The Curious Engineer

Qualys Security Blog

2008–2013

727 posts

2014–2026 →

2013 131

December 2013

  1. Automate the Delivery of Security Intelligence for New Assets
  2. More on Patch Tuesday December 2013
  3. Year closing – December 2013 Patch Tuesday
  4. Internal MITM attack in French Government Agency
  5. The Best of OWASP – Global AppSec Conference and the 2013 WASPY Awards
  6. December 2013 Patch Tuesday Preview – Update

November 2013

  1. New Local 0-day for Windows XP
  2. Secure Your Browser Before Shopping Online
  3. Risk-based Security and the Ideal System: An Interview with Judie Ayoola
  4. Qualys Named a Finalist in Five 2014 SC Magazine Awards
  5. More on Patch Tuesday November 2013
  6. November 2013 Patch Tuesday
  7. November 2013 Patch Tuesday Preview
  8. New Microsoft 0-Day Vulnerability Under Attack – Update

October 2013

  1. Apple Enabled BEAST Mitigations in OS X 10.9 Mavericks
  2. Continuous Security Monitoring: New Whitepaper and Webcast
  3. Oracle CPU October 2013
  4. QualysGuard WAS Wins Readers’ Choice Award for Application Security
  5. QualysGuard WAS 3.1 New Features
  6. SSL Pulse Now Tracking Forward Secrecy and RC4
  7. Patch Tuesday October 2013
  8. OpenSSL Cookbook v1.1 Released
  9. Advance Notification Patch Tuesday October 2013
  10. QSC 2013: The Future is Continuous Security
  11. Introducing the SSL Client Test
  12. October is National Cyber Security Awareness Month

September 2013

  1. Qualys BrowserCheck Adds Automatic Daily Scanning and Improved MacOS Support
  2. Author Steven Levy: What We Owe to the Hackers
  3. FireMon – Traffic Engineer for the Corporate Network
  4. RSA, Oracle Tools Help Businesses Manage Qualys Vulnerability Data
  5. September 2013 – New IE 0-day – Update
  6. Focus Continuous Monitoring Efforts Where Breach Will Cause “Blood to Flow in the Streets,” Analyst Says.
  7. It’s Time to Put Security First, Says Expert Panel
  8. Qualys CEO Courtot in QSC Keynote Says Security Should Be Felt, But Not Seen
  9. DHS Director Streufert: Continuous Monitoring Stops Attacks, Saves Money
  10. Qualys Rated “Strong Positive” in Gartner’s MarketScope for Vulnerability Assessment
  11. Updated SSL/TLS Deployment Best Practices Deprecate RC4
  12. Lieberman Software and Qualys Announce Integration
  13. Java Security Is Getting Better
  14. Outlook 2013 Update Problem
  15. More on Patch Tuesday September 2013
  16. Patch Tuesday September 2013
  17. Is BEAST Still a Threat?
  18. September 2013 Patch Tuesday Preview

August 2013

  1. Java 6 0-Day Exploit in the Wild – Updated
  2. Qualys Ranks #1 for Fifth Consecutive Year in Device Vulnerability Assessment Worldwide
  3. More on Patch Tuesday August 2013
  4. Disabling IPv6 – Updated
  5. August 2013 Patch Tuesday – Updated
  6. Kristi M. Rogers Joins Qualys Board of Directors
  7. Black Hat/DEF CON/B-Sides Las Vegas: Best in Show – part 2
  8. August 2013 Patch Tuesday Preview
  9. Defending against the BREACH Attack
  10. Black Hat/DEF CON/B-Sides Las Vegas: Best in Show – part 1
  11. Configuring Apache, Nginx, and OpenSSL for Forward Secrecy

July 2013

  1. Qualys Announces Web Application Firewall (WAF) Beta Availability
  2. Going to Las Vegas Next Week? Skip the Wi-Fi and Maybe the Apps
  3. Oracle CPU July 2013
  4. Patch Tuesday July 2013 – Update
  5. More on Patch Tuesday July 2013
  6. July 2013 Patch Tuesday Preview

June 2013

  1. SSL Labs: Deploying Forward Secrecy
  2. Hacking into WordPress Using a Vulnerable Plug-in
  3. Microsoft Announces Bug Bounty Program
  4. Oracle Released Java SE Fix for 40 Security Issues
  5. Cyber Security Education Day: Explaining Cyber Mysteries
  6. More on Patch Tuesday June 2013
  7. Patch Tuesday June 2013
  8. Qualys Announces Availability of QualysGuard Private Cloud Platform on VCE Vblock Systems
  9. Qualys Announces Availability of Cloud-Based Customizable Questionnaire Service
  10. Qualys Introduces Express Lite for Small Businesses
  11. New QualysGuard Express Lite for Small Businesses
  12. June 2013 Patch Tuesday Preview

May 2013

  1. Finding HTML Injection Vulns, Part I
  2. A New WAS, An Eternal Challenge
  3. Partnership with Proficio for Medium-Sized Businesses
  4. More on Patch Tuesday May 2013
  5. Patch Tuesday May 2013
  6. May 2013 Patch Tuesday Preview
  7. Defense for the 0-Day in IE8
  8. Update2: New 0-day in Microsoft Internet Explorer 8

April 2013

  1. Automate Host Discovery with Asset Tagging
  2. Verizon Data Breach Investigations Report 2013
  3. Exploit for Java 7u17 in Use in the Wild
  4. New Qualys Research Underscores the Importance of Regular Scanning to Expedite Compliance
  5. SSL/TLS Deployment Best Practices Updated
  6. Qualys and FireMon Integration Provides Real-Time Network Risk Visibility and Remediation
  7. Oracle delays Java 8 to fix security issues
  8. Using Java Decompilers to Find Security Holes
  9. Focus on the Threat: Browser Attacks
  10. Oracle Critical Patch Update April 2013
  11. WordPress Sites Targeted by Brute Force Attack
  12. MS13-036 causes problems in certain Windows 7 installations
  13. Philippe Courtot Keynote at RSA Conference 2013
  14. How to Scan Across an Air Gap with QualysGuard
  15. More on April 2013 Patch Tuesday
  16. April 2013 Patch Tuesday
  17. April 2013 Patch Tuesday Preview
  18. Postgres Announces Upcoming Security Patch

