diff --git a/submodules/falcosecurity-rules b/submodules/falcosecurity-rules
index c2c2f6d3..f5ef8d98 160000
--- a/submodules/falcosecurity-rules
+++ b/submodules/falcosecurity-rules
@@ -1 +1 @@
-Subproject commit c2c2f6d38a594bdde4af9a4db505e6d22c70faf9
+Subproject commit f5ef8d98d5ac8642f48dd6a478d5501ef0d903dd