2014–2026

2026 125

October 2026

1. 30 OctOperationalizing CISA AA26-194A: Automating Cisco Router Security Assessments with Qualys Policy Audit
2. 28 OctCan’t Patch Node.js Yet? Build a Stopgap with the Controls You Own
3. 26 OctCan’t Patch PHP2Shell Yet? Build a Stopgap with the Controls You Own
4. 24 OctHow to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943 and CVE-2026-111944)
5. 23 OctNode.js Patches Brotli Remote Code Execution Flaw: Find Vulnerable Runtimes Before Attackers Do
6. 21 OctThe Science of Exploitability: Decoding BlueHammer
7. 21 OctTwo Critical PHP Flaws Could Hand Attackers Your Web Servers. Here’s How to Find, Mitigate, and Patch PHP2Shell Now
8. 20 OctThe Real Jump Scare Isn’t the Attacker; It’s The Vulnerabilities You’re Focusing On
9. 14 OctTruConfidence: Why Your Patch Automation Can Finally Be Autonomous
10. 13 OctMicrosoft Patch Tuesday, October 2026 Security Update Review
11. 12 OctExploitability Needs Runtime Evidence: Understanding Runtime Vulnerability Reachability for Containers
12. 5 OctSecure Your Mission-Critical Application Estate: Qualys TotalAppSec is Now FedRAMP High Authorized (FedRAMP Certified Class D)

September 2026

1. 29 SepAutonomous Remediation Is Already Running at Enterprise Scale
2. 29 SepLessons from Microsoft Patch KB5002907: Two Layers of Patch Control in Qualys TruRisk Eliminate
3. 28 SepThe Developer is the New Perimeter: How Supply Chain Attacks Are Becoming Cloud Breaches
4. 23 SepCISA BOD 26-04 Timelines for Three Linux Kernel CVEs
5. 17 SepThe End of Point-in-Time Compliance: Why Continuous Audit Readiness Matters to You in the AI Era
6. 17 SepThe Autonomous Engine Behind Remediation, and What Finally Makes It Safe
7. 16 SepOracle Critical Security Patch Update, September 2026 Review
8. 15 SepBefore You Patch. Why Patch Reliability Matters for Confident Deployment
9. 15 SepAutomate Asset Isolation: Your Last Resort to Meet Remediation Deadlines
10. 10 SepWhat Is ISPM? How It Differs from IAM, PAM, IGA, and IDaaS
11. 9 SepThe Models That Found 10,000 Zero-Days Broke Into Three Companies Using Weak Passwords
12. 8 SepMicrosoft and Adobe Patch Tuesday, September 2026 Security Update Review
13. 8 Sep4 Questions to Ask When Evaluating an Exposure Management Platform
14. 2 SepAnatomy of a Silent Domain Takeover

August 2026

1. 27 AugPCI DSS 4.0.1: Application Requirements You’re Being Assessed On in 2026
2. 26 AugWhen an AI Agent Turned Attacker: What Qualys Sees Across Every Phase of the Hugging Face Kubernetes Intrusion
3. 26 AugBeyond Patching: What IT Teams Need to Know About Unpatchable Exposures
4. 25 AugCVE-2026-69414 ShieldBreak Zero-Day: No Patch, and CISA BOD 26-04 Gives You 14 Days
5. 19 AugOracle Critical Patch Update, August 2026 Security Update Review
6. 18 AugCVE-2026-68820 is in KEV. Here Is What CISA BOD 26-04 Actually Requires Now
7. 13 AugWhy API Discovery Is Critical for Modern AppSec Programs
8. 12 AugQualys Introduces Real-Time Cloud Security Posture Management (CSPM) for Faster Risk Detection and Remediation
9. 11 AugMicrosoft and Adobe Patch Tuesday, August 2026 Security Update Review
10. 10 AugAudit Fix: Audit Readiness for the Post-Mythos Era
11. 3 AugZero-Day Remediation Meets Operational Resiliency
12. 3 AugAgent Val Now Validates the Entire Attack Surface: From Network to Host
13. 3 AugSay Hello to Agent Insta: Closing the Detection Gap in Exposure Management at Machine Speed

July 2026

1. 29 JulOperationalize AI Governance Across Shadow GenAI, MCP, and Agentic Workloads with Qualys TotalAI
2. 27 JulQualys Expands Serverless Security with Vulnerability Scanning for AWS Lambda
3. 27 JulThe Sub-10-Minute Cloud Takeover: How Exposed IAM Keys, Misconfiguration and AI Are Rewriting the Rules of Cloud Breaches
4. 22 JulRefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600)
5. 22 JulOracle Critical Patch Update, July 2026 Security Update Review
6. 21 JulManual Patching Can’t Outrun AI. Automated Remediation Can.
7. 21 JulCVE-2026-8933: Local Privilege Escalation in Set-Capabilities snap-confine
8. 20 JulIs Your Security Program Ready for AI-Speed Application Exploitation?
9. 20 JulTop Five Compliance Audit Software and Tools: Mastering Modern Regulatory Risk
10. 14 JulMicrosoft and Adobe Patch Tuesday, July 2026 Security Update Review
11. 14 JulHow Qualys ETM Identity Detects Identity-Based Attacks Faster
12. 9 JulHow to Meet a 3-Day Remediation SLA & Comply with CISA BOD 26-04
13. 8 JulWhen AI-Accelerated Discovery Outruns Patching, Exploitability Proof Decides What Gets Fixed First
14. 8 JulFortiBleed: Credential Reuse, Legacy Hashes, and the Risk of Internet-Exposed FortiGate Devices
15. 8 JulOperationalizing Day Minus Seven: The Cloud-Native ROC
16. 7 JulQualys Joins Cisco Cloud Control Studio as a Launch Partner to Bring Risk Intelligence to Agentic Operations
17. 6 JulIs Your AppSec Program Built to Close the OWASP Top 10 2025 Coverage Gap?

June 2026

1. 24 JunCERT-In’s AI Vulnerability Blueprint: Why Indian CISOs Need Machine-Speed Risk Operations in the Post-Mythos Era
2. 23 Jun3 Paths to Upgrade Windows 11 before 24H2 End of Servicing (EOL)
3. 22 JunCNAPP’s New Normal: Hyper-Prioritization and Autonomous Remediation at Cloud Scale
4. 18 JunOracle Critical Patch Update, June 2026 Security Update Review
5. 15 JunWhat Changed in OWASP Top 10 2025 and Recommendations for Each Category
6. 10 JunHow Federal Agencies Can Activate a Risk Operations Center (ROC) to Meet CISA BOD 26-04
7. 10 JunTurning Millions of Risks Into One Actionable List
8. 9 JunMicrosoft and Adobe Patch Tuesday, June 2026 Security Update Review
9. 5 JunAdvancing Cybersecurity in the Age of Frontier AI: Qualys Steps into Project Glasswing
10. 4 JunFrom Operating Model to Product: How We Built the ROC for Detection-Speed Remediation
11. 3 JunStop Patching at Human Speed: Peer-to-Peer (P2P) Distribution Closes the Remediation Gap Before Attackers Strike
12. 2 JunThe HazyBeacon Protocol – How Malware Weaponizes Amazon Web Services (AWS) Lambda Function URLs

May 2026

1. 28 MayExtending EOL/EOS Software Intelligence Across Containers, Kubernetes, and Modern Workloads
2. 20 MayCVE-2026-46333: Local Root Privilege Escalation and Credential Disclosure in the Linux Kernel ptrace Path
3. 19 MayInside the 2026 Verizon DBIR: What One Billion Records Revealed About Vulnerability Remediation
4. 14 MayAchieve FedRAMP High M365 Security: Governing with Qualys SSPM and SCuBA
5. 14 MayStop Chasing Threats: Top 3 Insights from the SANS Attack Surface Management Survey
6. 14 MayFedRAMP High Authorized: Qualys TotalCloud CNAPP – From Compliance to Defense
7. 12 MayMicrosoft and Adobe Patch Tuesday, May 2026 Security Update Review
8. 11 MayBringing AI Code Security into Qualys ETM
9. 9 MayDirty Frag: Using the Page Caches as an Attack Surface
10. 6 MayBefore the Breach, There Was a Test Environment
11. 5 MayQualys TotalAI Achieves FedRAMP Moderate (FedRAMP Certified Class C) Authorization
12. 5 MayConverge Connect: Unlock Lower Premiums with Proven Qualys Security
13. 1 MayHandling the Vulnerability Surge in the Post-Mythos Era

April 2026

1. 22 AprDon’t Wait for a Patch. Mitigate RedSun Zero-Day Risk in Microsoft Defender Today
2. 22 AprOracle Critical Patch Update, April 2026 Security Update Review
3. 20 AprEnterprise Remediation Benchmark: How Does Your Organization Compare?
4. 15 AprQualys VMDR and TotalCloud™ Now Available on Oracle Cloud Marketplace
5. 14 AprMicrosoft and Adobe Patch Tuesday, April 2026 Security Update Review
6. 13 AprAnatomy of an Autonomous AI Agent Risk: How Qualys ETM Connects the Dots on OpenClaw
7. 13 AprDeep Scan: Expanding Vulnerability Detection Beyond Traditional Boundaries
8. 10 AprThe Mythos Inflection Point: Dealing With the Upcoming Vulnerability Disclosure Avalanche and Compressed Exploitation Window
9. 9 AprScaling Modern AppSec: Moving from Static Profiles to AI-Powered Scan Optimization
10. 9 Apr12 Best Practices for Securing AWS Cloud in 2026
11. 7 AprSignals from the Cloud Security Forecast 2026: Cloud Risk Is Scaling through Design, Not Disruption
12. 6 AprWhy Every Enterprise Needs a Risk Operations Center (ROC)

March 2026

1. 30 MarOptimizing Risk Discovery and Remediation with Qualys Gateway Service (QGS)
2. 24 MarThe Rise of Managed Risk Operations: How the New Qualys mROC Portal Helps Partners Scale the Risk Operations Center
3. 23 MarFrom Vision to Real-time Threat Intelligence: TruLens for ETM
4. 23 MarThreat Research Report: The Broken Physics of Remediation
5. 23 MarMeet Agent Val: Closing the Validation Gap in Exposure Management at Machine Speed with Agentic AI
6. 23 MarBringing Continuous Assessment to Harbor: Scan on Push, Stay Secure Over Time
7. 19 MarMCP Servers Are the New Shadow IT for AI
8. 18 Mar5 Steps to Turn Compliance Checks into Audit Outcomes
9. 17 MarCVE-2026-3888: Important Snap Flaw Enables Local Privilege Escalation to Root
10. 17 MarCountering Current Geopolitical Cyber Threats With Qualys
11. 17 MarThe New Era of Application Security: Reasoning-Based Agents, Runtime Reality, and Risk Intelligence
12. 12 MarCrackArmor: Critical AppArmor Flaws Enable Local Privilege Escalation to Root
13. 10 MarMicrosoft and Adobe Patch Tuesday, March 2026 Security Update Review
14. 10 MarFrom Shadow Models to Audit-Ready AI Security: A Practical Path with Qualys TotalAI
15. 2 MarCyber Essentials Plus in 2026: Strengthened Controls, UK Cyber Reality & How Qualys Supports Compliance

February 2026

1. 19 FebHow Security Tool Misuse Is Reshaping Cloud Compromise
2. 18 FebNew: AI-Powered Patch Reliability Scoring—Predict Patch Impact Before You Deploy
3. 17 FebQualys Recognized as a Leader in the 2026 Forrester Wave™ for CNAPP
4. 12 FebActive Directory Attacks Demystified: Pass-the-Hash (PtH), Pass-the-Ticket (PtT), and Beyond
5. 10 FebMicrosoft and Adobe Patch Tuesday, February 2026 Security Update Review
6. 4 FebTruConfirm: Autonomous, Agent-Led, Safe Exploit Validation for Real-World Risk Reduction
7. 2 FebMutagen Astronomy: From Discovery to CISA Recognition—A Seven-Year Journey

January 2026

1. 30 JanROC vs. CTEM: How a Risk Operations Center Evolves Beyond Continuous Threat Exposure Management in 2026
2. 29 JanTop 10 Cloud Compliance Tools for Enterprise Security and Audit Readiness in 2026
3. 22 JanHow Public Container Registries Have Become a Silent Risk Multiplier in a Modern Supply Chain
4. 21 JanQualys Named a Leader and Outperformer in the 2025 GigaOm Radar for CNAPP
5. 20 JanCybersecurity Predictions for 2026 Signal the Maturation of Risk-First Security Models
6. 15 JanYour VMDR Year in Review: Making Security Progress Visible and Actionable
7. 15 JanWhy Serverless Risk Demands Identity-Aware Security at Cloud Scale
8. 13 JanMicrosoft and Adobe Patch Tuesday, January 2026 Security Update Review
9. 7 JanAgent Grant: From Identity Signals to Measurable Risk Reduction
10. 6 JanCloud Agent in 2025: A Year of Scale, Security, and Smarter Visibility

2025 144

December 2025

1. 19 DecYour Guide to PCI DSS 4.0.1 Web Application and API Controls with a Simplified Path to Compliance
2. 17 DecShadyPanda: The Silent Browser Takeover Threat and How Qualys TruRisk Eliminate Helps You Stop It
3. 17 DecNavigating Change: Evolving Your Exposure Management Strategy in a Post-Kenna World with Qualys
4. 11 DecScale AI Securely with Qualys TotalAI’s Streamlined Onboarding, Deeper Risk Detection, and Compliance-Ready Reporting
5. 11 DecReact2Shell: Decoding CVE-2025-55182 – The Silent Threat in React Server Components
6. 9 DecMicrosoft and Adobe Patch Tuesday, December 2025 Security Update Review
7. 4 DecActive Exploitation of 7-Zip RCE Vulnerability Shows Why Manual Patching is No Longer an Option

November 2025

1. 24 NovThe Future of Cloud Security: A New Act for Cyber Risk Operations
2. 24 NovFrom Vision to Value: Gartner® Identifies Qualys as 2025 Magic Quadrant™ Leader in Exposure Assessment Platforms
3. 24 NovZero-Day Zero: The AI Attack That Just Ended the Era of the Forgiving Internet
4. 20 NovGenAI: Harness the Power, Eliminate the Risk — A Practical Playbook for Securing AI from Day One
5. 19 NovWhat is Patch Management Automation and Why It Matters
6. 17 NovWhat It Takes to Design Trust into Event-Driven Architectures with Amazon EventBridge
7. 15 NovUnauthenticated Authentication Bypass in Fortinet FortiWeb (CVE-2025-64446) Exploited in the Wild
8. 11 NovMicrosoft Patch Tuesday, November 2025 Security Update Review
9. 10 NovBattle Compliance Confusion and Security Fatigue with Qualys and ServiceNow
10. 3 NovInside an Automotive Giant’s Data Leak — A Cloud Misconfiguration Lesson for AWS Users

October 2025

1. 30 OctWhat Security Teams Need to Know as PHP and IoT Exploits Surge
2. 23 OctOracle Critical Patch Update, October 2025 Security Update Review
3. 18 OctA Strategic Response to the F5 BIG-IP Nation-State Breach 2025
4. 15 OctBringing the Power of Agentic AI for Identity Risk, Adaptive Threat Prioritization, and Exposure Exploitability Validation
5. 15 OctIntroducing TruConfirm for Enterprise TruRisk™ Management: Automated Exposure Validation
6. 15 OctIntroducing TruLens for Enterprise TruRisk™ Management: Unified Threat Intelligence
7. 15 OctQualys ETM Identity — The First True Quantification of the Identity Perimeter
8. 14 OctMicrosoft and Adobe Patch Tuesday, October 2025 Security Update Review
9. 9 OctQualys Recognized as a Leader in the 2025 GigaOM Radar for Patch Management Solutions
10. 9 OctEnsuring Safe and Reliable Updates with Qualys TruRisk™ Manifest Version Control
11. 7 OctSubscription Health Dashboard 2025 Update
12. 6 OctHow to Prevent NPM Supply Chain Attacks in CI/CD Pipelines with Container Security

September 2025

1. 30 SepQualys Named a Leader in the 2025 IDC MarketScape: Worldwide Exposure Management Vendor Assessment
2. 30 SepHow Agentic AI Powers Seamless Audit Readiness with Agent Chang
3. 24 SepPatch Automation for Browsers with TruRisk™ Eliminate
4. 23 SepSteps to TruRisk™ – 5: Eliminate Risk and Lead with Confidence
5. 19 SepIntroducing Enhanced User Interface for Qualys PCI DSS 4.0 ASV Compliant Solution
6. 16 SepNavigating SEBI’s Cloud Security Requirements: A Guide for Regulated Entities
7. 11 SepPatch Tuesday Risk Elimination with Agent Sara
8. 10 SepWhen Dependencies Turn Dangerous: Responding to the NPM Supply Chain Attack
9. 10 SepOutdated Tech, Rising Risk: How Federal Agencies Can Eliminate Tech Debt and Reduce Cyber Risk
10. 9 SepMicrosoft and Adobe Patch Tuesday, September 2025 Security Update Review
11. 8 SepShaping the Future of Cyber Risk Management: QSC Evolves to ROCon
12. 6 SepSalesloft Drift Supply Chain Incident
13. 5 SepCVE-2025-8088 WinRAR Exploit: From Zero-Day to Zero-Risk with TruRisk™ Eliminate
14. 4 SepOperationalizing Threat Exposure with Agentic AI: Meet Agent Nova