March 2013

  1. BrowserCheck Business Edition Adds “No Plugin” Download Option
  2. RC4 in TLS is Broken: Now What?
  3. Apple updates Mac OS X and Safari
  4. More on Patch Tuesday March 2013…
  5. March 2013 Patch Tuesday
  6. March 2013 Patch Tuesday Preview – Update
  7. Qualys Wins Best Vulnerability Management Tool at SC Magazine Awards
  8. New 0-day for Oracle Java – Update 2

February 2013

  1. Qualys and Verizon Join Forces to Deliver Cloud-Based IT Security and Compliance Solutions
  2. New Adobe Flash Addresses Attacks on Firefox
  3. Continuously Monitor Vulnerability Remediation Performance Across your Organization with QualysGuard v7.8 Vulnerability Scorecards
  4. Qualys Kicks Off RSA Conference with Major News Announcements
  5. Announcing WAS 3.0 with Malware Detection and Burp Suite Integration
  6. Chrome Beta 25 Promoted to Production
  7. Oracle updates the Java February 2013 CPU
  8. Adobe Reader 0-day – Update 3 – patched
  9. More on the February 2013 Patch Tuesday Release…
  10. February 2013 Patch Tuesday
  11. February 2013 Patch Tuesday Preview
  12. SSL Labs Update Increases Security Requirements
  13. Hugh Njemanze Joins Qualys Technical Advisory Board
  14. QID for Latest JAVA SE Critical Patch Released Tonight
  15. Oracle releases early CPU for Java 7

January 2013

  1. Data Privacy Day 2013: Tips for “Digital Citizens”
  2. Qualys Gets Top Marks in Customer Survey from 451 Research
  3. Oracle Critical Patch Update January 2013
  4. Internet Explorer 0-day bulletin – Update
  5. Ruby on Rails Framework January 2013 Vulnerability
  6. New Java 0-day vulnerability – Update 3
  7. More on the January 2013 Patch Tuesday Release…
  8. January 2013 Patch Tuesday
  9. January 2013 Patch Tuesday Preview

2012 157

December 2012

  1. New 0-day Vulnerability in Internet Explorer
  2. Be Prepared: 4 Steps To Better Data Disaster Planning
  3. du Partners with Qualys to Deliver Cloud-Based Vulnerability Management and Policy Compliance Solutions in the United Arab Emirates
  4. Center for Internet Security Publishes Consensus-Based Security Configuration Benchmarks for Key Database Platforms
  5. More on the December 2012 Patch Tuesday Release…
  6. December 2012 Patch Tuesday
  7. December 2012 Patch Tuesday Preview
  8. Qualys Offers Businesses a New, Free “Online Checkup” Service to Automatically Track whether Users’ PCs are Safe for Surfing the Web
  9. Automatic Scanning is now part of BrowserCheck Business Edition
  10. Qualys Named Finalist in Five 2013 SC Magazine Awards Categories

November 2012

  1. South Carolina Cyberattack Takeaways
  2. Clickjacking: An Overlooked Web Security Hole
  3. Black Friday & Cyber Monday Preparations
  4. San Francisco Business Times Recognizes Philippe Courtot as a 2012 Most Admired CEO
  5. More on the November 2012 Patch Tuesday Release…
  6. Patch Tuesday November 2012
  7. Automate On-Demand Reporting with Selenium
  8. November 2012 Patch Tuesday Preview
  9. Using Dynamic Search Lists to Align Vulnerability Reporting with Patching Cycles
  10. Apple Releases New Safari and iOS

October 2012

  1. Security Improvements in Windows 8
  2. Qualys Introduces Innovative Predictive Analytics Engine for Zero-day and Microsoft Patch Tuesday Vulnerabilities
  3. Qualys Releases Major Extensions to Its QualysGuard Cloud Platform
  4. 10th Annual Qualys Security Conference to Feature Renowned Security Experts Discussing Security Challenges and Opportunities in the Era of Cloud Computing
  5. Oracle CPU October 2012 – Update
  6. National Cyber Security Awareness Month Encourages Americans to STOP. THINK. CONNECT.
  7. Oracle CPU October 2012 Preview
  8. Qualys Expands QualysGuard PCI Cloud Platform for New Internal Scanning Requirements of PCI DSS 6.2
  9. More on the October 2012 Patch Tuesday Release…
  10. Patch Tuesday October 2012
  11. What are my most prevalent “worst of the worst” vulnerabilities?
  12. Update for Adobe Flash v11 and AIR v3
  13. October 2012 Patch Tuesday Preview
  14. Qualys Wins Reader’s Choice Awards 2012 for Best Vulnerability Management

September 2012

  1. Hacking Web Apps
  2. New 0-day for Internet Explorer – Update 3
  3. Apple Mac OS X Security Updates
  4. CRIME: Information Leakage Attack against SSL/TLS
  5. More on the September 2012 Patch Tuesday Release…
  6. September 2012 Patch Tuesday
  7. September 2012 Patch Tuesday Preview
  8. IPv6 Implementation Series

August 2012

  1. New Java 0-Day Disclosed – Update 4
  2. Qualys Named in Inc. Magazine’s List of America’s Fastest-Growing Private Companies
  3. Adobe Flash Update APSB12-19
  4. AV – Protection Against Vulnerabilities ?
  5. Qualys Receives “Strong Positive” Rating in Gartner MarketScope for Vulnerability Assessment
  6. Would You Let Your Grandma Use WebSockets?
  7. More on the August 2012 Patch Tuesday Release…
  8. August 2012 Patch Tuesday – Update
  9. Qualys Ranks 26th in Silicon Valley/San Jose Business Journal’s Largest Private Companies List
  10. Oracle releases OOB Patch for 0-day Vulnerability
  11. August 2012 Patch Tuesday Preview
  12. Black Hat & DEF CON 2012 Redux
  13. The Tiny Mighty Waldo

