diff --git a/submodules/falcosecurity-rules b/submodules/falcosecurity-rules
index 64e2adb309b..dd38952168e 160000
--- a/submodules/falcosecurity-rules
+++ b/submodules/falcosecurity-rules
@@ -1 +1 @@
-Subproject commit 64e2adb309b7e07953691eeb53347d28e361b0e3
+Subproject commit dd38952168e0884d23a595a9190bda6ac9520521