August 2025

1. 27 AugQualys Achieves FedRAMP® High ATO: Unlocking the Future of Trusted Cybersecurity for Government and Critical Infrastructure
2. 26 AugChatbots, APIs, and the Hidden Risks Inside Your Application Stack
3. 25 AugIntroducing the Qualys App Picker: Easier, Faster Navigation for All Your Security Applications
4. 20 AugHow Agentic AI Helps with Adaptive Cloud Risk Assessment with Agent Vikram
5. 14 AugUnleashing Agentic AI for Superior Threat-Informed Risk Prioritization with Agent Nyra
6. 14 AugRemediate WMI Class Corruption Errors with Qualys TruRisk™ Eliminate
7. 12 AugMicrosoft and Adobe Patch Tuesday, August 2025 Security Update Review
8. 12 AugEliminate Risk from Older and Unmanaged Java Installations
9. 12 AugTwo Pwnie Awards, One Crucial Lesson: What Our OpenSSH Research Reveals About Cyber Defense in 2025
10. 11 AugCompliance Without Coverage is a Risk: How to Close the Gaps with Qualys Policy Audit
11. 4 AugUnpacking Qualys Agentic AI: Technical Insights into Its Architecture and Capabilities
12. 4 AugFrom Exposure Whack-a-Mole to Autonomous Cyber Risk Management: Meet Agentic AI on the Qualys Platform

July 2025

1. 28 JulSecuring Cloud AI and LLMs with TotalAI for Visibility, Risk Context and Control
2. 24 JulFortifying Your AWS Cloud Against Cross-Service Confused Deputy Attacks
3. 21 JulToolShell Zero-day: Microsoft Rushes Emergency Patch for Actively Exploited SharePoint Vulnerabilities
4. 21 JulUnderstanding the Impact of Scattered Spider on the Airline & Transportation Industry
5. 21 JulSmarter ITSM Automation with ServiceNow Integration
6. 16 JulOracle Critical Patch Update, July 2025 Security Update Review
7. 14 JulThe State of Cyber Risk 2025: Business Context Needed
8. 10 JulAchieving Zero-Disruption Patch Management with Qualys’ Latest Capabilities
9. 10 JulGoogle Chrome to Distrust Chunghwa & Netlock Certificates: How Qualys Certificate View Helps You Respond
10. 8 JulMicrosoft and Adobe Patch Tuesday, July 2025 Security Update Review
11. 7 JulQualys Named as a Major Player in the IDC MarketScape: Worldwide Cloud-Native Application Protection Platform, 2025
12. 1 JulQualys Named an Overall Leader in CNAPP by KuppingerCole

June 2025

1. 25 JunSteps to TruRisk™ – 4: Quantify Risk and Communicate Effectively
2. 19 JunFrom Patching to Eliminating Risk: What’s new in TruRisk™ Eliminate and Patch Management
3. 18 JunLessons from Qilin: What the Industry’s Most Efficient Ransomware Teaches Us
4. 17 JunQualys TRU Uncovers Chained LPE: SUSE 15 PAM to Full Root via libblockdev/udisks
5. 16 JunBuilding Resilient Software Supply Chains: Inside the Enhanced Qualys Software Composition Analysis
6. 16 JunQualys VMDR Wins at 2025 SC Awards Europe for Best Vulnerability Management Solution
7. 16 JunQualys TotalCloud Wins “Best Cloud Security Product” at 2025 SC Awards Europe
8. 10 JunMicrosoft and Adobe Patch Tuesday, June 2025 Security Update Review
9. 5 JunQualys Recognized as The Leader in Attack Surface Management by KuppingerCole
10. 5 JunEnsure PCI 4.0 Readiness with File Integrity Monitoring for Containers

May 2025

1. 29 MayQualys TRU Discovers Two Local Information Disclosure Vulnerabilities in Apport and systemd-coredump: CVE-2025-5054 and CVE-2025-4598
2. 27 MayEliminate Risk with Precision: Introducing Vulnerability Detection Sources in VMDR
3. 22 MayBuilding Confidence in Cyber Essentials Compliance with Qualys Policy Audit
4. 21 MaySimplifying DORA Compliance with the Qualys Enterprise TruRisk™ Platform
5. 15 MayFileless Execution: PowerShell Based Shellcode Loader Executes Remcos RAT
6. 13 MayMicrosoft and Adobe Patch Tuesday, May 2025 Security Update Review
7. 12 MaySecurity, Uninterrupted: Inside Qualys’ Zero-Touch Security Vision with Qualys Cloud Agent
8. 8 MayInside LockBit: Defense Lessons from the Leaked LockBit Negotiations
9. 6 MayPowering the Future of Cyber Risk Management: Welcoming Our First mROC Alliance Members
10. 5 MayBridging the Gap: How Qualys Simplifies NCA ECC 2024 Compliance for Businesses
11. 1 MayRemediate Risk Without the Roadblocks: Automate with Qualys Flow

April 2025

1. 29 AprGuard Against GenAI and LLM Risks from Development to Deployment with Qualys TotalAI
2. 24 AprShrinking Lifespans, Growing Risk: The Final Certificate Countdown
3. 24 AprIntroducing Qualys Policy Audit: The New Standard for Regulatory Compliance and Audit Readiness
4. 23 AprThe Verizon 2025 Data Breach Investigations Report (DBIR): Six Trends You Can’t Ignore
5. 21 AprSteps to TruRisk™ – 3: Get started with Business-Driven Risk Prioritization
6. 18 AprThe Importance of Continuous Vulnerability Assessment in Modern IT Environments
7. 18 AprZero-Day Vulnerabilities: From Exploit Discovery to Enterprise Defense
8. 18 AprAPI Security: Safeguarding Your Digital Infrastructure from Attacks
9. 18 AprData Leakage Prevention in AI
10. 18 AprAI Workload Security
11. 18 AprRisk Mitigation for Generative AI Workloads
12. 18 AprLLM Security
13. 18 AprAI Security Monitoring
14. 18 AprWhat is SSPM (SaaS Security Posture Management)? Explained by Qualys
15. 18 AprWhat is Cloud Workload Protection (CWP)? Explained by Qualys
16. 18 AprWhat is CSPM (Cloud Security Posture Management)? Explained by Qualys
17. 18 AprWhat is Kubernetes Container Security (KCS)? Explained by Qualys
18. 17 AprAI Security Posture Management
19. 16 AprOracle Critical Patch Update, April 2025 Security Update Review
20. 16 AprSafeguarding Vulnerability Management Despite MITRE Funding Risks
21. 15 AprThe Efficiency Imperative: How Federal Agencies Can Streamline Cybersecurity Operations
22. 8 AprMicrosoft and Adobe Patch Tuesday, April 2025 Security Update Review
23. 7 AprSteps to TruRisk™ – 2: Measure the Likelihood of Vulnerability Exploitation
24. 3 AprThe State of Cloud & SaaS Security: Essential Statistics and Insights

March 2025

1. 27 MarQualys TRU Discovers Three Bypasses of Ubuntu Unprivileged User Namespace Restrictions
2. 27 MarHow DevOps Can Move Fast and Stay Secure with TruRisk
3. 11 MarMicrosoft and Adobe Patch Tuesday, March 2025 Security Update Review
4. 10 MarSteps to TruRisk™ – 1: Shift to Priority-Driven Strategies
5. 10 MarQualys & ServiceNow: Automating Risk-Driven Remediation for Container Security
6. 3 MarHow Qualys Policy Compliance Helps You Adopt NIST AI RMF 1.0

February 2025

1. 28 FebIndependent Analyst Firm: Qualys Recognized as a Leader in Attack Surface Management
2. 25 FebDefense Lessons From the Black Basta Ransomware Playbook
3. 25 FebQualys TotalCloud KCS Achieves Red Hat Vulnerability Scanner Certification
4. 24 FebFrom Vulnerability Scanning to Risk Management: The Complete VMDR Advantage
5. 20 FebStreamline Security: Automate Database Compliance with Qualys Cloud Agent
6. 18 FebSecuring Dynamic Cloud Environments: Best Practices for Comprehensive Scanning
7. 18 FebQualys TRU Discovers Two Vulnerabilities in OpenSSH: CVE-2025-26465 & CVE-2025-26466
8. 13 FebQualys Adds Threat Intelligence for Typosquatting and Defamatory Domains to External Attack Surface Management
9. 11 FebMicrosoft and Adobe Patch Tuesday, February 2025 Security Update Review
10. 11 FebWhat is Cloud Scanning, and Why Does It Matter?
11. 7 FebThe Impact of LLMs on Cybersecurity: New Threats and Solutions
12. 7 FebAI and Data Privacy: Mitigating Risks in the Age of Generative AI Tools
13. 7 FebMust have AI Security Policies for Enterprises: A Detailed Guide
14. 7 FebLLM Security 101: Protecting Large Language Models from Cyber Threats
15. 5 FebQualys Unveils mROC: The Industry’s First Managed Risk Operation Center To Help Partners Scale Risk Management Services
16. 3 FebQualys TotalAppSec Delivers AI-powered Unified Application Risk Management for Modern Web Apps and APIs
17. 1 FebDeepSeek Failed Over Half of the Jailbreak Tests by Qualys TotalAI

January 2025

1. 28 JanSecuring AI Innovation: Enterprise Strategies for LLM and Generative AI Security
2. 27 JanUnlock the Boardroom with Cyber Risk: How the Qualys Enterprise TruRisk™ Platform Empowers CISOs
3. 23 JanOracle Critical Patch Update, January 2025 Security Update Review
4. 21 JanMass Campaign of Murdoc Botnet Mirai: A New Variant of Corona Mirai
5. 17 JanHow to Mitigate risk of CVE-2025-21307 Before the Weekend Without a Patch
6. 16 JanTop 6 Cybersecurity Predictions for 2025 and Navigating the Threat Landscape
7. 15 JanEnhancing Certificate Management with Qualys CertView: Automated Renewal and Awareness
8. 14 JanMicrosoft and Adobe Patch Tuesday, January 2025 Security Update Review
9. 7 JanAchieving ROI with Qualys Patch Management: A Secure, Efficient, and Cost-Effective Approach

2024 134

December 2024

1. 19 DecSecuring Cloud Environments Against Potential Extortion Threats
2. 18 DecComprehensive Steps to TruRisk™: From Insight to Action Using VMDR
3. 18 DecNotLockBit: A Deep Dive Into the New Ransomware Threat
4. 17 DecQualys VMDR 2024 Updates You Should Know
5. 17 DecApache Struts CVE-2024-53677: File Upload Vulnerability, Impact, and Mitigation Strategies
6. 12 DecQualys Performance Tuning Series: Removing Stale Compliance Data for Optimal Performance
7. 11 DecQualys Achieves 100% Detection in the 2024 MITRE ATT&CK Evaluations for Enterprise
8. 10 DecMicrosoft and Adobe Patch Tuesday, December 2024 Security Update Review
9. 6 DecQualys Develop from LLM Scanning to TotalAI Security
10. 5 DecProtect Your Generative Investments: Qualys Enhances TruRisk Platform with TotalAI for LLM Security
11. 4 DecProactively Managing High-Risk Vulnerabilities with TruRisk Mitigate™

November 2024

1. 26 NovStrengthen Cyber Defense with Qualys Advanced Hunting
2. 25 NovOWASP Top 10 for LLM Applications 2025: Key Changes in AI Security
3. 19 NovQualys TRU Uncovers Five Local Privilege Escalation Vulnerabilities in needrestart
4. 14 NovBest Practices for Cloud Security Compliance
5. 12 NovMicrosoft and Adobe Patch Tuesday, November 2024 Security Update Review
6. 7 NovQScanner: Features, Benefits, and How It Works for Container Image Scanning
7. 5 NovQualys WAS Named a Leader in 2024 GigaOm Radar Report for Application Security Testing

October 2024

1. 31 OctQualys Announcing TotalCloud Attack Path, Cloud Workflow Automation, and Streamlined 3-Step User Onboarding for CNAPP
2. 29 OctThe Revamped Qualys VMDR & Core Apps: Your Ultimate Cyber Defense Partnership for Vulnerability Management and ITSM Integration
3. 21 OctUnmasking Lumma Stealer: Analyzing Deceptive Tactics with Fake CAPTCHA
4. 16 OctOracle Critical Patch Update, October 2024 Security Update Review
5. 15 OctThe Spanish National Security Framework (ENS) is Now Part of the Qualys Enterprise TruRisk™ Platform
6. 10 OctIntroducing the Enhanced User Interface (UI 4.0) of the Qualys Enterprise TruRisk™ Platform
7. 9 OctAnnouncing TruRisk™ 2.0: Unleashing Next-Level Precision in Cyber Risk Management
8. 9 OctQualys Launches Enterprise TruRisk™ Management: The Industry’s First Cloud-Based Risk Operations Center
9. 9 OctThe Future of Cybersecurity Risk Management with Qualys TruRisk™ and ROC
10. 8 OctMicrosoft and Adobe Patch Tuesday, October 2024 Security Update Review
11. 7 OctQualys VMDR Rated as the Only Leader and Outperformer by Independent Analyst Firm for the Second Consecutive Year
12. 2 OctAkira Ransomware Analysis Origins Tactics and Detection Strategies

September 2024

1. 27 SepQualys Ranked as a “Strong Performer” Among Top Vendors in Forrester Wave™ for Attack Surface Management
2. 26 SepUnauthenticated RCE in CUPS: Critical Printing System Flaws
3. 25 SepAddressing Cloud Identity Risks With TotalCloud CIEM Security
4. 24 SepEnhances Cloud-Native Security with Container-Optimized OS Scanning in Google Kubernetes Engine with Qualys
5. 19 SepWhat Is Black Basta Ransomware and How to Mitigate Attack
6. 12 SepAWS IMDSv1 Vulnerability Exposed: Insights from TotalCloud
7. 10 SepMicrosoft and Adobe Patch Tuesday, September 2024 Security Update Review
8. 9 SepPartnering for Security: Qualys Solutions for Microsoft Azure Linux in AKS
9. 5 SepSimplifying Azure Cloud Security with Snapshot-Based Scans
10. 3 SepSecure Your Business with Qualys’ New Cloud Agent Deployment using Qualys Scanner

August 2024

1. 22 AugTotalCloud Insights: When Multi-Factor Authentication Turns Into Single-Factor Authentication
2. 15 AugHHS OIG Report Underscores Challenges of Securing the Cloud
3. 14 AugKey Takeaways from the 2024 Gartner Cloud Security Report on CNAPP
4. 13 AugMicrosoft and Adobe Patch Tuesday, August 2024 Security Update Review
5. 13 AugUnderstanding the Microsoft Windows Kernel Elevation of Privilege Vulnerability (CVE-2024-21302)
6. 9 AugSubscription Health Dashboard Update: Optimize Deployments and Identify Issues
7. 6 AugCybersecurity Threat Landscape 2024 Midyear Review
8. 5 AugDe-risk Generative AI: Enterprise TruRisk Platform Advances to Secure AI and LLM Workloads
9. 2 AugEnhance Your Cybersecurity Posture: Qualys Tackles CISA & NSA’s Top 10 Misconfigurations

July 2024

1. 30 JulQualys Announces TruRisk Eliminate to Augment Patching
2. 25 JulSecure Your APIs and Minimize Attack Risks with AI-powered API Security in Qualys Web Application Scanning (WAS)
3. 19 JulGlobal Outage Alert: Windows BSOD Crisis Following CrowdStrike Update – Recovery Steps & Qualys Assurance
4. 17 JulOracle Critical Patch Update, July 2024 Security Update Review
5. 12 JulHow to Detect Issuer Certificates and Comply with Google Chrome’s New Entrust Certificate Policy Using Qualys Certificate View
6. 9 JulMicrosoft and Adobe Patch Tuesday, July 2024 Security Update Review
7. 9 JulUnderstanding the Hidden Cyber Risk from Tech Debt and EoL/EoS Security Gaps
8. 8 JulMeasuring, Communicating, and Eliminating Risk With TruRisk™ in Qualys Web Application Scanning (WAS)
9. 3 JulQualys Blog
10. 1 JulRemote Unauthenticated Code Execution Vulnerability in OpenSSH Server (regreSSHion)

