diff --git a/.github/workflows/reusable_test_packages.yaml b/.github/workflows/reusable_test_packages.yaml
index facaeeab33e..ac9c13863f8 100644
--- a/.github/workflows/reusable_test_packages.yaml
+++ b/.github/workflows/reusable_test_packages.yaml
@@ -66,6 +66,9 @@ jobs:
       # Right now we are not able to install kernel-headers on our ARM64 self-hosted runner.
       # For this reason, we disable the falco-driver-loader tests, which require kernel headers on the host.
       - name: Run regression tests
+        env:
+          # fixme(leogr): this is a workaround for https://github.com/falcosecurity/falco/issues/2784
+          HOST_ROOT: ""
         run: |
           pushd submodules/falcosecurity-testing
           ./build/falco.test -falco-static=${{ inputs.static && 'true' || 'false' }} -test.timeout=90s -test.v >> ./report.txt 2>&1 || true
diff --git a/cmake/modules/rules.cmake b/cmake/modules/rules.cmake
index a04adc0b3a7..1559c935548 100644
--- a/cmake/modules/rules.cmake
+++ b/cmake/modules/rules.cmake
@@ -15,8 +15,8 @@ include(GNUInstallDirs)
 include(ExternalProject)
 
 # falco_rules.yaml
-set(FALCOSECURITY_RULES_FALCO_VERSION "falco-rules-1.0.1")
-set(FALCOSECURITY_RULES_FALCO_CHECKSUM "SHA256=2348d43196bbbdea92e3f67fa928721a241b0406d0ef369693bdefcec2b3fa13")
+set(FALCOSECURITY_RULES_FALCO_VERSION "falco-rules-2.0.0-rc1")
+set(FALCOSECURITY_RULES_FALCO_CHECKSUM "SHA256=1e5cda24238bb33e7fdb55a523d39fe8eac3978822fca9ce073c6bd537b86ecf")
 set(FALCOSECURITY_RULES_FALCO_PATH "${PROJECT_BINARY_DIR}/falcosecurity-rules-falco-prefix/src/falcosecurity-rules-falco/falco_rules.yaml")
 ExternalProject_Add(
   falcosecurity-rules-falco
diff --git a/submodules/falcosecurity-rules b/submodules/falcosecurity-rules
index 6ed73fee786..f1954372afe 160000
--- a/submodules/falcosecurity-rules
+++ b/submodules/falcosecurity-rules
@@ -1 +1 @@
-Subproject commit 6ed73fee78641490d2e9ec505baa25b86234d5a1
+Subproject commit f1954372afee0cee0053e2eba338714200021f02
diff --git a/submodules/falcosecurity-testing b/submodules/falcosecurity-testing
index 91100227b0c..76d1743a0a6 160000
--- a/submodules/falcosecurity-testing
+++ b/submodules/falcosecurity-testing
@@ -1 +1 @@
-Subproject commit 91100227b0c98fac1a802b33ba73b0c1ec25d894
+Subproject commit 76d1743a0a634371303541501ef454022c56a639