Blog
Do you have something to share? Contribute to Falco blog!
Rule basics for the Falco 3.0.0 Helm chart
The new Falco Helm chart 3.0.0 (full documentation, upgrade information) comes with a new way to automatically update the Falco rules that are currently loaded. Of course, you can enable, disable and configure this functionality to your …
Falco 0.34.0 a.k.a. "The Honeybee 🍯"
Dear community, today we are delighted to announce the release of Falco 0.34.0 🎉! A big thank you to the community for helping get the latest release out. The Falco community is thrilled about this release and cannot wait to share the …
The GPG key used to sign Falco packages has been rotated
The Falcosecurity organization uses a GPG key for providing detatched signatures for the official Falco packages available at download.falco.org/?prefix=packages. After the security incident of CircleCI disclosed in January 2023, the Falco …
Falcosidekick 2.27.0 and Falcosidekick-UI 2.1.0
So many good things happened for Falcosidekick and Falcosidekick UI this year. It's still incredible these projects became so beloved and useful for the community. To all contributors, promotors and users, a big big thank you. The new year …
Getting started with modern BPF probe in Falco
The new BPF probe has landed among us 👽 and it brings to the table new shiny features. The BPF world grows continuously and every new kernel release introduces some unbelievable novelties! To take advantage of these we have created a …
Restructuring the Kubernetes Threat Matrix and Evaluating Attack Detection by Falco
I’m Hiroki Akamatsu (@hi120ki), an intern on Mercari’s Security Engineering Team. During my internship, I worked on the re-evaluation of Falco, runtime security monitoring tools for Kubernetes. This article presents the following findings …