June 2024

1. 29 JunUnderstanding the Polyfill.io Supply Chain Attack and Its Impact
2. 27 JunEnhancing Application Security Using OWASP Recommendations and Best Practices
3. 24 JunEssential Strategies to Secure Your Web Applications and APIs in a Modern Application Development World
4. 20 JunSecure Your Containerized Environments with Qualys Containerized Scanner Appliance (QCSA)
5. 19 JunTotalCloud Insights: Protect Your AWS Environment by Managing Access Keys Securely
6. 11 JunMicrosoft and Adobe Patch Tuesday, June 2024 Security Update Review
7. 7 JunCheck Point Security Gateway Information Disclosure Vulnerability (CVE-2024-24919)
8. 4 JunTotalCloud Insights: Securing Your Data—The Power of Encryption in Preventing Threats
9. 3 JunGetting Audit-Ready for PCI DSS 4.0: Navigating the New Compliance Requirements

May 2024

1. 29 May2024 Cybersecurity Trends: What’s Observable Already?
2. 22 MayTotalCloud Insights: Uncovering the Hidden Dangers in Google Cloud Dataproc
3. 17 MayQualys Enterprise TruRisk™ Platform Extends FIM with Real-Time Monitoring of Unauthorized Access to Sensitive Data and Configuration Change Detection on Network Devices
4. 16 MayHow the Qualys Enterprise TruRisk™ Platform Supports CISA Vulnrichment
5. 16 MayTotalCloud Container Security Best Practices
6. 14 MayMicrosoft and Adobe Patch Tuesday, May 2024 Security Update Review
7. 11 MayGet Weekends Back: Put Chrome CVEs like CVE-2024-5274 on Auto-Patching
8. 9 MayTotalCloud Insights: A Wake-Up Call on Cloud Database Security Failure Rates
9. 9 MayElevating Security: Qualys Unveils First Solution for Scanning AWS Bottlerocket in Amazon EKS and Amazon ECS
10. 9 MayHow to Create Collaboration and Shared Goals with IT and Security Teams
11. 9 MayAssess, Remediate, and Prevent the Top 10 MITRE ATT&CK Techniques for Ransomware, Mapped to Misconfigurations
12. 7 MayQualys Is Proud to Sign CISA’s Secure by Design Pledge
13. 6 MayIntroducing Cyber Asset Management 3.0 With Enhanced Security Assessment
14. 2 MayAgentless FIM for Detecting Network Configuration Changes
15. 2 MayQualys Launches MSSP Portal to Support Managed Security Service Providers.
16. 1 MayKey Cybersecurity Trends and Insights from Verizon’s 2024 Data Breach Investigations Report

April 2024

1. 30 AprCrushFTP Zero-Day Exploitation Due to CVE-2024-4040
2. 24 AprArcaneDoor Attack Exploiting Two Cisco Zero-Day Vulnerabilities
3. 24 AprUnveiling the Hidden Power of the CMDB in Cybersecurity
4. 24 AprStaying Five Steps Ahead of Cyber Risk
5. 22 AprEmpowering Small Businesses in the Digital Age: A Must-Read Guide to Web Application & API Security
6. 22 AprWordPress LayerSlider Plugin: SQL Injection Vulnerability
7. 18 AprSecuring Cloud Databases Against SQL Server Lateral Movement Attacks
8. 17 AprOracle Patch Update, April 2024 Security Update Review
9. 16 AprHow Qualys Supports the National Cyber Security Centre (NCSC)’s Vulnerability Management Guidance
10. 15 AprNavigating the NIS2 Directive and Understanding Its Requirements
11. 15 AprWordPress RCE Vulnerability CVE-2024-31210 Puts Websites at Risk
12. 12 AprReduce Supply Chain Risk with Qualys VMDR and Software Composition Analysis
13. 11 AprQualys Endpoint Detection & Response Validated by Top Independent Testing Labs
14. 10 AprReal-time File Access Monitoring (FAM) with Qualys FIM
15. 10 AprHow to Reduce Your Risk with Proactive VM Strategies
16. 9 AprMicrosoft and Adobe Patch Tuesday, April 2024 Security Update Review
17. 8 AprHow a SQL Injection Scanner Can protect Your Website from SQL Injection Vulnerabilities
18. 2 AprKey Insights from the NCSC’s Vulnerability Management Guidance

March 2024

1. 30 MarXZ Utils SSHd Backdoor
2. 26 MarMeeting FISMA (M-24-04) Requirements with a Unified Attack Surface Management Strategy
3. 25 MarCombine Qualys TruRisk™ and MITRE ATT&CK to Adopt Threat-Informed Defense to Reduce Risk
4. 19 MarNavigating the Changing Landscape of Cybersecurity: Key Trends and Future Insights
5. 13 MarDe-risking Your Organization in Spite of NVD Delays
6. 12 MarTop MITRE ATT&CK Tactics and Techniques Leveraged in 2023
7. 12 MarMicrosoft and Adobe Patch Tuesday, March 2024 Security Update Review
8. 7 MarQualys Updates Login Page to Improve User Experience and Highlight Latest Qualys News
9. 5 MarNist CSF 2.0: Everything you need to know about

February 2024

1. 26 FebA Comprehensive Guide to the General Personal Data Protection Law (LGPD)
2. 22 FebTruRisk™️ Insights – The Story Behind a TruRisk Score
3. 15 FebRansomware Reality Check: Deciphering Priorities in a Sea of Cyber Extortion
4. 13 FebMicrosoft and Adobe Patch Tuesday, February 2024 Security Update Review
5. 12 FebCSAM Drives Accurate TruRisk Scoring with EoL/EoS, Unauthorized Software, and Missing Security Agents
6. 7 FebAnnouncing TotalCloud™ 2.0 with TruRisk™ Insights: The Future of Cloud and SaaS Security
7. 5 FebCSAM Strengthens Attack Surface Coverage and Risk Assessment With Third-Party Connectors
8. 1 FebIdentify and De-risk Unmanaged, Unauthorized Devices With Qualys CyberSecurity Asset Management (CSAM)

January 2024

1. 31 JanQualys Patch Management: A Review of New Features in 2023 for Faster Elimination of Cyber Risk
2. 30 JanQualys TRU Discovers Important Vulnerabilities in GNU C Library’s syslog()
3. 30 JanAdvancing Cybersecurity Management With Qualys Cloud Agent
4. 29 JanCybersecurity Must De-Risk the Business
5. 24 JanUpgrade to New UI of Qualys Web Application Scanning (WAS): Bringing You Enhanced Web Application Security
6. 24 JanQualys WAS Unveils New Features in an Upgraded User Interface
7. 23 JanAnnouncing the Newest Game-Changing Upgrades of Qualys Cloud Agent
8. 22 JanReduce Risk Faster With the Qualys Risk Reduction Recommendation Report
9. 17 JanOracle Patch Update, January 2024 Security Update Review
10. 12 JanDetect and Manage the Risk of Apache Struts (CVE-2023-50164) Comprehensively
11. 11 JanTotalCloud Insights: Crafting Effective Indicators of Compromise (IoCs) for Sub-domain Takeover Risk Detection
12. 11 JanDual Zero-Day Threats in Ivanti Connect Secure and Policy Secure Gateways – CVE-2023-46805 and CVE-2024-21887
13. 10 JanFacebook Job Scam
14. 9 JanMicrosoft and Adobe Patch Tuesday, January 2024 Security Update Review
15. 9 JanQualys and Microsoft Sunset Embedded Integration of Qualys Solutions for Microsoft Defender for Cloud

2023 125

December 2023

1. 26 DecYet Another Apache Struts 2 Vulnerability – CVE-2023-50164
2. 22 DecSSH Attack Surface (CVE-2023-48795): Find and Patch With CyberSecurity Asset Management Before the Grinch Arrives
3. 19 Dec2023 Threat Landscape Year in Review: If Everything Is Critical, Nothing Is
4. 18 DecTotalCloud Insights: Hidden Risks of Amazon S3 Misconfigurations
5. 12 DecMicrosoft and Adobe Patch Tuesday, December 2023 Security Update Review
6. 12 DecBuilding an AppSec Program with Qualys WAS – Additional Configurations and Review & Confirm
7. 12 DecAn Easy and Effective Strategy To Shield Your Business From Ransomware
8. 8 DecOpenCMS Unauthenticated XXE Vulnerability (CVE-2023-42344)
9. 5 DecBuilding an AppSec Program with Qualys WAS -Introduction and Configuring a Web Application or API: Default Scan Settings

November 2023

1. 27 NovClosing the Visibility Gap: How Qualys Cloud Agent Passive Sensor (CAPS) Eliminates Blind Spots Without the Hassle
2. 23 NovUnveiling the Deceptive Dance: Phobos Ransomware Masquerading As VX-Underground
3. 15 NovAtlassian Confluence Broken Access Control Vulnerability (CVE-2023-22515)
4. 14 NovMicrosoft and Adobe Patch Tuesday, November 2023 Security Update Review
5. 9 NovQSC23 – Qualys Announces a Directional Shift to Measure, Communicate, and Eliminate Cyber Risk with New Platform and Solutions
6. 9 NovDe-risking in Practice: How Qualys Customers are Driving Value in Their Organizations
7. 9 NovLeveraging AI-informed Cybersecurity to Measure, Communicate, and Eliminate Cyber Risk
8. 8 NovEffectively Measure, Communicate, and Eliminate Cloud Risks with TotalCloud
9. 8 NovCybersecurity at a Crossroads: New Implications on Business Risk
10. 2 NovUnderstanding CVSS v4 and everything you need to know
11. 1 NovExplaining the Business Value of Qualys Enterprise TruRisk Platform to Your Leadership

October 2023

1. 31 OctQualys API Best Practices: Policy Compliance – Posture Streaming (PCRS) API
2. 30 OctPCI DSS 4.0: How to Ensure Full Compliance with New Requirements
3. 26 OctQualys API Best Practices: Web Application Scanning API
4. 26 OctSafeguard Your Organization this Holiday Season with Endpoint Security from Qualys
5. 25 OctBuilding an AppSec Program with Qualys WAS – Configuring a Web Application or API: Crawl Settings
6. 24 OctQualys Named a Leader in KuppingerCole CSPM Report
7. 18 OctOracle Patch Tuesday, October 2023 Security Update Review
8. 17 OctCritical Cisco 0day Exploited – Do you have Blind Spots in your Risk Management?
9. 17 OctBuilding an AppSec Program with Qualys WAS – Introduction
10. 17 OctAssess Open-Source Software Vulnerabilities and Risks
11. 13 OctQualys FIM Playbook for PCI 4.0
12. 11 OctHow does Qualys TotalCloud prevent secret leaks for Containers?
13. 10 OctCVE-2023-44487 HTTP/2 Rapid Reset Attack
14. 10 OctMicrosoft and Adobe Patch Tuesday, October 2023 Security Update Review
15. 9 OctThe Qualys Security Conference Mumbai: That’s a Wrap!
16. 6 OctCurl 8.4.0 – Proactively Identifying Potential Vulnerable Assets
17. 5 OctAchieving DORA Compliance with Qualys: A Comprehensive Approach
18. 4 OctPCI DSS 4.0 FIM Requirements Simplified with Qualys File Integrity Monitoring
19. 3 OctCVE-2023-4911: Looney Tunables – Local Privilege Escalation in the glibc’s ld.so

September 2023

1. 29 SepLatest Trend in Mac Vulnerabilities and How to Efficiently Address Them
2. 28 SepQualys Named a Market Leader in GigaOm Radar Report for Application Security Testing
3. 27 SepMitigating Risk with Custom First-Party Software and Application Components: A CISOs’ Guide
4. 26 SepQualys Survey of Top 10 Exploited Vulnerabilities in 2023
5. 18 SepThe MGM Cybersecurity Breach: Learnings and Prevention Measures
6. 18 SepQualys Is the Outperformer in the New GigaOm Radar Report for Continuous Vulnerability Management
7. 12 SepMicrosoft and Adobe Patch Tuesday, September 2023 Security Update Review
8. 12 SepRisk Fact #5: Keeping the Pace of Remediation at Cloud Scale Requires Automation
9. 4 SepQualys Top 20 Most Exploited Vulnerabilities

August 2023

1. 30 AugElevate Your Security Posture: Implementing CIS Top 18 Controls Through Qualys Cloud Platform
2. 29 AugRisk Fact #4: Malware in your Cloud means Exploitation is underway
3. 24 AugQualys Tackles 2022’s Top Routinely Exploited Cyber Vulnerabilities
4. 18 AugRisk Fact #3: External-Facing Vulnerabilities Cloud Security Research Risk Fact
5. 17 AugPart III: Implementing Effective Cyber Security Metrics that Reduce Risk Realistically
6. 9 AugRisk Fact #2: Weaponized Vulnerabilities Cloud Security Research Risk Fact
7. 8 AugMicrosoft and Adobe Patch Tuesday, August 2023 Security Update Review
8. 8 AugEnsuring Compliance with DORA: How Qualys Solutions Can Help
9. 3 AugQualys Expands Cloud Platform for First-Party Application Risk Detection and Remediation
10. 1 AugBeating the Challenge of Cloud Detection and Response with Qualys TotalCloud Deep Learning AI
11. 1 AugRisk Fact #1: Cloud Migration Exploitation Cloud Security Research Risk Fact

July 2023

1. 27 JulPart II: Implementing Effective Cyber Security Metrics that Reduce Risk Realistically
2. 27 JulWho Protects PII – Consumers or Companies?
3. 21 JulAdd Unique Asset Context with Custom Attributes in CSAM
4. 20 JulPart I: Implementing Effective Cyber Security Metrics That Reduce Risk Realistically
5. 19 JulOracle Patch Tuesday, July 2023 Security Update Review
6. 19 JulCVE-2023-38408: Remote Code Execution in OpenSSH’s forwarded ssh-agent
7. 18 JulPart 2: An In-Depth Look at the Latest Vulnerability Threat Landscape (Attackers’ Edition)
8. 14 JulEvaluate Your Windows Endpoints for Storm-0978 Activity With Qualys Endpoint Security
9. 11 JulMicrosoft and Adobe Patch Tuesday, July 2023 Security Update Review
10. 11 JulPart 1: An In-Depth Look at the Latest Vulnerability Threat Landscape
11. 6 JulHow Qualys Drives PCI DSS 4.0 Compliance for File Integrity Monitoring
12. 6 JulQualys Performance Tuning Series: Qualys Cloud Agent Configuration Best Practice

June 2023

1. 26 JunSupporting Our U.S. Federal Customers for BOD 23–02 by Mitigating the Risk From Internet-Exposed Management Interfaces
2. 14 JunQualys Responds to CISA Alert: Binding Operational Directive 23-02
3. 14 JunCVSSv4 Public Preview Announcement
4. 13 JunMicrosoft and Adobe Patch Tuesday, June 2023 Security Update Review
5. 8 JunEmpower Your Security Team With Our Robust Script Library
6. 7 JunProgress MOVEit Transfer Vulnerability Being Actively Exploited
7. 6 JunBehind the Screen: Three Vulnerabilities in RenderDoc
8. 1 JunTotalCloud Empowered with CloudView Integration

May 2023

1. 30 MayQualys Gateway Service now available in AWS, Azure, and Google Cloud Marketplaces
2. 18 MayNew Strain of Sotdas Malware Discovered
3. 10 MayAdopting an Effective and Easy To Implement Zero Trust Architecture
4. 10 MayNew TSA Cybersecurity Emergency Action Rule Impacts Cybersecurity and Compliance
5. 9 MayMicrosoft and Adobe Patch Tuesday, May 2023 Security Update Review

April 2023

1. 27 AprQualys Virtual Cyber Risk Summit: That’s a Wrap!
2. 24 AprQualys Launches Inaugural Cyber Risk Summit to Share Expert Insights
3. 24 AprQualys Security Solutions Now Support Alibaba Cloud
4. 19 AprOracle Patch Tuesday April 2023 Security Update Review
5. 18 AprQualys Security Updates: Cloud Agent for Windows and Mac
6. 12 AprMicrosoft and Adobe Patch Tuesday April 2023 Security Update Review
7. 4 Apr3CXDesktopApp Backdoored in a Suspected Lazarus Campaign
8. 3 AprAugment Security Asset Tagging with Custom Assessment and Remediation (CAR)
9. 3 AprRisk Fact #5: Infrastructure Misconfigurations Open the Door to Ransomware

