diff --git a/submodules/falcosecurity-rules b/submodules/falcosecurity-rules
index 679a50aa5c1..df963b6bcdf 160000
--- a/submodules/falcosecurity-rules
+++ b/submodules/falcosecurity-rules
@@ -1 +1 @@
-Subproject commit 679a50aa5c1593dfae7eb66261cb3dcec82cea76
+Subproject commit df963b6bcdf340200fd19a7d253eaf113df40008