July 2012

  1. How Malware Employs Anti-Debugging, Anti-Disassembly and Anti-Virtualization Technologies
  2. Qualys Adds IPv6 Support to FreeScan Service
  3. How to Scan IPv6 Addresses with Qualys FreeScan
  4. Introducing QualysGuard Dynamic Asset Tagging and Management
  5. Android Security Evaluation Framework: ASEF
  6. Protocol-Level Evasion of Web Application Firewalls
  7. Apple releases Safari 6.0
  8. Microsoft Security Advisory Exchange/Sharepoint
  9. Qualys Announces General Availability of Its Dynamic Asset Tagging and Management Technology
  10. Qualys Introduces CyberScope Reporting Capabilities for Federal and Government Agencies
  11. Oracle CPU July 2012
  12. Qualys Researchers to Present Groundbreaking Malware Research and Cybercriminal Evasion Techniques at Black Hat USA 2012
  13. How Good Is Client-Side Support for RC4?
  14. Oracle CPU July 2012 Preview
  15. SecureLink Selects Qualys to Provide Best-of-Breed Vulnerability Management Services in the Middle East
  16. Discovered Patterns in Numeric Passwords Raise New Questions
  17. More on the July 2012 Patch Tuesday Release…
  18. July 2012 Patch Tuesday
  19. Reminder – DNS Changer Deadline Looming
  20. July 2012 Patch Tuesday Preview
  21. AV or no AV

June 2012

  1. Safe Browsing with Qualys BrowserCheck
  2. Howard A. Schmidt Joins Qualys Board of Directors
  3. Qualys to Assist Organizations with EU Cookie Directive Compliance
  4. Using QualysGuard WAS for Compliance with UK Cookie Regulations
  5. Cisco releases Updates for ASA, ACE, VPN
  6. Microsoft vs. Flame – Part 2 – Update
  7. Meeting PCI Requirement 11.2 with QualysGuard
  8. ModSecurity and ModSecurity Core Rule Set Multipart Bypasses
  9. More on the June 2012 Patch Tuesday Release…
  10. June Patch Tuesday 2012 – Update 2
  11. Qualys Introduces Private Cloud Offering
  12. Lessons Learned from Cracking 2 Million LinkedIn Passwords
  13. June 2012 Patch Tuesday Preview
  14. Microsoft Updates Flame Advisory

May 2012

  1. Risks of Vulnerabilities in Example Scripts Bundled with Software
  2. Ten Ways to Speed Up Your Patching
  3. Passing the Internal Scan for PCI DSS 2.0
  4. Automatic vs. Manual Data
  5. Apple Security Update Fixing QuickTime Vulnerabilities
  6. New Security and Industry Experts Join Qualys CTO/CSO Advisory Board
  7. Apple May 2012 Security Releases
  8. More on the May 2012 Patch Tuesday Release…
  9. Qualys Awarded Global Market Share Leadership Award in Vulnerability Management for Second Consecutive Year
  10. May Patch Tuesday 2012
  11. Qualys Wins Information Security Vendor of the Year at SC Magazine Europe Awards
  12. Urgent Adobe Patch for Flash Player
  13. May 2012 Patch Tuesday Preview
  14. Oracle Adresses 0-day “TNS Poison”

April 2012

  1. Announcing SSL Pulse
  2. Microsoft SIR 2012 – New Conficker Statistics
  3. LogRhythm Partners with Qualys
  4. Oracle Critical Patch Update April 2012
  5. Oracle CPU April 2012 – Pre-release
  6. Apple Takes Cool, New Approach to Flashback Trojan
  7. SecureState Partners with Qualys to Deliver Cloud-Based Security and Compliance Solutions
  8. More on the April 2012 Patch Tuesday Release…
  9. April Patch Tuesday 2012
  10. April 2012 Patch Tuesday Preview
  11. Apple Patches Critical Java Flaw

March 2012

  1. Qualys Supports Reform at CA/Browser Forum
  2. Fast Updating: the Best Way to Defend Against Java Attacks
  3. Six Ways to Improve SCADA Security
  4. Auto-Update for Adobe Flash
  5. SCADA System Fundamentals
  6. Verizon Breach Report – New and Old Takeaways
  7. LockPath and Qualys Streamline IT-GRC Risk Reporting
  8. Qualys Announces New Integration with Thycotic’s Secret Server
  9. Using QualysGuard With Secret Server
  10. More on the March 2012 Patch Tuesday Release…
  11. March Patch Tuesday 2012
  12. March 2012 Patch Tuesday Preview
  13. RSAC 2012 Keynote: The Urgent Need for a More Effective Approach to Security
  14. SSL and Browsers: The Pillars of Broken Security

February 2012

  1. Qualys Introduces New Services and Major Technological Innovations to QualysGuard Cloud Platform
  2. Using QualysGuard 7.0: The New UI
  3. Announcing the SSL/TLS Deployment Best Practices Guide
  4. Qualys CEO to Keynote at RSA Conference USA 2012
  5. More on the February 2012 Patch Tuesday Release…
  6. Detecting ‘Auto-answer’ in Videoconferencing Equipment
  7. Qualys Named a Finalist for Three SC Magazine Europe Awards Including Information Security Vendor of the Year
  8. New Oracle Java and new Shockwave Player
  9. February Patch Tuesday 2012
  10. QualysGuard 7.0
  11. February 2012 Patch Tuesday Preview
  12. Qualys and GRCBizassurance Partner to Deliver Cloud-Based Vulnerability Management Services in South Africa

January 2012

  1. Current pcAnywhere Security Issues
  2. Detecting the DNS Changer Malware
  3. Data Privacy Day 2012
  4. How I Knocked Down 30 Servers from One Laptop
  5. Leading Analyst Firm Ranks Qualys #1 for Third Consecutive Year in Device Vulnerability Assessment
  6. Solving the Secure Password Conundrum
  7. Qualys Expands Popular FreeScan Service for SMBs
  8. Oracle Critical Patch Update January 2012
  9. Oracle Critical Patch Update January 2012
  10. Update Your PCs: OK, but How About Printers?
  11. More on the January 2012 Patch Tuesday…
  12. January 2012 Patch Tuesday
  13. 2011 Year in Review, Trends for 2012
  14. January 2012 Patch Tuesday Preview
  15. Are you ready for slow reading?
  16. MetricStream Partnership Brings Actionable Security and Risk Intelligence to IT-GRC

