Qualys - Security Ticks

How board members think about cyber risk and what CISOs should tell them

boardroom, CISO, cyber risk, cybersecurity, Don't miss, News, Qualys, security metrics, strategy, Video / SecurityTicks

How board members think about cyber risk and what CISOs should tell them 2025-11-26 at 07:11 By Help Net Security In this Help Net Security video, Jonathan Trull, EVP & CISO at Qualys, discusses which cybersecurity metrics matter most to a board of directors. Drawing on more than two decades in the field, he explains […]

React to this headline:

How board members think about cyber risk and what CISOs should tell them Read More »

ScamAgent shows how AI could power the next wave of scam calls

Artificial Intelligence, CISO, cybercrime, Don't miss, Features, Hot stuff, News, Qualys, research, scams / SecurityTicks

ScamAgent shows how AI could power the next wave of scam calls 2025-08-28 at 09:03 By Mirko Zorz Scam calls have long been a problem for consumers and enterprises, but a new study suggests they may soon get an upgrade. Instead of a human scammer on the other end of the line, future calls could

React to this headline:

ScamAgent shows how AI could power the next wave of scam calls Read More »

Microsoft fixes critical wormable Windows flaw (CVE-2025-47981)

Don't miss, Hot stuff, Ivanti, Microsoft Edge, MS Office, News, Patch Tuesday, Qualys, SharePoint, Tenable, Trend Micro, Windows, Windows Server / SecurityTicks

Microsoft fixes critical wormable Windows flaw (CVE-2025-47981) 2025-07-09 at 14:31 By Zeljka Zorz For July 2025 Patch Tuesday, Microsoft has released patches for 130 vulnerabilities, among them one that’s publicly disclosed (CVE-2025-49719) and a wormable RCE bug on Windows and Windows Server (CVE-2025-47981). CVE-2025-49719 and CVE-2025-49717, in Microsoft SQL Server CVE-2025-49719 is an uninitialized memory

React to this headline:

Microsoft fixes critical wormable Windows flaw (CVE-2025-47981) Read More »

Chaining two LPEs to get “root”: Most Linux distros vulnerable (CVE-2025-6018, CVE-2025-6019)

Debian, Don't miss, Fedora, Hot stuff, Linux, News, openSUSE, Qualys, Ubuntu, vulnerability / SecurityTicks

Chaining two LPEs to get “root”: Most Linux distros vulnerable (CVE-2025-6018, CVE-2025-6019) 2025-06-18 at 14:49 By Zeljka Zorz Qualys researchers have unearthed two local privilege escalation vulnerabilities (CVE-2025-6018, CVE-2025-6019) that can be exploited in tandem to achieve root access on most Linux distributions “with minimal effort.” About the vulnerabilities (CVE-2025-6018, CVE-2025-6019) CVE-2025-6018 affects the Pluggable

React to this headline:

Chaining two LPEs to get “root”: Most Linux distros vulnerable (CVE-2025-6018, CVE-2025-6019) Read More »

Closing security gaps in multi-cloud and SaaS environments

Cloud, cloud security, collaboration, cybersecurity, Don't miss, Features, Hot stuff, News, Qualys, SaaS, strategy / SecurityTicks

Closing security gaps in multi-cloud and SaaS environments 2025-05-20 at 09:06 By Mirko Zorz In this Help Net Security interview, Kunal Modasiya, SVP, Product Management, GTM, and Growth at Qualys, discusses recent Qualys research on the state of cloud and SaaS security. He talks about how siloed visibility, fragmented tools, and a lack of incident

React to this headline:

Closing security gaps in multi-cloud and SaaS environments Read More »

Infosec products of the month: February 2025

1Password, Armor, BigID, Dynatrace, Fortinet, Legit Security, Netwrix, News, Nymi, Palo Alto Networks, Pangea, Privacera, Qualys, SafeBreach, Satori, Seal Security, Socure, Trustmi, Veeam Software / SecurityTicks

Infosec products of the month: February 2025 2025-02-28 at 07:07 By Help Net Security Here’s a look at the most interesting products from the past month, featuring releases from: 1Password, Armor, BigID, Dynatrace, Fortinet, Legit Security, Netwrix, Nymi, Palo Alto Networks, Pangea, Privacera, Qualys, SafeBreach, Satori, Seal Security, Socure, and Veeam Software. Qualys TotalAppSec enables

React to this headline:

Infosec products of the month: February 2025 Read More »

