Say Hello to Agent Insta: Scanless Detection at AI Speed | Qualys
Summary: Qualys announced Agent Insta, a backend intelligence agent that powers InstaScan to detect vulnerabilities from existing inventory and telemetry within minutes of disclosure rather than waiting for scheduled scans, with availability in the Qualys ETM platform in mid-October 2026. The post cites a record 48,177 CVEs published in 2025, a median disclosure-to-exploit time that fell from 56 days in 2024 to 23 days in 2025, and AI-assisted attackers weaponizing advisories in as little as 4 to 12 hours, while it says most programs still deliver visibility 24 to 36 hours after disclosure.
What's compelling: If attackers now weaponize advisories in 4 to 12 hours and CERT-IN and CISA patch windows can be as short as 12 to 24 hours, a 24-to-36-hour detection lag means the scan confirms exposure after the mandated window has already closed.
Read the original at Qualys Blog ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026