2011 121

December 2011

  1. Microsoft Releases MS11-100 for ASP.NET DoS Attack
  2. New DOS Attack on PHP, ASP, Java Disclosed at CCC Congress – Updated
  3. Zion Security’s “Security for Life” Benefits Belgian Red Cross
  4. Adobe Patch for Newest Reader 0-day
  5. Silent Updating for Internet Explorer
  6. More on the December 2011 Patch Tuesday…
  7. December 2011 Patch Tuesday
  8. December 2011 Patch Tuesday Preview
  9. Qualys Brings Web Application Scanning to Next Level of Automation
  10. MS-ISAC Selects Qualys to Bring Cloud-Based Security and Compliance Solutions to State and Local Governments
  11. MS11-077: From Patch to Proof-of-Concept

November 2011

  1. Into the Darkness: Dissecting Targeted Attacks
  2. Free Security Services From Qualys This Holiday Season
  3. Apache HTTP Server Reverse Proxy/Rewrite URL Validation Issue
  4. Advanced Persistent Threats Experts Video
  5. Morto Architecture Review
  6. QualysGuard First to Support Solaris 11
  7. Qualys Named a Finalist in Four SC Awards for 2012 Including Best Security Company
  8. More on the November 2011 Patch Tuesday…
  9. November 2011 Patch Tuesday
  10. On the Microsoft Duqu Advisory – time to act yet ?
  11. Update: November 2011 Patch Tuesday Preview
  12. DoS Analysis of Microsoft Host Integration Server, CVE-2011-2008 in MS11-082
  13. How to Protect Against Slow HTTP Attacks

October 2011

  1. TLS Renegotiation and Denial of Service Attacks
  2. Qualys Makes the San Francisco Business Times Fast 100 List
  3. Dept. of Homeland Security Unites Groups to Combat Cyber-Crime
  4. Mitigating the BEAST attack on TLS
  5. Qualys Named in Fastest-Growing Silicon Valley Private Companies List for Fourth Consecutive Year
  6. Risk I/O Partners with Qualys to Automate Vulnerability Detection, Management and Remediation
  7. Risk I/O Integrates with QualysGuard to Further Automate Vulnerability Management
  8. More on the October 2011 Patch Tuesday…
  9. October 2011 Patch Tuesday
  10. New Free Audit Service to Secure Web Sites from Malware and Vulnerabilities
  11. Microsoft SIR 2011 – Focus is on Malware
  12. October 2011 Patch Tuesday Preview
  13. Qualys and Keynectis Announce Partnership to Ensure Proper SSL Implementation, Detection of Vulnerabilities and Elimination of Malware Infections

September 2011

  1. Qualys Showcases Significant Expansions to Its QualysGuard Security-as-a-Service Platform
  2. Allgress to Provide Free Licenses of Vulnerability Analysis Module (VAM) to Qualys Customers
  3. SSL Labs: Announcing launch of two Convergence notaries
  4. Dashboard and Drill-down Reporting in Policy Compliance
  5. Transporting Policies in Policy Compliance
  6. Integrated Vulnerability Risk Management and IT Risk and Compliance with QualysGuard and Modulo
  7. Qualys and Modulo Showcase Integrated Vulnerability Management with IT GRC
  8. Testing Web Servers for Slow HTTP Attacks
  9. More on the September 2011 Patch Tuesday…
  10. September 2011 Patch Tuesday
  11. September 2011 Patch Tuesday Preview – Update

August 2011

  1. New Open-Source Tool for Slow HTTP DoS Attack Vulnerabilities
  2. Patch Analysis for MS11-058
  3. “Turkish” Browser Security
  4. Web Application Scanning & CSRF
  5. More on the August 2011 Patch Tuesday…
  6. August 2011 Patch Tuesday – Update
  7. DEFCON Kids – Preparing Us for Our Future in the Digital Domain
  8. August 2011 Patch Tuesday Preview
  9. Qualys Presents New Consultant Edition, WAS 2.0 and New UI at Black Hat 2011

July 2011

  1. Huge July Oracle CPU
  2. Qualys Makes the 2011 AlwaysOn Global 250 Top Private Companies List
  3. More on July’s Patch Tuesday…
  4. July 2011 Patch Tuesday
  5. Patch Tuesday Preview for July 2011
  6. Identifying Slow HTTP Attack Vulnerabilities on Web Applications

June 2011

  1. Why You Should Always Use HTTPS
  2. Dell SecureWorks Partners with Qualys to Deliver SaaS-Based Vulnerability Management Services
  3. Qualys Announces BrowserCheck Business Edition
  4. Qualys to Present the Business Case for Moving to Security-as-a-Service at Gartner Security & Risk Management Summit
  5. Stopbadware: State of Badware – June 2011
  6. More on June’s Patch Tuesday…
  7. June 2011 Patch Tuesday
  8. Patch Tuesday June 2011 – Preview
  9. Qualys Recertifies Its Cloud Computing FDCC Auditing Service
  10. QualysGuard SCAP Validation

May 2011

  1. Windows Share Enumeration, Detailed Audit Settings, and ExploitKit Mapping
  2. Good Software Hygiene – New Tool in QualysGuard
  3. More on May’s Patch Tuesday…
  4. May 2011 Patch Tuesday
  5. Analysis: Malware Win32/Rimecud.B
  6. Patch Tuesday – Preview May 2011
  7. Qualys Receives Highest Possible Rating of ‘Strong Positive’ in Gartner Vulnerability Assessment MarketScope Report

