Qualys Announces Tru Risk Eliminate to Augment Patching | Qualys
Summary: Qualys announced TruRisk Eliminate, an expansion of its Patch Management product that maps vulnerabilities to actions its agent can execute when no patch exists or a patch cannot be deployed, including mitigation and network isolation of assets. The company said it has deployed more than 100M patches since January 2024, and cited anonymized data showing CVE-2024-1086, a Linux kernel use-after-free flaw in CISA KEV, was detected more than 1.5M times with only 20% of instances remediated and an average 28 days to remediate.
What's compelling: Only 20% of detected CVE-2024-1086 instances were remediated, at an average of 28 days each, for a flaw already on CISA's Known Exploited Vulnerabilities list - the gap between detection and action is where exploitation happens.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2024-1086
- Related
- CVE-2024-1086: Linux Kernel Use-After-Free Vulnerability Known Exploited Vulnerabilities · May 30, 2024Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026