Mitigating the Risk of Zero-Day Vulnerabilities by using Compensating Controls | Qualys
Summary: Qualys describes its Policy Compliance product as a way to detect and mitigate zero-day vulnerabilities through compensating controls, since patches can take days, weeks, or months to arrive. The post cites roughly 58 zero-day vulnerabilities reported in 2021, more than double the prior year, and 18 identified by Google's project as of June 2022, and notes that one in four detected zero-day exploits was already publicly disclosed.
Why it matters: The source states that one out of every four zero-day exploits detected could have been avoided with more thorough investigation and patching, and that the gap between disclosure and exploitation keeps shrinking while fix time does not.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026