April 2011

  1. Good Software Hygiene is Effective in Combat of Malware-Driven Data Breaches
  2. Qualys Wins CEO of the Year and Best SME Security Solution at the 2011 European SC Magazine Awards
  3. New BrowserCheck: Plug-ins vs Javascript and Mobile Support
  4. Microsoft CVD and Efforts for Industry Collaboration
  5. More on Microsoft Excel Vulnerability MS11-021 w/ the Researcher Who Discovered It
  6. Dimension Data Partners with Qualys
  7. Adobe Patch for Flash 0-day
  8. QualysGuard PCI Now Includes Open Services Report
  9. Analysis: Adobe Flash Player Zero Day CVE-2011-0611
  10. More on April’s Patch Tuesday…
  11. Patch Tuesday April 2011
  12. Patch Tuesday April 2011 – Preview
  13. Improving Policy Editing and Reporting

March 2011

  1. Qualys Partners with StopBadware to Help Combat Malware on the Internet
  2. 0-day for Adobe Flash and Reader – Updated
  3. CanSecWest results – day 1
  4. More on March’s Patch Tuesday…
  5. Patch Tuesday March 2011
  6. Qualys Named Finalist for Five SC Magazine Europe Awards
  7. Patch Tuesday March 2011 – Preview

February 2011

  1. Qualys @ RSA Conference USA 2011
  2. SC Magazine Names Qualys Best Security Company
  3. RSA USA 2011 Presentation on Browser Security
  4. Qualys Publishes “Web Application Scanning for Dummies” Book
  5. Qualys News at RSA Conference 2011 USA
  6. QualysGuard Adds Malware Correlation and Virtual Patch Solutions
  7. Configuration Scanning of Cisco IOS
  8. Integrating Qualys Data with RSA Archer
  9. More on February’s Patch Tuesday…
  10. Patch Tuesday Bottomline – February 2011
  11. FDCC Enhancement: SCAP Scanning of Windows 7, Windows 7 Firewall, and IE8
  12. Filtering Frameworks within Policy Compliance
  13. Qualys Ranks #1 in Device Vulnerability Assessment Worldwide
  14. Patch Tuesday – Preview February 2011 – Update

January 2011

  1. Microsoft Advisory on client side XSS – 2501696
  2. More on January’s Patch Tuesday…
  3. Patch Tuesday Bottomline – January 2011
  4. Notifying Users of New Controls
  5. Patch Tuesday – Preview for January 2011 – Update 2
  6. PCI Version 2.0 SAQs Now Available
  7. QualysGuard Integration With BeyondTrust PowerBroker

2010 151

December 2010

  1. New IE 0-day vulnerability
  2. More on December’s Patch Tuesday…
  3. Patch Tuesday Bottomline – December 2010
  4. Patch Tuesday – Preview for December 2010
  5. Qualys BrowserCheck: New Linux Support and More Plugins

November 2010

  1. Making Passwords More Secure
  2. Qualys Receives Market Share Leadership of the Year Award
  3. Adobe Update addresses 0-days in Reader
  4. Qualys Named a Finalist in California Game Changer Awards
  5. Verizon 2010 PCI Compliance Report
  6. New Rsam GRC Integration with QualysGuard Policy Compliance
  7. More on November’s Patch Tuesday…
  8. Patch Tuesday Bottomline – November 2010
  9. November MSFT and Adobe 0-days – Update2
  10. Patch Tuesday – Preview for November 2010
  11. 0-day Vulnerabilities for Internet Explorer and Flash/Reader
  12. Qualys Named a Finalist in Four SC Award Categories
  13. Qualys Named in San Francisco Business Times Fast 100

October 2010

  1. Qualys freemium services
  2. PCI DSS 2.0 is out!
  3. Qualys Makes Deloitte Fast 500 for Fifth Consecutive Year
  4. Valley’s Fastest Growing Companies Honored – Qualys #44
  5. Fixing Java Vulnerabilities By Industry Collaboration
  6. Accelerate Patching Progress in the Enterprise – RSA Europe 2010
  7. Two-Factor Authentication for QualysGuard Powered by VeriSign® Identity Protection
  8. QualysGuard adds VeriSign Identity Protection
  9. More on October’s Patch Tuesday…
  10. Patch Tuesday Bottomline – October 2010
  11. Patch Tuesday – Preview for October 2010
  12. Private assessment option added to the SSL server test
  13. Qualys SSL Labs releases raw data from the Internet SSL survey
  14. Disabling SSL renegotiation is a crutch, not a fix
  15. New Adobe Reader and Acrobat addresses 23 Vulnerabilites
  16. Announcing the Acquisition of Nemean Networks
  17. New Integration with Cyber-Ark Privileged Identity Management Suite
  18. Trusted scans simplified with Cyber-Ark PIM Suite integration

September 2010

  1. Microsoft addresses high-profile ASP.NET issue with MS10-070
  2. Microsoft readies update for ASP.NET issue
  3. Additional September Security Advisories – Update
  4. Congratulations to Drew Maness, Technicolor, Winner of ISE West People’s Choice Award
  5. 2010 Top Cyber Security Risks Report Released
  6. More on September’s Patch Tuesday…
  7. Patch Tuesday Bottomline – September 2010
  8. Patch Tuesday – Preview for September 2010
  9. 0-day for Adobe Reader 9.3.4 and Flash – Update 3
  10. Sourcefire Announces New Qualys Integration
  11. QualysGuard PCI 5.0 Released to Support New ASV Changes
  12. Important Changes to PCI Scan Compliance – Sept 1st Deadline

August 2010

  1. Keeping up with DLL hijacking
  2. QualysGuard Express Named a Finalist in Computing Security Awards
  3. Qualys Named One of America’s Fastest-Growing Private Companies by Inc. Magazine for Fourth Consecutive Year
  4. Microsoft provides advisory for DLL hijacking exploits
  5. Today’s News: Intel to Acquire McAfee
  6. Adobe Patches Reader/Acrobat on Windows, Mac and Unix
  7. PCI DSS to Address Virtualization in the Cloud
  8. More on August’s Patch Tuesday…
  9. Patch Tuesday Bottomline – August 2010
  10. BrowserCheck Featured on Computer America Radio
  11. Adobe Prenotification for August 2010
  12. Patch Tuesday – Preview for August 2010
  13. Agiliance and Qualys Partner to Provide Security Risk Assessment On Demand
  14. MS10-046 fixes 0-day LNK vulnerability out of band