March 2023

1. 31 MarRisk Fact #4: Misconfigurations Still Prevalent in Web Applications
2. 31 MarRisk-based Vulnerability Management Combined With A Cyber Risk Management Platform
3. 30 MarRisk Fact #3: Initial Access Brokers Attack What Organizations Ignore
4. 29 MarRisk Fact #2: Automation Is the Difference Between Success and Failure
5. 28 MarRisk Fact #1: Speed Is the Key to Out-Maneuvering Adversaries
6. 21 MarACSC Essential 8 Cybersecurity Strategies, Maturity Levels, and Best Practices
7. 16 MarA New Approach to Discover, Monitor, and Reduce Your Modern Web Attack Surface
8. 15 MarStaying Ahead of Ransomware Threats
9. 15 MarThe March 2023 Patch Tuesday Security Update Review
10. 2 MarQualys VMDR & Jira Integration Now Available

February 2023

1. 22 FebWhat’s Next After Log4Shell?
2. 16 FebAutomating Vulnerability Management with Qualys VMDR & ServiceNow
3. 15 FebForta GoAnywhere Zero-Day Exploited By Threat Actors
4. 15 FebThe February 2023 Patch Tuesday Security Update Review
5. 14 FebDon’t forget about risk remediation of your macOS assets
6. 9 FebReal-Time Defense of Multi-Cloud Environments From Malicious Attacks and Threats
7. 9 FebAnnouncing General Availability of Qualys TotalCloud
8. 9 FebWhat Is Blind SQL Injection? Content-Based and Time-Based Approaches
9. 8 FebIntroducing Enterprise TruRisk Management from Qualys
10. 8 FebLaunching Qualys Cloud Threat Database
11. 8 FebRansomware Targets Outdated VMware ESXi Hypervisors: Protect Your Systems Now!
12. 6 FebmacOS Patching Is Here!
13. 3 FebIs your FIM Solution Cost and Time Efficient?
14. 3 FebCVE-2023-25136: Pre-Auth Double Free Vulnerability in OpenSSH Server 9.1

January 2023

1. 31 JanWhy FedRAMP High Authorization Can Ensure High Cybersecurity Maturity
2. 30 JanManaging Security Configuration Risk with the Most Comprehensive Configuration Compliance Solution!
3. 18 JanThe January 2023 Oracle Critical Patch Update
4. 16 JanDetection of Vulnerabilities in JavaScript Libraries
5. 10 JanThe January 2023 Patch Tuesday Security Update Review
6. 10 JanDriving CISA Compliance with Qualys
7. 3 JanImplement Risk-Based Vulnerability Management with Qualys TruRisk™: Part 3
8. 3 JanBitRAT Now Sharing Sensitive Bank Data as a Lure

2022 116

December 2022

1. 29 DecQualys Threat Research Unit: Threat Thursdays, December 2022
2. 16 DecImplement Risk-Based Vulnerability Management with Qualys TruRisk™ : Part 2
3. 13 DecThe December 2022 Patch Tuesday Security Update Review
4. 13 DecDissecting the Empire C2 Framework
5. 12 DecImplement Risk-Based Vulnerability Management with Qualys TruRisk™ : Part 1
6. 3 DecThe 9th Google Chrome Zero-Day Threat this Year – Again Just Before the Weekend
7. 1 DecIdentify Server-Side Attacks Using Qualys Periscope
8. 1 DecEffective Vulnerability Management with Stakeholder Specific Vulnerability Categorization (SSVC) and Qualys TruRisk

November 2022

1. 30 NovSnapd Race Condition Vulnerability in snap-confine’s must_mkdir_and_open_with_perms() (CVE-2022-3328)
2. 30 NovQualys Broadens Security Offerings for Oracle Cloud Infrastructure
3. 29 NovDon’t Spend Your Holiday Season Patching Chrome
4. 22 NovEase Your Cybersecurity Maturity Model Certification Journey With Qualys
5. 15 NovQSC 2022: That’s a Wrap!
6. 14 NovQSC 2022: Listening to the Voice of the Customer
7. 11 NovQSC 2022: Qualys’ Threat Research Unit (TRU) – Our Shield Is Your Shield
8. 10 NovQSC 2022 Day 1 Recap: Qualys Gives Organizations More Security in an Ever-Expanding Threat Landscape
9. 9 NovQSC 2022 Kickoff: Quantifying and Qualifying Digital Cyber Risks
10. 8 NovNovember 2022 Patch Tuesday | Microsoft Releases 65 New Vulnerabilities With 10 Critical; Adobe Releases Zero Advisories (for the First Time in Six Years).
11. 8 NovGet Your Patch Tuesday Vulnerabilities Patched on Tuesday
12. 3 NovOpenSSL Vulnerability Recap
13. 1 NovWhy Is Snapshot Scanning Not Enough?
14. 1 NovIntroducing TotalCloud – Cloud Security Simplified

October 2022

1. 31 OctQualys Research Alert: OpenSSL 3.0.7 – What You Need To Know
2. 28 OctDon’t spend another weekend patching Chrome
3. 28 OctQualys Research Team: Threat Thursdays, October 2022
4. 27 OctText4Shell: Detect, Prioritize and Remediate The Risk Across On-premise, Cloud, Container Environment Using Qualys Platform
5. 26 OctFingerprinting Web Applications and APIs using Qualys Web Application Scanning
6. 26 OctLeeloo Multipath: Authorization bypass and symlink attack in multipathd (CVE-2022-41974 and CVE-2022-41973)
7. 25 OctCVE-2022-42889: Detect Text4Shell via Qualys Container Security
8. 17 OctCISA BOD 23-01: Meeting and Exceeding CISA Requirements with Qualys
9. 13 OctNot Your Average FIM: Why Customers Choose Qualys FIM
10. 12 OctCreating Awareness of External JavaScript Libraries in Web Applications
11. 12 OctAward-winning Qualys Vulnerability and Compliance Solution now available on IBM zSystems & LinuxONE Page
12. 11 OctJSON Web Token (JWT) Weaknesses
13. 11 OctOctober 2022 Patch Tuesday | Microsoft Releases 84 Vulnerabilities With 13 Critical, Plus 12 Microsoft Edge (Chromium-Based); Adobe Releases 4 Advisories, 29 Vulnerabilities With 17 Critical.
14. 10 OctIn-Depth Look Into Data-Driven Science Behind Qualys TruRisk
15. 7 OctNSA Alert: Topmost CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors
16. 5 OctQualys Performance Tuning Series: Remove Stale Assets for Best Performance
17. 3 OctAutomatically Discover, Patch, and Remediate WhatsApp Vulnerabilities Using Qualys VMDR Mobile

September 2022

1. 30 SepQualys Response to ProxyNotShell Microsoft Exchange Server Zero-Day Threat Using Qualys Cloud Platform
2. 30 SepSpelunking Your Qualys Data with Splunk
3. 29 SepQualys Research Team: Threat Thursdays, September 2022
4. 28 SepRemediate Your Vulnerable Lenovo Systems with Qualys Custom Assessment and Remediation
5. 28 SepOptimizing a Web Application Security Scan for bWAPP
6. 27 SepPrepare Your Organization for Compliance with the NYDFS Cybersecurity Regulation
7. 20 SepWhy Organizations Struggle with Patch Management (and What to Do about It)
8. 13 SepSeptember 2022 Patch Tuesday | Microsoft Releases 63 Vulnerabilities With 5 Critical, Plus 16 Microsoft Edge (Chromium-Based); Adobe Releases 7 Advisories, 63 Vulnerabilities With 35 Critical.
9. 8 SepLet Smart Automation Reduce the Risk of Zero-Day Attacks on Third-Party Applications
10. 1 SepIntroducing Qualys Threat Research Thursdays

August 2022

1. 31 AugAn End-to-End Approach to Next-Gen Security for Web Applications & APIs
2. 23 AugMitigating the Risk of Zero-Day Vulnerabilities by using Compensating Controls
3. 22 AugQualys VMDR Recognized as Best VM Solution by SC Awards 2022, Leader by GigaOm, and #1 in Risk-Based Vulnerability Management by G2.com
4. 17 AugAtlassian Confluence: Questions for Confluence App Hardcoded Credentials Vulnerability (CVE-2022-26138)
5. 16 AugAsyncRAT C2 Framework: Overview, Technical Analysis & Detection
6. 15 AugQualys Security Updates: Cloud Agent for Linux
7. 9 AugAugust 2022 Patch Tuesday | Microsoft Releases 121 Vulnerabilities With 17 Critical, Plus 20 Microsoft Edge (Chromium-Based); Adobe Releases 5 Advisories, 25 Vulnerabilities With 15 Critical.
8. 9 AugYour 2026 Guide to Qualys and ServiceNow Integrations: What’s New, What Matters, and What to Use
9. 8 AugA Deep Dive into VMDR 2.0 with Qualys TruRisk™
10. 5 AugQualys API Best Practices: CyberSecurity Asset Management API
11. 3 AugIntroducing CyberSecurity Asset Management 2.0 with Natively Integrated External Attack Surface Management
12. 1 AugHere’s a Simple Script to Detect the Stealthy Nation-State BPFDoor

July 2022

1. 29 JulNew Qualys Research Report: Evolution of Quasar RAT
2. 28 JulAttack Surface Management: a Critical Pillar of Cybersecurity Asset Management
3. 27 JulJoin Qualys at Black Hat USA 2022!
4. 26 JulAflac Reduces Critical Vulnerabilities by 55% with Qualys VMDR 2.0 with TruRisk
5. 25 JulIntegrating JIRA to the Qualys Cloud Platform
6. 20 JulUse Qualys ­­Flow to Automate Detection & Remediation with No-code Workflows
7. 12 JulJuly 2022 Patch Tuesday | Microsoft Releases 84 Vulnerabilities With 4 Critical, Plus 2 Microsoft Edge (Chromium-Based); Adobe Releases 4 Advisories, 27 Vulnerabilities With 18 Critical.
8. 11 JulAbout CMDB Sync Integration with Qualys CyberSecurity Asset Management
9. 11 JulHow to Quickly Prioritize Risks with VMDR 2.0 and Orchestrate Response with CMDB & ITSM Integration

June 2022

1. 29 JunAtlassian Confluence OGNL Injection Remote Code Execution (RCE) Vulnerability (CVE-2022-26134)
2. 22 JunHow Risk-Based Remediation Drives Smarter Vulnerability Management with Qualys VMDR 2.0
3. 21 JunDefending Against Scheduled Task Attacks in Windows Environments
4. 15 JunNew Qualys Research Report: Inside a Redline InfoStealer Campaign
5. 14 JunDetect the Follina MSDT Vulnerability (CVE-2022-30190) with Qualys Multi-Vector EDR
6. 14 JunJune 2022 Patch Tuesday | Microsoft Releases 55 Vulnerabilities With 3 Critical; Adobe Releases 6 Advisories, 46 Vulnerabilities With 40 Critical.
7. 7 JunClose the Gap Between IT & Security with Our New App: Qualys VMDR for ITSM
8. 6 JunIntroducing Qualys VMDR 2.0

May 2022

1. 26 MayQualys FIM: Be Compliance Ready with Intuitive, Ready-to-Use File Monitoring Profiles
2. 20 MayPut SecOps in the Driver’s Seat with Custom Assessment and Remediation
3. 16 MayUpgrade Your FIM Program to Detect Risk and Streamline Compliance
4. 10 MayMay 2022 Patch Tuesday | Microsoft Releases 75 Vulnerabilities With 8 Critical; Adobe Releases 5 Advisories, 18 Vulnerabilities With 16 Critical.
5. 9 MayUrsnif Malware Banks on News Events for Phishing Attacks
6. 6 MayCISA Alert: Top 15 Routinely Exploited Vulnerabilities
7. 4 MayRansomware Insights from the FBI’s 2021 Internet Crime Report

April 2022

1. 21 AprAssessing Certificate Risk with Qualys VMDR
2. 20 AprImplications of Windows Subsystem for Linux for Adversaries & Defenders (Part 2)
3. 12 AprApril 2022 Patch Tuesday: Microsoft Releases 145 Vulnerabilities With 10 Critical; Adobe Releases 4 Advisories, 78 Vulnerabilities With 51 Critical.
4. 4 AprThe Evolution of EDR: Why Multi-Vector EDR is the Future of EDR Security

March 2022

1. 31 MarQualys Multi-Vector EDR Excels in 2022 MITRE ATT&CK Evaluation
2. 31 MarSpring Framework Zero-Day Remote Code Execution (Spring4Shell) Vulnerability
3. 22 MarImplications of Windows Subsystem for Linux for Adversaries & Defenders (Part 1)
4. 18 MarInfographic: Log4Shell Vulnerability Impact by the Numbers
5. 18 MarQualys Study Reveals How Enterprises Responded to Log4Shell
6. 9 MarCasdoor SQL Injection (CVE-2022-24124)
7. 8 MarMarch 2022 Patch Tuesday: Microsoft Releases 92 Vulnerabilities With 3 Critical; Adobe Releases 3 Advisories, 6 Vulnerabilities With 5 Critical.
8. 7 MarAvosLocker Ransomware Behavior Examined on Windows & Linux
9. 2 MarUkrainian Targets Hit by HermeticWiper, New Datawiper Malware

February 2022

1. 26 FebRussia-Ukraine Crisis: How to Strengthen Your Security Posture to Protect against Cyber Attack, based on CISA Guidelines
2. 24 FebMeet FedRAMP Compliance with Qualys Cloud Platform
3. 23 FebEnhanced Native DNS based Scanning with Qualys VMDR
4. 23 FebManaging CISA Known Exploited Vulnerabilities with Qualys VMDR
5. 17 FebOh Snap! More Lemmings: Local Privilege Escalation Vulnerability Discovered in snap-confine (CVE-2021-44731)
6. 15 FebThe Unbearable Lightness of Unaudited Supply Chains
7. 8 FebMicrosoft & Adobe Patch Tuesday (February 2022) – Microsoft 70 Vulnerabilities with 0 Critical; Adobe 17 Vulnerabilities with 5 Critical
8. 8 FebLolZarus: Lazarus Group Incorporating Lolbins into Campaigns
9. 3 FebCatching the RAT called Agent Tesla
10. 1 FebVulnerability Remediation: It’s Not Just Patching

January 2022

1. 27 JanSimplifying Cloud Asset Identification in a Multi-Cloud Environment
2. 25 JanPwnKit: Local Privilege Escalation Vulnerability Discovered in polkit’s pkexec (CVE-2021-4034)
3. 17 JanThe Chaos Ransomware Can Be Ravaging
4. 14 JanAutomating Agent-less Vulnerability Assessment for Intune Enrolled Mobile Devices
5. 11 JanMicrosoft & Adobe Patch Tuesday (January 2022) – Microsoft 126 Vulnerabilities with 9 Critical, Adobe 41 Vulnerabilities, 22 critical
6. 11 JanHow to Make Log4Shell Remediation Quick & Effective
7. 6 JanEmotet Re-emerges with Help from TrickBot
8. 5 JanMitigation of Supply Chain Risks in Microsoft 365

2021 94

December 2021

1. 28 DecLog4Shell – Follow This Multi-Layered Approach for Detection and Remediation
2. 27 DecHow to Discover Log4Shell Vulnerabilities in Running Containers & Images
3. 20 DecQualys Integrates with Shodan to Help Map the External Attack Surface
4. 20 DecNew Options Profiles for Log4Shell Detection
5. 20 Dec6 Ways to Quickly Detect a Log4Shell Exploit in Your Environment
6. 17 DecOut-of-Band Detection for Log4Shell
7. 15 DecIs Your Web Application Exploitable By Log4Shell Vulnerability?
8. 14 DecLog4Shell Exploit Detection and Response with Qualys Multi-Vector EDR
9. 14 DecMicrosoft & Adobe Patch Tuesday (December 2021) – Microsoft 83 Vulnerabilities With 7 Critical, 1 Actively Exploited. Adobe 60 Vulnerabilities, 28 Critical.
10. 13 DecDeveloping a Repeatable and Sustainable Security Exploitable Risk Reporting Program
11. 10 DecApache Log4j Zero Day Threat: CVE-2021-44228 Detection and Response
12. 10 DecRANSOMWARE: Ranzy Locker

November 2021

1. 22 NovEuronet Worldwide: Speedy, Global Response to Threats Reduces Risk
2. 18 NovConti Ransomware
3. 18 NovQSC Day 1 Recap: As Threats Intensify, Qualys Helps Organizations Shore Up Security
4. 18 NovSecurity Automation Critical to the Digital Journey
5. 11 NovMicrosoft & Adobe Patch Tuesday (November 2021) – Microsoft 55 Vulnerabilities with 6 Critical, 6 Zero-Days. Adobe 4 Vulnerabilities
6. 9 NovQualys Response to CISA Alert: Binding Operational Directive 22-01
7. 2 NovCSPM Evolution – Start Secure, Stay Secure

