diff --git a/submodules/falcosecurity-rules b/submodules/falcosecurity-rules
index ae6ed41a..4ccf111c 160000
--- a/submodules/falcosecurity-rules
+++ b/submodules/falcosecurity-rules
@@ -1 +1 @@
-Subproject commit ae6ed41a7a6002367edfc358db4c0e99d8dc820e
+Subproject commit 4ccf111c36ed910c7de6291db898bdb0225bcf18