July 2010

  1. Microsoft issues out of band update for LNK
  2. Internet SSL Survey 2010 Results
  3. Qualys Announces Free Online SSL Test for Businesses to Audit the SSL Implementation of Their Web Sites
  4. Qualys Releases BlindElephant as an Open Source Tool for Web Application Fingerprinting
  5. Qualys Adds Exploitability Data to QualysGuard Vulnerability Management From Core Security, Immunity, Metasploit and The Exploit-DataBase
  6. Qualys Researchers to Present Three Sessions at Black Hat USA 2010
  7. Qualys “Leads the Pack” in Independent Research Report on Vulnerability Management
  8. Qualys Announces BrowserCheck – Free Browser Security Testing Service
  9. New Windows Flaw – XP SP2 Users Not Covered – Update
  10. More on July’s Patch Tuesday…
  11. MSFT July Patch Tuesday Retires Windows XP SP2 and 2000
  12. CSA Summit at Black Hat USA 2010
  13. MSFT July Patch Tuesday Will Address 0-Days

June 2010

  1. Adobe Reader 0-day patch released – Update2
  2. Deploying a Global VM Program at Cisco
  3. SSL Labs assessment engine v1.0.59 improvements
  4. QualysGuard Patch Report Aligns IT Security with Operations
  5. Qualys Party at Black Hat USA Featuring Integration Partners
  6. New 0-day for Windows XP/2003 – Update2
  7. Black Hat USA 2010 Preview Webcast
  8. Adobe releases update for Flash 0-day
  9. More on June’s Patch Tuesday…
  10. Patch Tuesday Bottomline – June 2010
  11. Adobe Flash and Reader 0-day
  12. Cloud Security Q&A with Qualys CEO Philippe Courtot
  13. Patch Tuesday – Preview for June 2010

May 2010

  1. End of Life for Windows XP SP 2 – Time to Migrate
  2. More on May’s Patch Tuesday…
  3. Patch Tuesday Bottomline – May 2010
  4. Patch Tuesday – Preview for May 2010
  5. Qualys and RSA Expand IT-GRC Collaboration
  6. Qualys Wins Award for Best SME Security Solution
  7. Infosec UK 2010 presentation online

April 2010

  1. Qualys Webcast on Protecting Your Web Sites from Malware
  2. VeriSign Collaborates with Qualys and Other Industry Leaders to Bring Trust to the Cloud
  3. OWASP Top 10 List of Web Application Security Risks for 2010
  4. Oracle issues Java update for 0-day
  5. April 13 – Microsoft Patch Tuesday Bottomline Podcast
  6. Patch Tuesday Bottomline – April 2010 – update
  7. New 0-day in Java
  8. Patch Tuesday – Preview for April 2010
  9. Qualys CEO Featured on The Cloud Computing Show
  10. Qualys CSO Gives an Inside View on Cloud Computing Security

March 2010

  1. Critical IE update MS10-018 released
  2. Dummies Guide to IT Policy Compliance — Now Available
  3. Qualys CTO Discusses New Malware Detection Service
  4. Update2 on Internet Explorer 0-day – MS10-018
  5. Manitowoc Builds a Secure and Sustainable Infrastructure
  6. Ideal Innovations Reinforces its IT Security Posture
  7. Intuit VP and Corporate Controller Jeffrey P. Hank Joins Qualys Board of Directors
  8. Philippe Courtot on Lessons Learned at RSA
  9. Qualys Featured on TechNow
  10. Best of the Qualys Security Tips Twitter Contest
  11. The Qualys Booth @ RSA 2010
  12. RSA Conference 2010 Pictures
  13. Update on Internet Explorer 0-day
  14. More on March’s Patch Tuesday…
  15. Patch Tuesday Bottomline – March 2010
  16. Qualys CEO Philippe Courtot RSA 2010 Keynote
  17. Qualys Wins SC Magazine Award 2010 for Best Vulnerability Management
  18. Patch Tuesday – Preview for March 2010
  19. Core Security Technologies Completes Integration with QualysGuard PCI Connect
  20. Imperva and Qualys Partner To Help Enterprises Protect Against Malicious Attacks on Web Applications
  21. Trend Micro Partners with Qualys to Strengthen its Security and Compliance Offerings
  22. Qualys Announces New Services to Help Businesses Protect Their Web Sites from Malware and Vulnerabilities

February 2010

  1. Qualys Receives Highest Rating in Gartner MarketScope on Vulnerability Assessment
  2. Qualys Security in the Cloud Twitter Giveaway – How to Win an iPod Shuffle or iPod Nano
  3. Qualys Introduces First Certified Cloud-Based Solution for Federal Desktop Core Configuration (FDCC) Compliance
  4. Philippe Courtot and Wolfgang Kandek Named 2010 CRN Security Superstars
  5. CSA Top Threat Report Coming
  6. Qualys Named a Finalist for Four SC Magazine Europe Awards
  7. Adobe Patching Out-Of-band – Updated
  8. Guest Post on PCI Compliance for BT: SecureThinking
  9. More on February’s Patch Tuesday…
  10. Patch Tuesday Bottomline – February 2010
  11. Guest Blog: Who Will Secure the Clouds of Tomorrow?
  12. Qualys Named One of the Coolest Cloud Security Vendors
  13. Podcast Series: RSA Conference Keynote Preview

January 2010

  1. The Business Approach to Vulnerability Management
  2. NTT Com to Launch Biz Security Vulnerability Management Using QualysGuard
  3. Q&A Session for Cloud Computing: A Positive Disruption for IT Security?
  4. IE 0-day Patched Out-Of-band
  5. IE 0-day Update
  6. More Info on the IE 0-day
  7. IE 0-day, Not Adobe Used in Data Breaches
  8. Adobe Patches 0-day Flaw Used In Stealth Attacks
  9. More on January’s Patch Tuesday…
  10. Patch Tuesday Bottomline – January 2010
  11. QualysGuard PCI Now Supports PCI DSS Prioritized Approach