October 2021

1. 28 OctApache HTTP Server Path Traversal & Remote Code Execution (CVE-2021-41773 & CVE-2021-42013)
2. 27 OctApache Tomcat HTTP Request Smuggling Vulnerability (CVE-2021-33037)
3. 25 OctVulnerability On-Demand Search Reporting & Easy Download options
4. 18 OctApple fixes zero-day in iOS and iPadOS 15.0.2 emergency release: Detect and Prioritize Vulnerabilities using VMDR for Mobile Devices
5. 13 OctMicrosoft & Adobe Patch Tuesday (October 2021) – Microsoft 74 Vulnerabilities with 3 Critical, 4 Zero-Days. Adobe 10 Vulnerabilities
6. 13 OctTenacity 2.0 – Emulating Threat groups
7. 11 OctFrom Technical Features to Customer Security Metrics
8. 5 OctThe Rise of Ransomware
9. 5 OctAssess Your Risk From Ransomware Attacks, Powered by Qualys Research

September 2021

1. 29 SepQID Spotlight: Discover Azul Java Vulnerabilities
2. 29 SepNSO Pegasus iPhone Spyware Vulnerabilities Fixed by Apple – Detect & Prioritize Using VMDR for Mobile Devices
3. 27 SepPrioritize Remediation with a Perceived-Risk Approach to Strengthen CyberSecurity Effectiveness
4. 21 SepApache Struts 2 Double OGNL Evaluation Vulnerability (CVE-2020-17530)
5. 20 SepImproving Cybersecurity Practices by Managing the Asset Lifecycle
6. 20 SepDetect & Prioritize NSO Pegasus iPhone Spyware Vulnerabilities Using VMDR for Mobile Devices
7. 20 SepGoogle Android September 2021 Security Patch Vulnerabilities: Discover and Take Remote Response Action Using VMDR for Mobile Devices
8. 14 SepMicrosoft and Adobe Patch Tuesday (September 2021) – Microsoft 60 Vulnerabilities with 3 Critical, Adobe 61 Vulnerabilities
9. 14 SepOptimize Vulnerability Remediation with Proactive Zero-Touch Patch

August 2021

1. 13 AugGoogle Android August 2021 Security Patch Vulnerabilities: Discover and Take Remote Response Action Using VMDR for Mobile Devices
2. 10 AugMicrosoft and Adobe Patch Tuesday (August 2021) – Microsoft 51 Vulnerabilities with 7 Critical, Adobe 29 Vulnerabilities
3. 6 AugTenacity – An Adversary Emulation Tool for Persistence
4. 5 AugQualys Research Wins Two 2021 Pwnie Awards
5. 3 AugSecuring Red Hat Enterprise Linux CoreOS in Red Hat OpenShift with Qualys
6. 2 AugQualys Research Nominated for Pwnie Awards 2021

July 2021

1. 31 JulTop Black Hat USA Sessions for Qualys Customers
2. 29 JulCISA Alert: Top Routinely Exploited Vulnerabilities
3. 28 JuliOS and iPadOS 14.7 and 14.7.1 Security Update: Discover Vulnerabilities and Take Remote Response Action Using VMDR for Mobile Devices
4. 23 JulProtect your Devices from Pegasus Spyware using VMDR for Mobile Devices’ Proactive Approach
5. 20 JulCVE-2021-33910: Denial of Service (Stack Exhaustion) in systemd (PID 1)
6. 20 JulSequoia: A Local Privilege Escalation Vulnerability in Linux’s Filesystem Layer (CVE-2021-33909)
7. 13 JulGoogle Android July 2021 Security Patch Vulnerabilities: Discover and Take Remote Response Action Using VMDR for Mobile Devices
8. 13 JulMicrosoft and Adobe Patch Tuesday (July 2021) – Microsoft 117 Vulnerabilities with 13 Critical, Adobe 26 Vulnerabilities
9. 9 JulQualys API Best Practices: Host List Detection API
10. 8 JulKaseya REvil Ransomware Attack (CVE-2021-30116) – Automatically Discover and Prioritize Using Qualys VMDR®
11. 7 JulAnalyzing the REvil Ransomware Attack
12. 7 JulMicrosoft Windows Print Spooler RCE Vulnerability (PrintNightmare-CVE-2021-34527) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR®

June 2021

1. 9 JunDarkSide Ransomware
2. 8 JunMicrosoft & Adobe Patch Tuesday (June 2021) – Microsoft 50 Vulnerabilities with 5 Critical, Adobe 21 Critical Vulnerabilities

May 2021

1. 25 MayMonitor Windows Registry Changes with Qualys File Integrity Monitoring
2. 24 MayReinforce Defense with File Reputation and Trusted Source Intelligence in Qualys FIM
3. 18 MayReinventing Cybersecurity Asset Management
4. 18 MayIntroducing CyberSecurity Asset Management
5. 12 MayNefilim Ransomware
6. 11 MayMicrosoft & Adobe Patch Tuesday (May 2021) – Qualys covers 85 Vulnerabilities, 26 Critical
7. 10 MayGoogle Android May 2021 Security Patch Vulnerabilities: Discover and Take Remote Response Action Using VMDR for Mobile Devices
8. 4 May21Nails: Multiple Critical Vulnerabilities in Exim Mail Server
9. 3 MayThe Convergence of Endpoint Protection with Detection & Response

April 2021

1. 28 ApriOS / iPadOS 14.5 Updates: Identify Assets Requiring Update and Take Remote Action with VMDR for Mobile Devices
2. 22 AprWhatsApp Vulnerabilities: Automatically Discover and Remediate Using VMDR for Mobile Devices
3. 21 AprManage Linux Patching with Qualys VMDR
4. 14 AprApril 2021 Patch Tuesday – 108 Vulnerabilities, 19 Critical, Adobe
5. 14 AprQualys API Best Practices: Host List API
6. 14 AprIntroducing “This Month in Patches” Webinar Series
7. 12 AprGoogle Android April 2021 Security Patch Vulnerabilities: Discover and Take Remote Response Action Using VMDR for Mobile Devices
8. 8 AprNo Auth, Seamless Database Security and Compliance
9. 2 AprQualys Update on Accellion FTA Security Incident
10. 1 AprAssessing Mainframe Compliance While Minimizing Operational Impact

March 2021

1. 31 MarExtending your FedRAMP Program to Container Infrastructure with the Qualys Cloud Platform
2. 23 MarUnified Dashboard Preview for Enhanced Security Visualization
3. 22 MarQualys Leadership Update: Moving Forward Together
4. 11 MarSecurity Advisory: Mitigating the Risk of Microsoft Exchange Zero-Day ProxyLogon Vulnerabilities
5. 9 MarMarch 2021 Patch Tuesday – 82 Vulnerabilities, 10 Critical, Adobe
6. 3 MarMicrosoft Exchange Server Zero-Days (ProxyLogon) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR
7. 2 MarQualys API Best Practices: KnowledgeBase API

February 2021

1. 10 FebExpand Your Vulnerability & Patch Management Program to Mobile Devices with Qualys VMDR
2. 9 FebFebruary 2021 Patch Tuesday – 56 Vulnerabilities, 11 Critical, Adobe
3. 3 FebUnified SaaS Application Security, Detection, and Response
4. 1 FebUnpacking the CVEs in the FireEye Breach – Start Here First

January 2021

1. 26 JanCVE-2021-3156: Heap-Based Buffer Overflow in Sudo (Baron Samedit)
2. 26 JanDive Deep into VMDR
3. 25 JanThe Evolution of the Qualys Cloud Platform
4. 25 JanBuilding an Open Cloud Platform
5. 21 JanUnified Vulnerability View of Unauthenticated and Agent Scans
6. 12 JanJanuary 2021 Patch Tuesday – 83 Vulnerabilities, 10 Critical, One Zero Day, Adobe
7. 4 JanTechnical Deep Dive Into SolarWinds Breach

2020 79

December 2020

1. 22 DecQualys Security Advisory: SolarWinds / FireEye
2. 21 DecAdobe Flash Player Reaches End of Life on December 31, 2020
3. 15 DecSolorigate/Sunburst : FireEye Breach Leveraged SolarWinds Orion Software
4. 14 DecSupport Live Chat
5. 10 DecQID Spotlight: Enhanced Oracle Java Discovery
6. 10 DecSolorigate/Sunburst : Theft of Cybersecurity Tools | FireEye Breach
7. 8 DecDecember 2020 Patch Tuesday – 58 Vulnerabilities, 9 Critical, Windows Exchange, Hyper-V, SharePoint, Adobe

November 2020

1. 25 NovQualys Research Nominated for Pwnie Awards 2020
2. 16 NovAn End-to-End Approach to Next-Gen Web Application and API Security
3. 16 NovSecuring Containers in Google Cloud Artifact Registry with Qualys
4. 16 NovA Modern Approach to Risk Management and Compliance
5. 11 NovEDR Solutions Require Comprehensive Telemetry to Fend Off Multi-Vector Attacks
6. 10 NovNovember 2020 Patch Tuesday – 112 Vulnerabilities, 17 Critical, Windows Codecs, Network File System, Workstation, Adobe

October 2020

1. 22 OctNSA Alert: Chinese State-Sponsored Actors Exploit Known Vulnerabilities
2. 16 OctQualys Policy Compliance Plugin for Jenkins Now Available
3. 15 OctAuto-Discover and Secure Middleware Instances in Your Environment
4. 14 OctMicrosoft Windows TCP/IP Remote Code Execution Vulnerability (CVE-2020-16898) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR®
5. 14 OctDiscover A10 Networks Advanced Core OS Vulnerabilities using Qualys VMDR
6. 13 OctOctober 2020 Patch Tuesday – 87 Vulnerabilities, 11 Critical, SharePoint, TCP/IP Stack, Graphics, Adobe Vulns
7. 5 OctInstrument VMware Virtual Machines for Security and Compliance
8. 2 OctDetecting HTTP Request Smuggling with Qualys WAS

September 2020

1. 22 SepPAN-OS Critical Buffer Overflow Vulnerability (CVE-2020-2040) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR®
2. 16 SepVulnerability Detection Pipeline
3. 15 SepMicrosoft Netlogon Vulnerability (CVE-2020-1472 – Zerologon) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR®
4. 15 SepDiscover Gentoo Linux Vulnerabilities using Qualys VMDR
5. 8 SepSeptember 2020 Patch Tuesday – 129 Vulnerabilities, 23 Critical, SharePoint, Exchange, Windows Codecs, Adobe Vulns
6. 4 SepDetect FritzFrog and Other Malware Infections with Inventory Data
7. 1 SepDiscover EulerOS Vulnerabilities using Qualys VMDR

August 2020

1. 26 AugMeow Attack: A Reminder for Organizations to Identify and Secure Their Databases
2. 18 AugAutomated Discovery and Assessment of PaaS Databases with Lambda Service for Qualys Policy Compliance
3. 11 AugAugust 2020 Patch Tuesday – 120 Vulnerabilities, 17 Critical, Media Foundation, Windows Codecs, Workstation, Adobe
4. 10 AugContinuous Monitoring and Beyond
5. 4 AugJoin us at Black Hat USA 2020!
6. 3 AugGRUB2 Boothole Buffer Overflow Vulnerability (CVE-2020-10713) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR®

July 2020

1. 20 JulAutomatically Discover, Prioritize and Remediate Windows DNS Vulnerability (SigRed – CVE-2020-1350) Using Qualys VMDR®
2. 14 JulJuly 2020 Patch Tuesday – 123 Vulnerabilities, 18 Critical, Hyper-V RemoteFX, DNS Server, Workstation, Adobe
3. 6 JulF5 BIG-IP Remote Code Execution Vulnerability (CVE-2020-5902)
4. 2 JulAdd Ergonomic Security to Your CI/CD Pipeline

June 2020

1. 24 JunRipple20: Multiple Vulnerabilities Identified in Treck TCP/IP Stack
2. 10 JunSecure Your Global Remote Workforce
3. 9 JunJune 2020 Patch Tuesday – 128 Vulns, 11 Critical, Sharepoint, Workstation, Adobe Patches
4. 3 JunProduct, API & Library Notifications Move to Notifications.qualys.com

May 2020

1. 29 MayNSA Announces Sandworm Actors Exploiting Exim MTA Vulnerability (CVE-2019-10149)
2. 29 MayThe European Cybersecurity Blogger Awards 2020 – Meet the Finalists
3. 20 MayVerizon Data Breach Investigations Report 2020
4. 12 MayMay 2020 Patch Tuesday – 111 Vulns, 16 Critical, SharePoint, VS Code, Adobe Patches
5. 7 MayQualys Community Migration to Salesforce Platform

April 2020

1. 14 AprApril 2020 Patch Tuesday – 113 Vulns, 19 Critical, Zero-Day Patches, SharePoint, Adobe ColdFusion
2. 6 AprSecure Remote Endpoints from Vulnerabilities in Video Conferencing & Productivity Applications like Zoom
3. 1 AprNew Features in Qualys Vulnerability Management and Policy Compliance
4. 1 AprReal-Time Alerting and Incident Management for Unauthorized Changes

March 2020

1. 30 MarSecure ElasticSearch, Kafka & Other Microservices with Qualys Cloud Platform
2. 26 MarAutomatically Discover, Prioritize and Remediate Windows Adobe Type Manager Library Remote Code Execution Vulnerability (ADV200006) using Qualys VMDR®
3. 24 MarHow to Install the Qualys Cloud Agent for Remote Workforce
4. 24 MarMicrosoft Released Out-of-Band Advisory – Windows Adobe Type Manager Library Remote Code Execution Vulnerability (ADV200006)
5. 18 MarCyber Criminals using Coronavirus Fears to Spread Information-Stealing Malware
6. 17 MarQualys Cloud Platform: Continuity of Service in Response to COVID-19
7. 16 MarAutomatically Discover, Prioritize and Remediate Microsoft SMBv3 RCE Vulnerability (CVE-2020-0796) using Qualys VMDR
8. 16 MarAutomated and Scalable Audit Workflows with Qualys Security Assessment Questionnaire
9. 11 MarMicrosoft Windows SMBv3 Remote Code Execution Vulnerability (CVE-2020-0796)
10. 10 MarDetect Apache Tomcat AJP File Inclusion Vulnerability (CVE-2020-1938) using Qualys WAS
11. 10 MarMarch 2020 Patch Tuesday – 115 Vulns, 26 Critical, Microsoft Word and Workstation Patches
12. 7 MarIdentifying Let’s Encrypt Revoked Certificates
13. 6 MarAutomatically Discover, Prioritize and Remediate Apache Tomcat AJP File Inclusion Vulnerability (CVE-2020-1938) using Qualys VMDR

February 2020

1. 14 FebDetections Released for ESU Updates on EOL Windows 7, 2008 and 2008 R2
2. 11 FebFebruary 2020 Patch Tuesday – 99 Vulns, 12 Critical, Patch for IE 0-Day, Exchange Vuln, Adobe Vulns
3. 10 FebTop 5 Reasons to Attend Qualys Security Conference 2020 San Francisco
4. 7 FebNew EOL QIDs for Microsoft Windows 7 and 2008/R2
5. 4 FebActionable Searching and Data Download with Vulnerability Management Dashboards

January 2020

1. 29 JanOpenBSD OpenSMTPD Remote Code Execution Vulnerability (CVE-2020-7247)
2. 24 JanWordPress Database Reset Plugin Vulnerability (CVE-2020-7047, CVE-2020-7048)
3. 23 JanDetect Unauthorized Processes Making Changes in Your Environment with Qualys File Integrity Monitoring
4. 17 JanLibMiner: Container-Based Cryptocurrency Miner Targeting Unprotected Redis Servers
5. 15 JanIntroducing Periscope: Out-of-Band Vulnerability Detection Mechanism in Qualys WAS
6. 14 JanMicrosoft Windows CryptoAPI Spoofing Vulnerability (CVE-2020-0601) – How to Detect and Remediate
7. 14 JanJanuary 2020 Patch Tuesday – 50 Vulns, 8 Critical, Adobe Vulns
8. 9 JanCitrix ADC and Gateway Remote Code Execution Vulnerability (CVE-2019-19781)
9. 8 JanThe New Year Calls for a Change in the OT Industry’s State of Security
10. 6 JanSecuring Databases with Qualys Policy Compliance

2019 65

December 2019

1. 27 DecTop 19+ Vulnerability CVEs in Santa’s Dashboard Tracking
2. 20 DecBlue is a color we love but can’t Keep!
3. 12 DecOpenBSD Local Privilege Escalation Vulnerability (CVE-2019-19726)
4. 11 DecCVE-2019-11016: Open Redirect Vulnerability
5. 10 DecDecember 2019 Patch Tuesday – 36 Vulns, 7 Critical, Actively Attacked Win32k vuln, Adobe vulns
6. 5 DecOpenBSD Multiple Authentication Vulnerabilities
7. 3 DecStreamlining and Automating Compliance

