diff --git a/submodules/falcosecurity-rules b/submodules/falcosecurity-rules
index c0a9bf17d54..28b98b6f5f2 160000
--- a/submodules/falcosecurity-rules
+++ b/submodules/falcosecurity-rules
@@ -1 +1 @@
-Subproject commit c0a9bf17d5451340ab8a497efae1b8a8bd95adcb
+Subproject commit 28b98b6f5f2fd1c1a82fc96c07bc844db33eb7cd