2009 112

December 2009

  1. First Federal Banks on Trust
  2. Paylocity: Sustainable, Secure Business Growth
  3. Qualys Congratulates Howard Schmidt on his Appointment as White House Cybersecurity Coordinator!
  4. On Adobe, Qualys, CVE and Math
  5. Update: Adobe Reader 0-day Vulnerability
  6. Qualys Nominated for Three SC Magazine US Awards in 2010
  7. More on December’s Patch Tuesday…
  8. Patch Tuesday Bottomline – December 2009
  9. Qualys Ranked #1 for Vulnerability Assessment

November 2009

  1. Critical 0-day Flaw in Internet Explorer 6 and 7
  2. Non-critical 0-day For Windows 7 Disclosed
  3. More on November’s Patch Tuesday…
  4. Patch Tuesday Bottomline – November 2009
  5. SANS vLive! Online Traning and Courses
  6. Blueport Commerce Delivers on Network Security and PCI DSS Compliance
  7. Randy Barr of WebEx Joins Qualys as CSO
  8. SSL and TLS Authentication Gap vulnerability discovered

October 2009

  1. Qualys Ranked One of the Fastest Growing Companies in North America on Deloitte’s 2009 Technology Fast 500
  2. Philippe Courtot on Cloud Computing with ITAdviser
  3. Qualys Security Conference 2009 Highlights & Pictures
  4. More on October’s Patch Tuesday…
  5. Patch Tuesday Bottomline – October 2009
  6. Qualys Ranked the 39th Fastest Growing Company in the Silicon Valley
  7. Qualys Featured in Time Magazine

September 2009

  1. University of Utah Writes New Thesis On Risk Management
  2. QualysGuard PCI 4.0 Released
  3. SMB2 – 8 Days From 0-day To Exploit
  4. QualysGuard Voted Best VM Solution by Search Security Readers (TechTarget) for 3’rd Year in a Row
  5. New Report: The Top Cyber Security Risks
  6. SANS, Qualys and TippingPoint: Top Cyber Security Risks
  7. OfficeMax Mexico Maximizes Vulnerability Management and Regulatory Compliance
  8. More on September’s Patch Tuesday…
  9. Patch Tuesday Bottomline – September 2009 – Updated
  10. Firefox browser to check for Flash updates
  11. IIS FTP 0-day Exploit Released – Updated
  12. SANS Course: Web App Penetration Testing and Ethical Hacking
  13. It’s Time to Embrace (and Prepare for) the Shift to the Cloud

August 2009

  1. Modulo and Qualys Partner to Integrate Security Risk and Compliance Management Solutions
  2. Qualys Named One of America’s Fastest-Growing Private Companies by Inc. Magazine for the Third Consecutive Year
  3. Patch Tuesday Bottomline – August 2009
  4. Qualys and Archer Technologies Partner to Expand IT-GRC Capabilities with Comprehensive Vulnerability and Compliance Data

July 2009

  1. Laws of Vulnerabilities 2.0 – Black Hat 2009 Edition
  2. Mini Patch Tuesday July 2009 – Extremely urgent
  3. Two High Profile Zero-Day Vulnerabilities Announced
  4. Sourcefire and Qualys Partner to Deliver Real-Time Risk Analysis Capabilities
  5. ING Singapore: Fighting IT Security Risks on All Fronts
  6. National Theatre Strengthens its Payment Security
  7. More on July’s Patch Tuesday…
  8. Patch Tuesday Bottomline – July 2009
  9. Zero-day advisory for Microsoft Office Web Components ActiveX
  10. Laws of Vulnerabilites Panel at Black Hat USA 2009
  11. Hot or Not: SCAP is Heating Up
  12. VeriSign & Qualys Deliver Protection Against Zero-Day Vulnerabilities
  13. Serious Zero-Day Vulnerability for Microsoft Video ActiveX Exploited in the Wild

June 2009

  1. Former Chairman of the Joint Chiefs of Staff Joins Qualys’ Board of Directors
  2. Foxwoods Resort Casino Not Rolling Dice When it Comes to IT Security & Compliance
  3. PCI Compliance Simplified
  4. Hot or Not: Web Application Vulnerabilities Hit Inflection Point
  5. More on June’s Patch Tuesday…
  6. Patch Tuesday Bottomline – June 2009
  7. Qualys Customers Speak at RSA ’09
  8. QualysGuard Security + Compliance SaaS Suite
  9. Patch Tuesday- updates for Windows and Mac coming
  10. Thumbs Up to Project Quant to Quantify Patching

May 2009

  1. Qualys CEO Elected to TechAmerica Board of Directors
  2. Hot or Not: SCADA Security is Hot
  3. More on May’s Patch Tuesday…
  4. Microsoft Patch Tuesday Bottomline – May 2009
  5. Verizon Data Breach Report and what you can do about it
  6. Established University Writes a New Security Curriculum
  7. Global Leader in On-Demand Web Content Management Finds Powerful, Simple Security
  8. For IT Security, University of Idaho Raises Its Grade

April 2009

  1. SC Magazine EU Names Qualys Best VM Solution
  2. New Adobe 0-Day Vulnerability – But Does It Matter ?
  3. Laws of Vulnerabilities Presentation @ Infosecurity Europe
  4. Qualys CEO Philippe Courtot RSA 2009 Keynote
  5. Qualys Wins Two SC Magazine US Awards
  6. Q&A with Qualys CEO Philippe Courtot
  7. Laws 2.0 Declared
  8. Qualys Introduces QualysGuard PCI Connect To Streamline the PCI DSS Certification and Validation Process
  9. Qualys Announces QualysGuard Policy Compliance 2.0
  10. Qualys Introduces QualysGuard Web Application Scanning 1.0
  11. More on April’s Patch Tuesday…
  12. Microsoft Patch Tuesday Bottomline – April 2009
  13. Conficker Statistics post April 1st
  14. Qualys at RSA 2009 April 20-24, San Francisco
  15. More Conficker Details…