November 2019

1. 21 NovThe Power and Future of the Qualys Cloud Platform
2. 12 NovNovember 2019 Patch Tuesday – 74 vulns, 13 Critical, Actively Attacked IE vuln, Hyper-V escapes, Adobe
3. 4 NovBlueKeep Attacks Observed Months after Initial Release

October 2019

1. 31 Oct5 Reasons to Attend Qualys Security Conference 2019
2. 30 OctPHP Remote Code Execution Vulnerability (CVE-2019-11043)
3. 21 OctNew & Improved Qualys WAS Burp Extension Now Available
4. 17 OctGraboid: Revenge of the Worms
5. 11 OctQualys Vulnerability Signature Release 2.4.722-4 Oracle DB New Feature
6. 8 OctOctober 2019 Patch Tuesday – 59 vulns, 9 Critical, Azure App Service, Remote Desktop Client, PoC for Windows Error Reporting
7. 7 OctEnhanced API Scanning with Postman Support in Qualys WAS

September 2019

1. 24 SepMicrosoft Released Out-of-Band Security Updates – How to Detect and Remediate
2. 23 SepEmpower your Cloud Ops Teams – Publish Qualys CloudView Security Assessment Reports to their Slack Channel
3. 16 SepAssess Vulnerabilities, Misconfigurations in CI/CD Pipeline
4. 10 SepSeptember 2019 Patch Tuesday – 79 Vulns, 17 Critical, Remote Desktop Client, SharePoint, Exploited PrivEsc

August 2019

1. 29 AugCisco REST API Container for IOS XE Software Authentication Bypass Vulnerability – (CVE-2019-12643)
2. 26 AugFedRAMP ConMon – Efficiently & Effectively Managing SLAs for RA-5d Requirement
3. 13 AugWindows Remote Desktop Vulnerabilities (Seven Monkeys) – How to Detect and Patch
4. 13 AugAugust 2019 Patch Tuesday – 93 Vulns, 29 Critical, 7 Remote Desktop Vulns, Hyper-V, DHCP, Adobe vulns
5. 1 AugCountdown to Black Hat: Top 10 Sessions to Attend — #9 and #10

July 2019

1. 29 JulCountdown to Black Hat: Top 10 Sessions to Attend — #8
2. 22 JulCountdown to Black Hat: Top 10 Sessions to Attend — #7
3. 15 JulCountdown to Black Hat: Top 10 Sessions to Attend — #6
4. 9 JulJuly 2019 Patch Tuesday – 77 Vulns, 15 Critical, DHCP RCE, Exploited PrivEsc, SQL, Adobe Vulns
5. 8 JulCountdown to Black Hat: Top 10 Sessions to Attend — #5
6. 1 JulVideo Training Update, July 2019
7. 1 JulCountdown to Black Hat: Top 10 Sessions to Attend — #4

June 2019

1. 24 JunCountdown to Black Hat: Top 10 Sessions to Attend — #3
2. 17 JunCountdown to Black Hat: Top 10 Sessions to Attend — #2
3. 14 JunExim MTA Vulnerability (The Return of the WIZard – CVE-2019-10149)
4. 11 JunJune 2019 Patch Tuesday – 88 Vulns, 21 Critical, Hyper-V Escape, Adobe Vulns
5. 11 JunAlpine Docker Image Vulnerability (CVE-2019-5021): How to Detect and Fix
6. 10 JunCountdown to Black Hat: Top 10 Sessions to Attend — #1
7. 6 JunIntegrating Threat and Vulnerability Management with Patch Management: The (Feasible) Quantum Leap
8. 3 JunBoosting Patch Management Is Key for Breach Prevention
9. 1 JunThird-Party User Enumeration Issue Resolved

May 2019

1. 24 MayLinkedIn Faux Pas Shines Light on Certificate Management
2. 23 MayBoost Security with These Gartner-Recommended Projects
3. 16 MayWindows RDP Remote Code Execution Vulnerability (BlueKeep) – How to Detect and Patch
4. 15 MayVerizon’s DBIR Highlights Key Drivers of Security Risk
5. 14 MayMay 2019 Patch Tuesday – 79 Vulns, 22 Critical, RDP RCE, MDS Attacks, Adobe Vulns

April 2019

1. 22 AprZombie POODLE and GOLDENDOODLE Vulnerabilities
2. 18 AprQualys Training Update, April 2019
3. 17 AprMonitoring AWS Golden AMI Pipelines with Slack
4. 10 AprAncestry: On the Vanguard of DevOps Security
5. 9 AprApril 2019 Patch Tuesday – 74 Vulns, 16 Critical, 2 Actively Attacked, 1 PoC Exploit, Adobe Vulns

March 2019

1. 18 MarFree Training: New Certified Learning Paths
2. 14 MarPCI & SSL/Early TLS QIDs 38601, 42366
3. 13 MarUpdated Qualys WAS Plugin for Jenkins Now Available
4. 12 MarMarch 2019 Patch Tuesday – 65 Vulns, 18 Critical, RCEs in DHCP Client, Adobe Vulns

February 2019

1. 14 FebKnow What’s on Your Network at All Times with Qualys Asset Inventory
2. 12 FebFebruary 2019 Patch Tuesday – 74 Vulns, 20 Critical, Exchange 0-day, Adobe Vulns
3. 12 FebRunC Container Breakout Vulnerability
4. 6 FebAssess Vulnerabilities, Misconfigurations in AWS Golden AMI Pipelines

January 2019

1. 29 JanPolicy Compliance Adds UDC Support for Cloud Agent
2. 24 Janmod_ssl Bug and SSL Labs Renegotiation Test
3. 10 JanDetecting Insecure Cookies with Qualys Web Application Scanning
4. 9 JanContainer Security Becomes a Priority for Enterprises
5. 8 JanJanuary 2019 Patch Tuesday – 47 Vulns, 7 Critical, Adobe Vulns

2018 106

December 2018

1. 17 DecNew Frontiers In Cryptojacking
2. 11 DecDecember 2018 Patch Tuesday – 39 Vulns, Workstation Patches, Adobe Vulns
3. 11 DecGlobal IT Asset Inventory: The Foundation for Security and Compliance
4. 4 DecCapital One: Building Security Into DevOps

November 2018

1. 28 NovInfosec Teams Race To Secure DevOps
2. 20 NovQSC18 Takeaway: Complex Environments Demand Visibility and Real-Time Security
3. 19 NovSSL Labs Grade Change for TLS 1.0 and TLS 1.1 Protocols
4. 17 NovQSC18: API Security, Enabling Innovation Without Enabling Attacks and Data Breaches
5. 15 NovQSC18 Day 1 Takeaway: Continuous Transformation Demands Continuous Security
6. 15 NovQSC18: The Need for Security Visibility in the Age of Digital Transformation
7. 13 NovNovember 2018 Patch Tuesday – 62 Vulns, TFTP Server RCE, Adobe PoC
8. 12 NovWelcome to Qualys Security Conference 2018
9. 6 NovBluetooth Chip Bugs Affect Enterprise Wi-Fi, as Hackers Exploit Cisco 0-Day

October 2018

1. 23 OctDon’t Overlook Qualys Malware Detection
2. 17 OctThreat Hunting: Adoption, Expertise Grow, but Work Remains
3. 16 OctApple, Amazon in a Tussle with Bloomberg over Spy Chips Report
4. 10 OctPCI & QID 38598 “Deprecated Public Key Length”
5. 9 OctOctober 2018 Patch Tuesday – 49 Vulns, Critical browser patches, Hyper-V, Adobe vulns
6. 2 OctStronger Security with Global IT Asset Inventory
7. 2 OctHackers Exploit Facebook Bug, As Twitter DMs (Maybe) Got Misrouted

September 2018

1. 12 SepQualys Helps Consultants, MSPs Deliver World-Class Security Services To Mid-Size Customers
2. 11 SepSeptember 2018 Patch Tuesday – 61 Vulns, FragmentSmack, Hyper-V Escape
3. 10 SepBritish Airways Hack Triggers GDPR Concerns, as World Awaits Windows 0-Day Patch
4. 5 SepGDPR 101: Monitoring & Maintaining Compliance After the Deadline

August 2018

1. 30 AugSecuring Container Deployments with Qualys
2. 28 AugHow New Passive Network Sensor Boosts Platform Capabilities
3. 27 AugSecurity News: Hackers Aim Ransomware at Big Cos., as Experts Call for Swift Patching of Struts Bug
4. 23 AugDetecting Apache Struts 2 Namespace RCE: CVE-2018-11776
5. 16 AugBlack Hat USA 2018 Best Practices Videos
6. 14 AugAugust 2018 Patch Tuesday – 63 Vulns, L1TF (Foreshadow), Exchange, SQL, Active Attacks on IE flaw
7. 14 AugIntroducing a Burp Extension for Integration with Qualys Web Application Scanning
8. 13 AugSecurity News: WannaCry Surfaces in Taiwan, as Reddit Breach Puts 2FA in the Spotlight
9. 9 AugQualys BrowserCheck CoinBlocker Protects Users From Active Cryptojacking Campaigns
10. 1 AugQualys Helps Smaller Organizations Secure Hybrid IT with Free Offering

July 2018

1. 31 JulEager to Boost your Container Security? Don’t Miss this Webcast
2. 30 JulSecurity News: Bluetooth Bug Triggers Patch Frenzy, as Ransomware Attack Hits Global Shipper
3. 25 JulStaying Safe in the Era of Browser-based Cryptocurrency Mining
4. 21 JulSAQ Enables Users to Pick and Choose Questions for Custom Templates
5. 13 JulQSC18 Virtual Edition: Securing Containers – From Build to Deployments
6. 10 JulJuly Patch 2018 Tuesday – Critical browser patches, Lazy FP, Exchange, Adobe vulns

June 2018

1. 29 JunQSC18 Virtual Edition: Vulnerability Risk Management
2. 28 JunGDPR Is Here: How GDPR Readiness Can Boost Your Business
3. 26 JunGDPR Is Here: Don’t Neglect Public Cloud Security
4. 22 JunQSC18 Virtual Edition: Global IT Asset Discovery, Inventory, and Management
5. 19 JunGDPR Is Here: Web App Security Is a Must
6. 18 JunGet Emerging Threats Visibility with Qualys IOC Widgets
7. 15 JunQSC18 Virtual Edition – Building Security In: The Qualys Cloud Platform and Architecture
8. 15 JunQSC18 Virtual Edition – Securing our Networks and Enabling the Digital Transformation: One App at a Time
9. 14 JunGDPR Is Here: Indication of Compromise – Another Key Practice for GDPR Compliance
10. 12 JunJune 2018 Patch Tuesday – New Speculative Store Bypass Fixes, Adobe Vulns
11. 6 JunThe Digital Transformation Age Is Dawning: Do You Know Where Your Certificates Are?
12. 5 JunGDPR Is Here: Put File Integrity Monitoring in Your Toolbox

May 2018

1. 31 MayGDPR Is Here: Assess the Security Configurations of Your IT Systems
2. 30 MayAll Hands Memo to Owners of Home / Small Office Routers: Reboot Them!
3. 29 MayGDPR Is Here: Assess Risk from Vendors and from Internal Teams
4. 28 MayQSC 2018 Mumbai Finds Qualys at the Forefront of Digital Transformation Security
5. 25 MayGDPR Compliance: Manage Procedural Risk Assessments with New GDPR Templates
6. 24 MayGDPR Is Here: Manage Vulnerabilities and Prioritize Threat Remediation
7. 22 MayGDPR Is Here: Achieve Superior Data Breach Prevention and Detection with Qualys
8. 15 MaySecuring the Hybrid Cloud: A Guide to Using Security Controls, Tools and Automation
9. 14 MayWhat we’ve got here is failure to communicate: OS vendors misread CPU docs, create flaw
10. 8 MayMay 2018 Patch Tuesday – Medium Weight, However One Active Exploit Needs Attention
11. 8 MayTimely Password-Change Call from Twitter, as Bugs Hit WebEx and GPON routers
12. 7 MayHow To Prioritize Vulnerabilities in a Modern IT Environment

April 2018

1. 27 AprGaining Control over Your Digital Certificates
2. 25 AprWhen Preparing for GDPR, Don’t Neglect Public Cloud Security
3. 24 AprOrangeworm Targeting Healthcare Industry since 2015 Now Exposed
4. 23 AprQualys WAS Introduces Swagger Support for REST API Security Testing
5. 19 AprThe Sky Is Falling! Responding Rationally to Headline Vulnerabilities
6. 18 AprDr. Michio Kaku Paints Fascinating Picture of the Future at Qualys’ RSA Booth
7. 16 AprQualys: Cloud Security Must Move Towards ‘Transparent Orchestration’
8. 13 AprIndication of Compromise: Another Key Practice for GDPR Compliance
9. 10 AprApril 2018 Patch Tuesday – 63 Microsoft Vulnerabilities, 19 for Adobe
10. 9 AprVendor Risk Bites Sears, Delta and Best Buy, while Saks, Lord & Taylor Deal With Breach
11. 4 AprPut FIM in Your GDPR Toolbox
12. 2 AprMicrosoft Misfires with Meltdown Patch, while WannaCry Pops Up at Boeing

March 2018

1. 30 MarA “Patch for the Meltdown Patch” released out of band Thursday night
2. 30 MarContinuous Web Security Assessment for Production and DevOps Environments
3. 29 MarSecuring your Cloud and Container DevOps Pipeline
4. 28 MarQID 86725 “F5 BIG-IP Load Balancer Internal IP Address Disclosure”
5. 26 MarFeds Take On Foreign Hackers, While 880K Orbitz Customers “Likely” Affected by Data Breach
6. 19 MarWebcast Q&A: The GDPR Deadline Readiness and Impact to Global Organizations Outside the EU
7. 13 MarMarch 2018 Patch Tuesday – 75 Microsoft Vulnerabilities, 7 for Adobe
8. 13 MarPCI DSS v3.2 & Exposing Session ID in URL
9. 9 MarCryptomining is all the rage among hackers, as DDoS amplification attacks continue
10. 7 MarGDPR: The Stakes Are High and Time Is of the Essence
11. 5 MarTLS 1.0 Deprecation for Qualys Cloud Platform
12. 2 MarApple in the InfoSec Spotlight, as GitHub Falls Prey to Amplified DDoS Attack

February 2018

1. 27 FebRecline on the Qualys Couch: Examining Patching Behavior
2. 16 FebHackers Hit the Olympics, While Patch Tuesday and Meltdown / Spectre Keep IT Departments On Edge
3. 13 FebFebruary 2018 Patch Tuesday – 55 Microsoft vulnerabilities patched, 45 for Adobe
4. 12 FebSecuring IT Assets By Prioritizing Protection And Remediation
5. 9 FebIntel Makes Spectre Patch Progress, while Adobe Grapples with Latest Flash Bug
6. 6 FebIf You Think File Integrity Monitoring is Boring, Think Again
7. 5 FebCountdown to GDPR: For GDPR Compliance, Web App Security Is a Must
8. 3 FebSSL Labs Grading Update: Forward Secrecy, Authenticated Encryption and ROBOT
9. 2 FebMeltdown / Spectre: New Concerns Over Intel Patches, as Hackers Test Exploits

January 2018

1. 26 JanMeltdown/Spectre: Intel Nixes Patches, Tech CEOs Questioned on Information Blackout
2. 18 JanMeltdown and Spectre Aren’t Business as Usual
3. 16 JanMeltdown / Spectre Mitigation Is a Work in Progress
4. 16 JanContinuous Security & Compliance Demo Series
5. 9 JanJanuary 2018 Patch Tuesday – Meltdown/Spectre, 16 Critical Microsoft Patches, 1 Adobe Patch
6. 9 JanMeltdown/Spectre and Qualys Cloud Platform
7. 9 JanPCI DSS v3.2 & Private IP Address Disclosure
8. 6 JanVisualize Spectre and Meltdown Remediation with Qualys AssetView Dashboard
9. 4 JanProcessor Vulnerabilities – Meltdown and Spectre

2017 105

December 2017

1. 14 DecCloud Security Improves, But Much Work Still Remains to Be Done
2. 12 DecDecember 2017 Patch Tuesday: Quiet End to the Year
3. 7 DecImplementing the CIS 20 Critical Security Controls: Make Your InfoSec Foundation Rock Solid
4. 4 DecImplementing the CIS 20 Critical Security Controls: Delving into More Sophisticated Techniques

November 2017

1. 28 NovQualys WAS: New Detections for XML External Entities (XXE)
2. 28 NovImplementing the CIS 20 Critical Security Controls: Building Upon Foundational Cyber Hygiene
3. 14 NovNovember Patch Tuesday: 53 Vulnerabilities and a Massive Adobe Update
4. 14 NovImplementing the CIS 20 Critical Security Controls: Slash Risk of Cyber Attacks by 85%
5. 8 NovWebcast Q&A: DevSecOps – Building Continuous Security Into IT and App Infrastructures
6. 2 NovNew ‘Silence’ Banking Trojan copies Carbanak to Steal from Banks (Analysis with IOCs)
7. 1 NovCase Study: Cisco Group Bakes Security into Web App Dev Process

