Qualys Vulnerability Scanning for AWS Lambda | Serverless Security Qualys Vulnerability Scanning for AWS Lambda | Serverless Security | Qualys

Summary: Qualys has added automated vulnerability scanning for AWS Lambda that discovers functions and scans them as they are created or updated, using event-driven scanning with no manual intervention. The capability supports same-account and cross-account AWS configurations across multiple regions and deploys via CloudFormation templates, extending Qualys serverless coverage beyond discovery and CSPM posture checks to the packages and dependencies inside function code.
What you should know: Qualys notes each Lambda function requires its own IAM role, so permissions are managed individually across potentially hundreds of functions, and a vulnerable dependency in a function sitting between sensitive data, APIs, and model endpoints can expose risk across an entire AI pipeline rather than just that function.

Read the original at Qualys Blog ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026