diff --git a/submodules/falcosecurity-rules b/submodules/falcosecurity-rules
index e38fb3f6..407e9972 160000
--- a/submodules/falcosecurity-rules
+++ b/submodules/falcosecurity-rules
@@ -1 +1 @@
-Subproject commit e38fb3f6a7e60e2c6b4f15f8318d711693629e28
+Subproject commit 407e99721f91e89b60eb9d2c8fb3f50703eb3e7f