Qualys Integrates with Shodan to Help Map the External Attack Surface | Qualys

Summary: Qualys CyberSecurity Asset Management now natively integrates with Shodan, letting teams pull internet-visible assets matching filters such as organization name, domain, or certificate name and compare them against the existing Qualys inventory. CSAM tags the Shodan results and flags assets Qualys does not currently manage, which can then be brought under management through network scans or the Qualys Cloud Agent.
Key Takeaway: The assets this surfaces are the ones organizations did not know they had - those managed by subsidiaries, acquisitions, or partners, abandoned IP addresses, and Shadow IT - and Shodan is already used by attackers to find exactly those low-hanging entry points.

Read the original at Qualys Blog ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026