October 2017

1. 31 OctDevSecOps: Building Continuous Security Into IT and App Infrastructures
2. 27 OctInfoSec Pros Must Fasten Their Seatbelts for Digital Transformation Ride
3. 26 OctWebcast Q&A: Automating the CIS Critical Security Controls
4. 25 OctBad Rabbit – Ransomware
5. 23 OctACLU Attorney: U.S. Citizens Legally Unsheltered from Abusive Surveillance
6. 19 OctGartner: The Pursuit of Perfection Weakens InfoSec Effectiveness
7. 19 OctQSC17: Qualys Battles the Silos, Helps Protect Digital Transformation Efforts
8. 18 OctThe Shift from Securing our Networks to Enabling the Digital Transformation of our Enterprises
9. 18 OctBugcrowd Integration Now Available in Qualys Web Application Scanning
10. 16 OctQSC17 Focuses on Digital Transformation’s Challenges and Opportunities
11. 12 OctThe Critical Security Controls: Basic Cybersecurity Hygiene for your Organization
12. 10 OctOctober Patch Tuesday: 28 Critical Microsoft Vulnerabilities

September 2017

1. 26 SepAchieve Continuous Security and Compliance with the CIS Critical Security Controls
2. 26 SepGoogle and Mozilla are Deprecating Existing Symantec Certificates
3. 19 SepFixing HPKP with Certificate Constraints
4. 12 SepSeptember Patch Tuesday: 27 Critical Vulnerabilities from Microsoft, plus Critical Adobe Patches
5. 5 SepFixing HPKP with Pin Revocation

August 2017

1. 29 AugSANS Institute: Hackers Paint a Bullseye on Your Employees and Endpoints
2. 9 AugCountdown to GDPR: IT Policy Compliance
3. 8 AugAugust Patch Tuesday: 25 critical Microsoft vulnerabilities, 43 for Adobe
4. 7 AugCyberSecurity Report: Threat Landscape Gets More Sophisticated
5. 2 AugCountdown to GDPR: Manage Vulnerabilities

July 2017

1. 26 JulHow to Secure Public Clouds while Boosting Digital Transformation
2. 25 JulIntroducing the Qualys New Look and Positioning
3. 19 JulCountdown to GDPR: Assess Vendor Risk
4. 18 JulSecuring Public Clouds for Digital Transformation Success
5. 12 JulQ&A: Conducting Cloud-Based Vendor Risk Audits With Qualys SAQ
6. 11 JulJuly Patch Tuesday: 19 Critical Vulnerabilities from Microsoft, plus Critical Adobe Patches
7. 11 JulCountdown to GDPR: Prioritize Vulnerability Remediation

June 2017

1. 30 JunSSL Labs Grading Redesign (Preview 1)
2. 29 JunSave Time by Streamlining Vendor Risk Assessments in the Cloud
3. 28 JunCountdown to GDPR: Get 20/20 Visibility Into Your IT Assets
4. 27 JunPetya Ransomware: What You Need to Know
5. 21 JunCountdown to GDPR — Reduce your Risk
6. 19 JunVisualizing the Stack Clash Vulnerability with Dashboards
7. 19 JunThe Stack Clash
8. 13 JunMicrosoft Fixes 94 Security Issues in Massive June Update
9. 13 JunDynamic Questionnaire: Accelerate Quick and Efficient Responses with Question Gating
10. 5 JunLessons Learned from SQL Injection Fix in Joomla 3.7.0

May 2017

1. 26 MaySamba Vulnerability CVE-2017-7494
2. 24 MayDigging Into WannaCry Details: Answers to Your Burning Questions
3. 19 MayNo More Tears: WannaCry Highlights Importance of Prompt Vulnerability Detection, Remediation
4. 18 MayVisualizing WannaCry & Shadow Brokers with Dashboards
5. 18 MayBetter Trusted Scanning with Qualys-CyberArk Integration
6. 17 MayFor GDPR Readiness, You Need Visibility into Your IT Assets
7. 13 MayHow to Rapidly Identify Assets at Risk to WannaCry Ransomware and ETERNALBLUE Exploit
8. 10 MayIntel AMT Vulnerability
9. 10 MayAdobe Fixes Half a Dozen Flash Vulnerabilities and More
10. 9 MayMicrosoft Fixes Malware Protection Engine and Several 0-Day Vulnerabilities, and Deprecates SHA-1
11. 4 MayVirtual Patching: A Lifesaver for Web App Security

April 2017

1. 25 AprShadow Brokers Fix for IBM Lotus Domino Released
2. 18 AprOracle Plugs Struts and Shadow Brokers hole along with 299 Total Vulnerabilities
3. 18 AprPCI DSS v3.2 & Migrating from SSL and Early TLS v1.1
4. 15 AprThe Shadow Brokers Release Zero Day Exploit Tools
5. 12 AprApril 2017 Patch Tuesday Video Highlights
6. 11 AprMicrosoft Fixes 45 Vulnerabilities with new Security Update Guide – says goodbye to Security Bulletins
7. 11 AprAdobe Fixes Flash, PDF reader and Photoshop in April
8. 10 AprIT Asset Inventory Systems and CMDBs: A Marriage Made in InfoSec Heaven
9. 5 AprSANS 2017 Cybersecurity Trend Report Checklist
10. 5 AprSSL Labs Distrusts WoSign and StartCom certificates
11. 1 AprMicrosoft IIS 6.0 Buffer Overflow Zero Day

March 2017

1. 30 MarProtect Against Critical IIS 6.0 Buffer Overflow vulnerability (CVE-2017-7269) with Qualys WAF
2. 29 MarForrester’s DeMartine Talks DevOps, IoT, Flawed Tools and Other AppSec Hot Topics
3. 27 MarREST API Testing with Qualys Web Application Scanning
4. 22 MarSANS Study: To Take On New InfoSec Challenges, First Get the Basics Right
5. 15 MarPath Fuzzing Challenges
6. 14 MarA Comprehensive Approach to Detect and Block the Struts Critical Vulnerability CVE-2017-5638
7. 14 MarMassive Microsoft Patch Tuesday Security Update for March
8. 13 MarCAA Mandated by CA/Browser Forum
9. 10 MarExamining the Current State of Database Security
10. 9 MarQualys WAF 2.0 Protects Against Critical Apache Struts Jakarta Vulnerability ( CVE-2017-5638 )
11. 6 MarSmart DOM XSS Detection in Qualys WAS

February 2017

1. 28 FebMaking Asset Inventory Actionable With a Cloud-Based System
2. 23 FebTicketbleed Detection Added to SSL Labs
3. 21 FebRSA Conference 2017 Highlights: Qualys Cloud Platform Expansions
4. 21 FebFor Complete Visibility, Dive Deep into IT Asset Discovery
5. 16 FebSimplifying Web Application Security with Qualys Web Application Firewall 2.0
6. 14 FebMicrosoft February Patch Tuesday Cliffhanger and Adobe Fix for Flash
7. 13 FebIoT Security: A Hairy Issue That’s Simple to Solve
8. 10 FebAutomated Asset Inventory: It’s a Visibility Thing
9. 7 FebChecklist: Qualys Top 10 Tips for a Secure & Compliant 2017

January 2017

1. 30 JanThe World’s Gone Web App Crazy: Tips to Cut Risk from Hacks, Rogue Staff and Faulty Code
2. 26 JanCross-Site Request Forgery: What Happened to the Sleeping Giant?
3. 24 JanSlash Vendor Risk and Sharpen Compliance with Policies, Standards and Regulations
4. 18 JanSSL Labs Grading Changes January 2017
5. 17 JanOracle January 2017 CPU Fixes 270 Vulnerabilities
6. 17 JanOverwhelmed by Security Vulnerabilities? Here’s How to Prioritize
7. 13 JanWhat’s New SSL Labs 1.26.5 (13 Jan 2017)
8. 12 JanFive Things to Know About Qualys’ FedRAMP Authorization
9. 10 JanJanuary 2017 Patch Tuesday Video Highlights
10. 10 JanAdobe Security Update for January: Flash and Acrobat Fixed
11. 10 JanMicrosoft Starts 2017 with Record Low Security Updates
12. 10 JanHackers Are Having a Field Day with Stolen Credentials
13. 5 JanOffice Depot Extends the Value of Cloud-based Security via Qualys APIs

2016 105

December 2016

1. 14 Dec2016 Year-End Summary for Adobe and Another 0-day Fix in December
2. 13 DecMicrosoft Ends 2016 with 15% Increase in Bulletin Volume
3. 12 DecSSL: Deceptively Simple, Yet Hard to Implement
4. 5 DecSANS Survey Report: Organizations’ Continuous Monitoring Programs Must Keep Maturing to Yield Full Benefits

November 2016

1. 29 NovPer-Protocol Cipher Suite Detection in SSL Labs
2. 28 NovWeb and Mobile Apps Often Hide Complex Maze of Insecure Connections
3. 22 NovAs Web Apps Become Top Data Breach Vector, Protecting Them is Critical
4. 22 NovSSL Labs Now Showing Multiple Certificate Chains
5. 21 NovBAI Security Eyes Threat Prioritization as Competitive Differentiator
6. 16 NovAnnouncing SSL Labs Grading Changes for 2017
7. 8 NovNovember 2016 Patch Tuesday Video Highlights
8. 8 NovAdobe Releases Flash Player and Adobe Connect Vulnerability Fix
9. 8 NovPatch Tuesday: Microsoft Patches Actively Exploited Kernel and OpenType Font, Three Previously Disclosed Browser Issues and SQL Server
10. 1 NovWindows Kernel 0-day Actively Exploited

October 2016

1. 27 OctA CSO’s View of Vulnerability Management: “Essential and Core” to Enterprise Security
2. 26 OctEmergency Flash Player 0-day update released by Adobe
3. 25 OctVideo: Pulitzer Prize Winner Kaplan Talks about Cyber War in our Unsafe Internet
4. 19 OctAgility and Flexibility Needed To Manage Risk Throughout Vendor Relationship Lifecycle
5. 19 OctOracle October 2016 Critical Patch Update
6. 14 OctMy Life as a Chief Security Officer
7. 14 OctSecurity Is Tough, but Infosec Pros Can Find Joy in the Work
8. 13 OctInfosec Teams Need More Collaboration and Automation to Defend Their Organizations and Help Them Succeed
9. 13 OctThe Big Year: 2016 Product Advances Highlighted at QSC
10. 13 OctAs Traditional Network Perimeters Dissolve, Qualys Cloud Platform Provides Global Security and Compliance Visibility
11. 13 OctQualys CEO Philippe Courtot Kicks Off QSC16 with Call for Organizations to Secure Their Digital Transformations
12. 12 OctLasso In Employee Training, Vendor Regulatory Compliance with Automated Risk Assessments
13. 11 OctOctober Patch Tuesday 2016 Video Highlights
14. 11 OctAdobe October Security Advisories
15. 11 OctMicrosoft October B week Patch Tuesday: Five 0-days Fixed
16. 10 OctNo Security without Visibility: QSC16 to Focus on Helping Enterprises Regain Clarity into Their IT Environments
17. 5 OctTo Gauge Risk from Third Parties and Employees, Scalability and Automation Are Essential
18. 3 OctTop 5 New Settings in Security Compliance Manager for Windows 10

September 2016

1. 28 SepAssessing Risk from Vendors and Other Third Parties Is Key to Business Success
2. 26 SepProblem with OpenSSL Patches of September 22, 2016
3. 26 SepPrioritizing Remediation: Visualize and Share the Data, Apply It to Your Organization
4. 20 SepQualys Beefs Up Cloud Tool for Security Consultants
5. 19 SepPrioritizing Remediation: Plug into the Firehose of Vulnerability Disclosures and Correlate
6. 14 SepPatch Tuesday September 2016 Video Highlights
7. 13 SepAdobe September 2016 Security Update
8. 13 SepLarge Microsoft Patch Tuesday Update for September 2016
9. 12 SepEnd the Nightmare of Vulnerability Disclosure Overload: Keep Calm and Prioritize
10. 6 SepIs HTTP Public Key Pinning Dead?

August 2016

1. 31 AugThwarting SQL Injection: Defense in Depth
2. 31 AugImproved Suite Detection in the Next SSL Labs Release
3. 29 AugHow Policy Compliance Plays a Mitigation Role to Protect Your System
4. 26 AugMystery Magic Bytes From The Equation Leak
5. 18 AugEquation Group Hack: Cisco ASA and FortiGate Vulnerabilities
6. 9 AugPatch Tuesday August 2016 video highlights
7. 9 AugMicrosoft Patch Tuesday August 2016
8. 4 AugWAS 4.9 Introduces Global Exclusion Lists and Scan Comparison Feature
9. 3 AugTesting AJAX Applications with JSON Input for Vulnerabilities Using Qualys WAS
10. 2 AugTLS Version Intolerance in SSL Pulse

July 2016

1. 21 JulHandling Cross-Site Scripting As Attacks Get More Sophisticated
2. 19 JulOracle July 2016 Critical Patch Update
3. 18 JulCGI application vulnerability httpoxy for PHP, Go, Python and others
4. 12 JulPatch Tuesday July 2016 video highlights
5. 12 JulPatch Tuesday July 2016: Microsoft and Adobe
6. 11 JulAre Your Vendors, Partners and Other Business Allies Putting Your Organization at Risk?
7. 11 JulQualys Supports New Cisco Threat-Centric NAC
8. 7 JulNew Qualys App for Splunk Enterprise Adds Real-time Dashboard and Analytics for Web Application Scanning

June 2016

1. 27 JunNew Release of SSL/TLS Deployment Best Practices
2. 23 JunSo Many Vulnerabilities, So Little Time: Threat Protection Identifies the Assets You Must Patch Now
3. 15 JunMore on Microsoft and Adobe Patches June 2016
4. 14 JunPatch Tuesday June 2016

May 2016

1. 25 MayWAS 4.8 Features Vulnerability Retest Function and Finding Severity Customization
2. 18 MayHow to Avoid Account Lockouts When Scanning Web Applications
3. 16 MaySSL Labs in 2016 and Beyond
4. 12 MayUpdate: Patch Tuesday May 2016
5. 11 MayProtect Your Systems Against SAMSAM and Prove the Value of Cyber Security to Your Organization
6. 10 MayMore on May 2016 Microsoft and Adobe Patches
7. 10 MayOpenSSL CVE-2016-2107 Grading Update

April 2016

1. 25 AprHow Ignoring Low-Level Security Risks Can Open the Door to Major Attacks
2. 22 AprOracle Critical Patch Update April 2016
3. 18 AprWAS 4.7 Adds Enhanced Support for Redundant Link Checks
4. 12 AprMore on April 2016 Microsoft and Adobe Patches including BADLOCK
5. 12 AprPatch Tuesday April 2016
6. 6 AprUpdate: Adobe to release patch for 0-day in Flash Player
7. 5 AprWAS 4.6 Adds Option to Remove Unused Assets from Subscription when Deprovisioning
8. 4 AprQualys WAS 4.6 Adds SmartScan

March 2016

1. 30 MarQualys Vulnerability Management Notification: Reference Data Formatting Change
2. 30 MarQualys Cloud Platform Updates Now Available
3. 28 MarThe Importance of a Proper HTTP Strict Transport Security Implementation on Your Web Server
4. 24 MarOracle out-of-band release for Java 0-day
5. 11 MarPatch Tuesday Update: Adobe Flash 0-day APSB16-08
6. 9 MarMore on March 2016 Microsoft and Adobe Patches
7. 8 MarPatch Tuesday March 2016
8. 4 MarDROWN Grading Update
9. 4 MarSSL Labs DROWN Test Implementation Details
10. 4 MarDROWN at Qualys
11. 1 MarDROWN Abuses SSL v2 to Attack TLS

February 2016

1. 29 FebNew Certified Qualys App for ServiceNow Configuration Management Provides Real Time Visibility of Your Enterprise’s Global IT Infrastructure
2. 22 FebNew critical glibc vulnerability
3. 12 FebCritical Cisco VPN Flaw
4. 10 FebMore on February 2016 Microsoft and Adobe Patches
5. 9 FebPatch Tuesday February 2016
6. 8 FebNewest Java Addresses Binary Planting Vulnerability

