Covers: Vulnerabilities & PatchingGovernance, Risk & ComplianceCloud SecurityData BreachesAI SecurityThreat Actors & Nation-StateSupply Chain & AppSecDetection & ResponseZero-Days & ExploitsEndpoint & Network Security
Brazil's General Personal Data Protection Law (LGPD) took effect on September 18, 2020, with enforcement by the National Data Protection Authority (ANPD) beginning in August 2021. The federal law, modeled on the EU's GDPR, unifies forty pre-existing laws...
Qualys is overhauling its platform login page at the end of May 2024 with Cloud Platform version 10.27, adding sections for upcoming events, latest announcements, real-time platform status, contact support, the Qualys Blog, and the Qualys Community. The...
Qualys announced the integration of Software Composition Analysis into its VMDR platform, using the Qualys Agent to scan open-source and commercial components across languages including Java, Go, .NET, Python, Node JS, Rust, Ruby, and PHP. The post states...
The UK's National Cyber Security Centre published vulnerability management guidance with five principles and remediation timelines of 5 days for internet-facing services, 7 days for operating systems and applications, and 14 days for internal or air-gapped...
Qualys reported on March 25th, 2024 that CVE-2024-2879, an SQL injection vulnerability rated 7.5 out of 10.0 on the CVSS scale, affects LayerSlider plugin versions 7.9.11 through 7.10.0, which have more than 10 lakh active installations. The flaw stems...
Qualys announced it is signing CISA's Secure by Design Pledge, which lists seven goals for building security into products at the design stage and following through with timely patches over the lifecycle. The post cites the Colonial Pipeline breach, which...
Qualys TotalCloud researchers describe an unauthenticated access vulnerability in Google Cloud Dataproc in which the YARN ResourceManager on port 8088 and the HDFS NameNode on port 9870 require no authentication and serve all IP addresses. An attacker who...
Qualys researchers analyzed encryption-related controls across AWS, Azure, and GCP and reported failure rates including 90% for MySQL Server encryption controls in Azure, 98% for compute engine and storage services in GCP, and 71% for AWS Lambda. The post...
Qualys documented an AWS access key theft that began with a security alert on an unfamiliar Kali Linux user agent, aws-cli/1.22.34 Python/3.9.11 Linux/5.15.0-kali3-amd64 botocore/1.27.84, and led investigators to three denied API calls from the same key...
Qualys announced the Qualys Containerized Scanner Appliance (QCSA), a network scanner packaged as a Docker container that runs with all inbound ports closed and allows only HTTPS outbound connections. QCSA scans anything with an IP address, receives...
OWASP, founded in 2001 as an online community for software security, now publishes free, openly available documentation, tools, and standards, including the OWASP Top 10 list of the ten most critical web application security risks, updated every few years....
Qualys' Threat Research Unit found CVE-2024-6387, a signal handler race condition in OpenSSH's sshd that allows unauthenticated remote code execution as root on glibc-based Linux systems in the default configuration. Qualys identified over 14 million...
Qualys announced TruRisk Eliminate, an expansion of its Patch Management product that maps vulnerabilities to actions its agent can execute when no patch exists or a patch cannot be deployed, including mitigation and network isolation of assets. The...
Qualys announced Qualys TotalAI, an addition to its Enterprise TruRisk Platform designed to secure AI and LLM applications, to be showcased at Black Hat 2024 and scheduled for availability in Q4 2024. The announcement cites risks including undiscovered LLM...
Microsoft's August 2024 Patch Tuesday addressed 102 vulnerabilities, including nine critical and 77 important, among them six actively exploited flaws and three publicly disclosed zero-days (CVE-2024-21302, CVE-2024-38202, CVE-2024-38199), with a tenth...
Qualys introduced a capability to scan Microsoft Azure Linux instances directly using the Qualys Cloud Agent, aimed at managing risk at both the host OS and container levels in Azure Kubernetes Service (AKS). The offering combines host scanning, Qualys...
Black Basta is a ransomware-as-a-service group first spotted in April 2022 that has affected more than 500 organizations globally across North America, Europe, and Australia, using double extortion to demand payment for both decryption and non-release of...
Qualys says it is one of the first solutions to directly scan Google Cloud's Container-Optimized OS instances using the Qualys Cloud Agent, the operating system that forms the bedrock of Google Kubernetes Engine. The offering combines host scanning via the...
Forrester's Q3 2024 Wave on Attack Surface Management Solutions named Qualys CyberSecurity Asset Management a Strong Performer in its debut in the report, tying for the third-highest ranking in the current offering category. The report, authored by senior...
Akira, a ransomware-as-a-service operation active since March 2023, has infected over 196 organizations according to its leak site, targeting North America, the UK, and Australia, and exfiltrating data before encryption for double extortion. Qualys's TRU...
Qualys announced Enterprise TruRisk Management at its Security Conference, a platform that consolidates Qualys security data with third-party risk information from partners including Microsoft, Wiz, and Okta across cloud, on-premises, and hybrid...
Qualys is introducing TruRisk 2.0 alongside its Enterprise TruRisk Management (ETM) module, launching in October 2024, which shifts vulnerability tracking from the Qualys Detection ID (QID) system to the CVE framework so risk from third-party tools can be...
Qualys updated its Core and VMDR apps for ServiceNow so that tasks are now created directly in the Incident Management table by default rather than a custom table, with a new 'Source' field set to "Qualys" and a custom "Qualys VMDR" view for the Incident...
Qualys announced three new features in its TotalCloud CNAPP at QSC Americas and Mumbai 2024: TotalCloud Attack Path, TruRisk Insights, and Cloud Workflow Automation with drag-and-drop QFlow Playbooks. TruRisk Insights correlates misconfiguration,...
Qualys introduced QScanner, a standalone command-line utility that scans container images for vulnerabilities in OS and software packages, performs Software Composition Analysis across Ruby, Rust, PHP, Java, Go, Python, .NET, and Node.js, and detects...
Microsoft's November 2024 Patch Tuesday addressed 92 vulnerabilities, including four critical and 83 important severity issues, plus one Defense in Depth update for SharePoint Server. Four zero-day vulnerabilities were fixed, two of which - CVE-2024-49039...
The Qualys Threat Research Unit identified five Local Privilege Escalation vulnerabilities in needrestart, a component installed by default on Ubuntu Server since version 21.04, tracked as CVE-2024-48990, CVE-2024-48991, CVE-2024-48992, CVE-2024-10224, and...
The OWASP Top 10 for LLM Applications 2025 keeps Prompt Injection in first place, with Sensitive Information Disclosure and Supply Chain rising to second and third from their 2023 positions. Training Data Poisoning, expanded to Data and Model Poisoning,...
Qualys launched TotalAI, an LLM scanner built from a March 2024 proof of concept that compiled roughly 1,000 questions across 16+ risk categories and later trimmed the set to about 600 to map against MITRE ATLAS and the OWASP LLM Top 10. The scanner was...
Qualys describes a hypothetical cloud extortion attack in which automated tools scan for publicly exposed .env files containing cloud access keys, database credentials, and API tokens, then use them to escalate privileges and exfiltrate data. The post...