March 2009

  1. Conficker Analysis with QualysGuard IDs (QIDs)
  2. More from the Trenches on Developing the Remote Check for Conficker
  3. Taming of the Shrew aka Conficker…
  4. Adobe Delivers Third Part of the Acrobat Patch Set, But it Seems Nobody Cares!
  5. Adobe Patches Critical Zero-day, Better Late than Never
  6. Microsoft Patch Tuesday: March 2009 Security Bulletin
  7. Time to Upgrade – IE6 vs IE7 Dynamics
  8. Localization Capabilities Added for QualysGuard PCI Platform

February 2009

  1. Qualys Opens Office in Dubai
  2. Qualys CTO Wolfgang Kandek Talks Security
  3. Qualys Nominated for 3 SC Magazine European Awards
  4. Should JavaScript be Disabled in Adobe Acrobat by Default?
  5. Should MSFT Rethink the IE Patching Cycle?
  6. Microsoft Patch Tuesday: February 2009 Security Bulletin

January 2009

  1. Dummies Guide to PCI Compliance — Now Available
  2. SaaS Market Will Expand Rather than Contract Despite Economic Crisis
  3. Conficker Worm: 30% Still Infected
  4. Conficker Worm Explained
  5. First Advantage Uses the QualysGuard Enterprise Suite to Prioritize Threats
  6. Analysis of Critical Microsoft Patches in the Second Half of 2008
  7. Qualys CEO Philippe Courtot Elected to Jericho Forum Board
  8. Microsoft Patch Tuesday: January 2009 Security Bulletin
  9. Conficker Worm: Patching is Not Fast Enough
  10. Network Security Firm Qualys Floats to Top of Cloud Computing
  11. Hot or Not: Network Embedded Device Security Threats

2008 55

December 2008

  1. Patch Tuesday: December 08
  2. Microsoft Releases Critical Internet Explorer Patch
  3. Gartner Sees High Levels of SaaS Popularity
  4. IE7 Exploit: MS Releases Out-of-Band Patch
  5. What New PCI Standards Mean to You
  6. Indusface Consulting Expands IT Security Service Practice with Qualys
  7. Hot or Not: Software Update Vulnerabilities
  8. Microsoft Patch Tuesday: December 2008 Security Bulletin
  9. Qualys Nominated for 4 SC Magazine’s 2009 Awards

November 2008

  1. Enterprise SaaS Buyers Want More Than Uptime
  2. Qualys Selected as One of the Fastest Growing Companies in North America
  3. Microsoft Patch Tuesday: November 2008 Security Bulletin
  4. Vulnerability Management That Works
  5. Keys To Success Of Vulnerability Management
  6. Deloitte’s Technology Fast 50 Recognized Qualys for Strong Five-Year Growth Rate
  7. Nils Puhlmann of Electronic Arts Joins Qualys as CSO & VP of Risk Management
  8. Tata Communications Launches New Vulnerability Management Service with Qualys
  9. November 2008: MSFT Patch Release Trends

October 2008

  1. MarketScope for Vulnerability Assessment
  2. Free Webcast: Web 2.0 Security Threats Wednesday, November 12th, 11:00am PST
  3. Stanford Hospital’s, CISO Michael Mucha Writes Feature Essay for Information Security Magazine
  4. Customers Speak Out
  5. Qualys Ranked the 36th Fastest Growing Company in Silicon Valley by The Silicon Valley/San Jose Business Journal’s 2008 ‘Fast 50’

September 2008

  1. QualysGuard PCI 3.0 Helps Merchants Meet New Mandatory PCI Requirement
  2. PCI DSS 1.2 Spec Released
  3. Hot or Not: What You Need to Know to Keep Mac OS X Secure
  4. Qualys Named One of America’s Fastest-Growing Private Companies by Inc. Magazine for the Second Consecutive Year
  5. Qualys Gets Frost & Sullivan Global Growth Strategy Leadership Award
  6. Hot or Not: Web Application Firewalls for Security and Regulatory Compliance
  7. Microsoft Patch Tuesday: September 2008 Security Bulletin
  8. Creating a Comprehensive Vulnerability Assessment Program for a Large Company Using QualysGuard

August 2008

  1. PCI Standard Widened for Better Security
  2. NEW QualysGuard Log-in Page
  3. Microsoft Patch Tuesday: August 2008 Security Bulletin

July 2008

  1. Gartner Predicts SaaS Market Growth for Vulnerability Assessment up to 30% by 2013
  2. Party with Qualys at Black Hat 2008
  3. Microsoft Patch Tuesday: July 2008 Security Bulletin

June 2008

  1. Qualys Adds Red Hat Exec To Board
  2. 80,000+ Financial Service Accounts Protected With Automated Vulnerability Discovery and Remediation
  3. Information Security Highlights Qualys Customer TransUnion
  4. Introducing QualysGuard Policy Compliance
  5. QualysGuard 6.0: Reporting Metrics for Enterprise Stakeholders
  6. QualysGuard PCI: Determine Your Compliance Gaps and Take Action to Ensure Full Compliance
  7. Dummies Guide to Vulnerability Management — Now Available
  8. Cisco’s Doug Dexter, Michael Mucha of Stanford Hospital and Gartner analyst Mike Nicolett focus on Security Risk and Compliance Best Practices
  9. Stanford Hospital CISO Michael Mucha in Information Security Magazine — 7 Security Questions to Ask Your SaaS Provider
  10. Humane Society CIO, Beverly Magda in InformationWeek — SaaS to the Rescue
  11. Paul Simmonds: The Case for Managed Security Services
  12. Interview: Philippe Courtot, CEO of Qualys
  13. Highlights from the 6th Annual Qualys SaaS Security Conference
  14. Qualys Delivers First Integrated SaaS Solution for Security and Compliance
  15. Qualys Voted Best Audit and Vulnerability Solution for the Second Consecutive Year in SC Magazine 2008 Reader’s Trust Awards
  16. Qualys Wins Second Consecutive Information Security Magazine and SearchSecurity.com Readers’ Choice Gold Award for Best Vulnerability Management Solution
  17. Microsoft Patch Tuesday: June 2008 Security Bulletin
  18. The Malware Report Calls Upon Qualys CTO Wolfgang Kandek to Provide His Industry Insight on Recent SQL Attacks

2014–2026 →