January 2016

1. 29 JanWhat is the Apex Predator Doing to Get Your Information?
2. 20 JanOracle Critical Patch Update January 2016
3. 15 JanHunting For Vulnerable Functions In Microsoft Silverlight MS16-006
4. 12 JanMore on January 2016 Microsoft and Adobe Patches with information on retired Internet Explorer
5. 12 JanUpdate: Patch Tuesday January 2016
6. 11 JanQualys WAS 4.5 New Features
7. 11 JanQualys MD 2.8 New Features
8. 11 JanQualys WAF 2.0 New Feature
9. 7 JanHow Open Redirection Threatens Your Web Applications

2015 102

December 2015

1. 28 DecUpdate: Last Adobe 0-day Patched for the Year
2. 15 DecQualys Cloud Agent Client 1.3 for Windows Now Available
3. 9 Dec58% increase in Microsoft Security Bulletins in 2015
4. 8 DecPatch Tuesday December 2015

November 2015

1. 25 NoveDellRoot SSL Certificate Leaves Dell Endpoints At Risk to MITM Attacks
2. 23 NovQualys Cloud Agent Client 1.2 for Windows Now Available
3. 16 NovQualys WAS 4.4 New Features
4. 11 NovMore on Microsoft and Adobe Patch Tuesday: November 2015
5. 10 NovPatch Tuesday November 2015
6. 6 NovVersion 1.20.28 now running in production

October 2015

1. 28 OctProtect Against the Joomla SQL Injection Vulnerability
2. 22 OctProtection from Unrestricted File Upload Vulnerability
3. 21 OctOracle Critical Patch Update October 2015
4. 20 OctClickjacking: A Common Implementation Mistake Can Put Your Websites in Danger
5. 19 OctQualys MD 2.7 New Features
6. 19 OctQualys WAS 4.3 New Features
7. 19 OctQualys Cloud Suite 8.6 New Features
8. 16 OctAdobe Addresses 0-Day Vulnerability in Flash
9. 13 OctMore on Patch Tuesday October 2015
10. 13 OctPatch Tuesday October 2015
11. 9 OctImplementing the TLS Maturity Model
12. 9 OctSecurity is Breaking Down… Why Now, and What Can We Do About It? A conversation with Tyler Shields, Principal Analyst at Forrester
13. 8 OctPhilippe Courtot at Qualys Security Conference: Achieving Security When Everything is Connected to Everything
14. 8 OctWelcome to Qualys Security Conference 2015
15. 7 OctNew Qualys App for Splunk Enterprise Delivers Real-time Dashboard and Analytics for Security and Compliance Data
16. 6 OctQualys Named to Cloud Top 500

September 2015

1. 21 SepSeptember Patch Adobe Flash
2. 16 SepBlind Elephant Web Application Fingerprinter
3. 11 SepNew Penalty for RC4-Only Servers in October 2015
4. 8 SepMicrosoft Patch Tuesday September 2015
5. 8 SepPatch Tuesday September 2015

August 2015

1. 28 AugPebble Smart Watch Developer Portal Vulnerability
2. 24 AugNo Change to RC4 Grading in September
3. 18 AugMS15-093 – OOB fix for Internet Explorer
4. 12 AugAdobe, Microsoft and Firefox Updates – August 2015
5. 11 AugPatch Tuesday August 2015

July 2015

1. 22 JulUpdate: Multiple 0-days in Internet Explorer
2. 20 JulForeScout Integrates with Qualys
3. 14 JulAdobe, Microsoft and Oracle Patch Tuesday – July 2015
4. 14 JulQualys Policy Compliance Notification: Changes Required for Oracle Assessments
5. 14 JulUpdate2: Patch Tuesday July 2015
6. 8 JulOpenSSL Vulnerability
7. 7 JulUpdate5 – HackingTeam 0-day for Flash

June 2015

1. 26 JunQualys MD 2.6.4 New Features
2. 26 JunQualys WAS 4.2 New Features
3. 24 JunAutomatic Protection from Vulnerabilities in Concrete5
4. 23 JunUpdate – New 0-day for Adobe Flash
5. 22 JunTop 4 New Settings in Security Compliance Manager for Windows 8.1
6. 17 JunDevice Vulnerabilities Fixed: Garrettcom Magnum Series
7. 9 JunMicrosoft and Adobe Patch Tuesday – June 2015
8. 9 JunPatch Tuesday June 2015 – Update
9. 8 JunIntroducing TLS Maturity Model

May 2015

1. 22 MaySSL Labs: Increased Penalty When TLS 1.2 Is Not Supported
2. 21 MaySSL Labs 1.17: RC4, Obsolete Crypto, and Logjam
3. 14 MayMagento RCE And Application Security Templates
4. 13 MayVenom Hypervisor Vulnerability
5. 13 MayBSI Top 10 in a Nutshell: Patch These Software Packages
6. 12 MayMicrosoft Patch Tuesday – May 2015
7. 12 MayPatch Tuesday May 2015
8. 11 MayCall for Papers: Qualys Security Conference 2015
9. 6 MayWordPress: When Half of all Websites are Vulnerable
10. 4 MayWhat You Need to Know About the Upcoming Leap Second
11. 1 MayUS-CERT: Top 30 Vulnerabilities

April 2015

1. 28 AprWhat’s New in SSL Labs 1.16.x
2. 23 AprSSL Labs RC4 Deprecation Plan
3. 21 AprDeploy Virtual Patches on Qualys WAF Based on Detected Web App Vulnerabilities
4. 21 AprContinuous Monitoring for Critical Internal Assets
5. 21 AprIntroducing the New Groundbreaking Qualys Cloud Agent Platform
6. 20 AprMS15-034 Analysis And Remote Detection
7. 16 AprSecurity Issues Discovered (And Fixed) in SearchBlox
8. 16 AprQualys Continuous Monitoring 1.7 New Features
9. 15 AprQualys PCI Compliance Now Supports PCI DSS 3.1
10. 15 AprTop 5 Client Side Patch Tuesday Vulnerabilities from Microsoft, Oracle and Adobe – April 2015
11. 15 AprTop 5 Server Side Patch Tuesday Vulnerabilities from Microsoft, Oracle and Adobe – April 2015
12. 14 AprPatch Tuesday April 2015
13. 14 AprQualys WAS 4.1 New Features
14. 6 AprNew Detection for PCI DSS 3.1

March 2015

1. 30 MarQualys SCAP Auditor 1.2 Certification Completed
2. 17 MarGHOST Vulnerability Exploit via Remote Code Execution
3. 10 MarMicrosoft Patch Tuesday March 2015
4. 10 MarPatch Tuesday March 2015
5. 9 MarCall for Customer Presenters in Qualys Booth at RSA Conference 2015
6. 6 MarAddressing CVE-2015-0204 FREAK with Qualys VM
7. 3 MarOpenSSL Cookbook 2nd Edition Released
8. 3 MarTop 10 Vulnerabilities – February 2015
9. 3 MarQualys Policy Compliance Notification: Changes Required for Oracle Assessments

February 2015

1. 25 FebQualys and BMC Join Forces to Close the SecOps Gap
2. 25 FebHow to Check for Unprotected MongoDB Databases
3. 19 FebHow a Missing Security Check Enabled a CSRF Attack
4. 13 FebQualys Named a Finalist for Seven 2015 SC Awards
5. 10 FebPatch Tuesday February 2015
6. 2 FebFebruary 0-day for Adobe Flash – Update 2

January 2015

1. 27 JanThe GHOST Vulnerability
2. 26 JanProtect Your Applications from Hacker Research
3. 23 JanMultiple Vulnerabilities Detected in Schneider FactoryCast HMI Gateway
4. 22 JanSSL Labs APIs Now Available In Beta
5. 21 JanNew 0-day vulnerability in Adobe Flash – Update 5
6. 20 JanPatch Tuesday January 2015, 2nd Edition
7. 15 JanQualys Policy Compliance Notification: Technology Support Changes for Windows 2012 R2/Windows 8.1
8. 14 JanDo Your Anti-CSRF Tokens Really Protect Your Web Apps from CSRF Attacks?
9. 13 JanMicrosoft and Adobe Patch Tuesday January 2015
10. 13 JanPatch Tuesday January 2015

2014 127

December 2014

1. 9 DecMicrosoft, Adobe, POODLE on Patch Tuesday December 2014
2. 9 DecDecember 2014 Patch Tuesday
3. 8 DecSSL Labs End of Year 2014 Updates
4. 8 DecPoodle Bites TLS
5. 5 DecDecember 2014 Patch Tuesday Preview

November 2014

1. 26 NovNovember Patch Tuesday – Part 3
2. 26 NovQualys WAS 4.0 New Features
3. 18 NovNovember Patch Tuesday – Part 2
4. 12 NovMicrosoft and Adobe Patch Tuesday November 2014
5. 11 NovNovember 2014 Patch Tuesday
6. 6 NovDrupal SQL Critical Vulnerability and How Qualys Can Help
7. 6 NovNovember 2014 Patch Tuesday Preview

October 2014

1. 22 Oct0-day in Microsoft OLE Packager/PowerPoint
2. 17 OctEnterprise IoT Risk Is Getting Real
3. 17 OctSSLv3 and POODLE attacks – Update
4. 16 OctQualys CEO Courtot in QSC Keynote: Security Now a Challenge of Scale, Accuracy, Speed and Insight
5. 16 OctQSC Keynote Preview: Inflection, Security’s Next 10 Years
6. 15 OctSSL 3 is dead, killed by the POODLE attack
7. 15 OctWeb Application Security: Q&A with Will Bechtel
8. 14 OctMicrosoft, Oracle and Adobe Patch Tuesday October 2014
9. 14 OctOracle CPU October 2014
10. 14 OctQSC Panel Preview: Internet of Things: Assessing the Real Risk
11. 14 OctOctober 2014 Patch Tuesday
12. 9 OctOctober 2014 Patch Tuesday Preview
13. 9 OctIdentify Threats in Frameworks that your Application Relies on with Qualys Web Application Scanning
14. 9 OctCustom Option Profile To Detect Bash Shellshock
15. 3 OctCheck for Shellshock using Qualys FreeScan
16. 2 OctUsing Qualys WAS Scan to Detect ShellShock Vulnerability

September 2014

1. 30 SepFirst Look: The New Version of Windows, Code-Named Threshold
2. 29 SepGet BASH ShellShock Alerts Using Qualys Continuous Monitoring
3. 26 SepQualys QID 13038: Remote Detection for BASH ShellShock
4. 25 SepShellshock: Is Your Webserver Under Attack?
5. 24 SepBash Shellshock Command Injection Vulnerabilities
6. 24 SepBASH Shellshock vulnerability – Update5
7. 18 SepQualys Adds Support for PCI DSS 3.0 in Qualys Policy Compliance
8. 11 SepXSS Vulnerability Shows How Security Issues Can Creep into Popular Software
9. 10 SepQualys WAS 3.6 New Features
10. 9 SepMore on Patch Tuesday September 2014
11. 9 SepSeptember 2014 Patch Tuesday
12. 9 SepSHA1 Deprecation: What You Need to Know
13. 4 SepSeptember 2014 Patch Tuesday Preview
14. 3 SepBackoff Malware: What You Should Know
15. 2 SepMy New Book: Bulletproof SSL and TLS

August 2014

1. 20 AugBlack Hat USA 2014: Security Risks of the Internet of Things
2. 12 AugMore on Patch Tuesday August 2014
3. 12 AugPatch Tuesday August 2014 – Update
4. 7 AugAugust 2014 Patch Tuesday Preview

July 2014

1. 30 JulInterview: Jeffrey Leggett, author of “setup_scanner”
2. 29 JulQualys Continuous Monitoring API Update
3. 29 JulQualys Continuous Monitoring 1.4 New Features
4. 24 JulHow ZeroCMS Could Have Avoided Cross-Site Scripting Vulnerability CVE-2014-4710
5. 23 JulSync Your VM Data Fast
6. 21 JulInterview: Mark Alvarez, author of “Managing Gazillion Vulnerabilities”
7. 15 JulOracle Critical Patch Update July 2014
8. 15 JulInternet Explorer Half-life 2013
9. 15 JulQualys WAS 3.5 New Features
10. 14 JulInterview: Michael Calvi, author of “Multiple Scanner Appliance Selector”
11. 11 JulOracle Critical Patch Update July 2014
12. 8 JulMore on Patch Tuesday July 2014
13. 8 JulPatch Tuesday July 2014
14. 3 JulJuly 2014 Patch Tuesday Preview

June 2014

1. 26 JunQualysGuard 8.1 New Features
2. 17 JunAdditional June Security Advisories by Microsoft
3. 17 JunSSL Labs: New Grades for Trust (T) and Mismatch (M) Issues
4. 13 JunSSL Pulse: 49% Vulnerable to CVE-2014-0224, 14% Exploitable
5. 10 JunMore on Patch Tuesday June 2014
6. 10 JunPatch Tuesday June 2014
7. 5 JunJune 2014 Patch Tuesday Preview and New OpenSSL MITM Issue – Update
8. 3 JunQualys WAS 3.4 New Features
9. 3 JunNew Alert Filters in Qualys Continuous Monitoring
10. 2 JunGartner Security & Risk Management Summit

May 2014

1. 22 MayNew Internet Explorer 8 0-day by ZDI
2. 14 MayWelcome to the New and Improved Qualys Community
3. 13 MayMore on Patch Tuesday May 2014
4. 13 MayPatch Tuesday May 2014
5. 8 MayPre Patch Tuesday May 2014
6. 1 MayNew Internet Explorer 0-day – Update2

April 2014

1. 28 AprAdobe out-of-band patch for Flash vulnerability
2. 22 AprApple Security Update for Mac OS X and iOS
3. 21 AprHeartbleed Post-Mortem Webinar
4. 16 AprMore on Patch Tuesday April 2014
5. 16 AprOracle April CPU 2014: Java Takes the Lion’s Share
6. 15 AprHeartbleed Remediation Report Now Available in QualysGuard
7. 9 AprHeartbleed Detection Update
8. 8 AprSSL Labs Test for the Heartbleed Attack
9. 8 AprPatch Tuesday April 2014
10. 7 AprComparing Windows XP Usage by Country, Industry
11. 4 AprNew 0-day out for Microsoft Word – Update2
12. 3 AprApril 2014 Patch Tuesday Preview
13. 2 AprWindows XP Usage Lower Across Industries
14. 2 AprTop 4 Controls for a Secure PC – Part 2

March 2014

1. 25 MarTop 4 Controls for a Secure PC – Part 1
2. 19 MarHTTPS Mixed Content: Still the Easiest Way to Break SSL
3. 14 MarQualysGuard WAS 3.3 New Features
4. 13 MarCanSecWest – PWN2OWN overview – Update
5. 12 MarMore on Patch Tuesday March 2014
6. 11 MarMarch 2014 Patch Tuesday
7. 6 MarMarch 2014 Patch Tuesday Preview
8. 3 MarQualys at RSA Conference 2014

February 2014

1. 28 FebQualys Wins Best Security Company at SC Magazine Awards
2. 27 FebMediaWiki DjVu and PDF File Upload Remote Code Execution Vulnerability (CVE-2014-1610)
3. 27 FebRSA 2014: Automating the 20 Critical Security Controls
4. 26 FebWeb Application Firewall Defends Your Web Apps
5. 26 FebQualys Launches New Free Top 4 Service
6. 25 FebThe New Continuous Monitoring Service and the GA of QualysGuard WAF
7. 24 FebRisk I/O Partners with Qualys to Monitor Perimeter Security Risks
8. 24 FebSSL Labs: Testing for Apple’s TLS Authentication Bug
9. 20 FebAdobe Out-Of-Band Release for Flash
10. 19 FebAlgoSec Partners with Qualys
11. 14 FebNew Internet Explorer 0-day out in the Wild – Update
12. 11 FebMore on Patch Tuesday February 2014
13. 11 FebFebruary 2014 Patch Tuesday
14. 6 FebFebruary 2014 Patch Tuesday Preview – Update
15. 4 FebPathDefender to Deliver QualysGuard Solutions as Part of McAfee Secure Services
16. 4 FebAdobe Flash Update Released to Patch Critical Vulnerability CVE 2014 0497
17. 3 FebAccuvant Partners with Qualys for Continuous Vulnerability Management Solution

January 2014

1. 30 JanQualysGuard 7.13 New Features
2. 28 JanQualysGuard WAS 3.2 New Features
3. 21 JanLumension Partners with Qualys
4. 21 JanHow to detect NTP Amplification DoS Attacks
5. 21 JanSSL Labs: Stricter Security Requirements for 2014
6. 16 JanDetect NTP Amplification Flaws
7. 15 JanQualys Receives Frost & Sullivan Global Vulnerability Management Market Leadership Award
8. 14 JanMore on Patch Tuesday January 2014
9. 14 JanJanuary 2014 Patch Tuesday
10. 9 JanJanuary 2014 Patch Tuesday Preview – Update
11. 6 JanTop 13 of ’13: Qualys Community