivy-supply-chain-attack-what-... ) -> all circleci credentials leaked -> included pypi publish token + github pat -> | WE DISCOVER ISSUE | -> pypi token deleted, github pat deleted + account removed from org access, trivvy pinned to last known safe version (v0.69.3) What we're doing now: Block all releases, until we h…
Comment linking /blog/trivy-supply-chain-attack-what-you-need-to-know/
on “LiteLLM Python package compromised by supply-chain attack”Sounds like Trivy is still compromised: https://www.aquasec.com/blog/trivy-supply-chain-attack-what-...
Comment linking /blog/trivy-supply-chain-attack-what-you-need-to-know/
on “Trivy ecosystem supply chain temporarily compromised”
