diff --git a/submodules/falcosecurity-rules b/submodules/falcosecurity-rules
index 5857874e..1bd7e4ac 160000
--- a/submodules/falcosecurity-rules
+++ b/submodules/falcosecurity-rules
@@ -1 +1 @@
-Subproject commit 5857874e95f78260b2b589a02379a1fd1a81da60
+Subproject commit 1bd7e4ac3aca35020e191ecda00585a1218c9177