New infosec products of the week: February 7, 2025

Dynatrace, News, Nymi, Qualys, SafeBreach, Satori / SecurityTicks

New infosec products of the week: February 7, 2025 2025-02-07 at 06:11 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Dynatrace, Nymi, Qualys, SafeBreach, and Satori. Qualys TotalAppSec enables organizations to address risks across web applications and APIs Qualys TotalAppSec unifies API security, web

React to this headline:

New infosec products of the week: February 7, 2025 Read More »

Qualys TotalAppSec enables organizations to address risks across web applications and APIs

Industry news, Qualys / SecurityTicks

Qualys TotalAppSec enables organizations to address risks across web applications and APIs 2025-02-03 at 16:48 By Industry News Qualys announced TotalAppSec, its new AI-powered application risk management solution to enable organizations to monitor and mitigate cyber risk from critical web applications and APIs. Qualys TotalAppSec unifies API security, web application scanning, and web malware detection

React to this headline:

Qualys TotalAppSec enables organizations to address risks across web applications and APIs Read More »

QScanner: Linux command-line utility for scanning container images, conducting SCA

containers, Don't miss, Hot stuff, Linux, News, Qualys, scanning / SecurityTicks

QScanner: Linux command-line utility for scanning container images, conducting SCA 2024-11-27 at 08:02 By Help Net Security QScanner is a Linux command-line utility tailored for scanning container images and performing Software Composition Analysis (SCA). It is compatible with diverse container orchestration systems, container runtimes, and operating systems. QScanner features Instant console results: Scan for vulnerabilities

React to this headline:

QScanner: Linux command-line utility for scanning container images, conducting SCA Read More »

Infosec products of the month: October 2024

Action1, Balbix, BreachLock, Commvault, Dashlane, Data Theorem, Edgio, ExtraHop, Fastly, Frontegg, GitGuardian, IBM, Ivanti, Jumio, Kusari, Legit Security, Metomic, Nametag, Neon, News, Nucleus Security, Okta, Qualys, Rubrik, SAFE Security, Sectigo, SECURITI.ai, Veeam Software, XM Cyber / SecurityTicks

Infosec products of the month: October 2024 2024-11-01 at 06:04 By Help Net Security Here’s a look at the most interesting products from the past month, featuring releases from: Action1, Balbix, BreachLock, Commvault, Dashlane, Data Theorem, Edgio, ExtraHop, Fastly, Frontegg, GitGuardian, IBM, Ivanti, Jumio, Kusari, Legit Security, Metomic, Nametag, Neon, Nucleus Security, Okta, Qualys, Rubrik,

React to this headline:

Infosec products of the month: October 2024 Read More »

New infosec products of the week: October 11, 2024

Action1, BreachLock, Commvault, Dashlane, Data Theorem, Edgio, Frontegg, News, Qualys / SecurityTicks

New infosec products of the week: October 11, 2024 2024-10-11 at 06:31 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Action1, BreachLock, Commvault, Dashlane, Data Theorem, Edgio, Frontegg, and Qualys. Qualys Enterprise TruRisk Management unifies asset inventory and risk factors Qualys launched the Risk

React to this headline:

New infosec products of the week: October 11, 2024 Read More »

Qualys Enterprise TruRisk Management unifies asset inventory and risk factors

Industry news, Qualys / SecurityTicks

Qualys Enterprise TruRisk Management unifies asset inventory and risk factors 2024-10-10 at 11:34 By Industry News Qualys launched the Risk Operations Center (ROC) with Enterprise TruRisk Management (ETM). The solution enables CISOs and business leaders to manage cybersecurity risks in real time, transforming fragmented, siloed data into actionable insights that align cyber risk operations with business

React to this headline:

Qualys Enterprise TruRisk Management unifies asset inventory and risk factors Read More »

Why a strong patch management strategy is essential for reducing business risk

cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, patching, Qualys / SecurityTicks

Why a strong patch management strategy is essential for reducing business risk 2024-07-29 at 07:01 By Mirko Zorz In this Help Net Security interview, Eran Livne, Senior Director of Product Management, Endpoint Remediation at Qualys and Thomas Scheffler, Security Operations Manager of Cintas Corporation, discuss their experiences with automated patch management. Scheffler details how Cintas

React to this headline:

Why a strong patch management strategy is essential for reducing business risk Read More »

CISOs’ new ally: Qualys CyberSecurity Asset Management 3.0

asset discovery, CISO, cybersecurity, Don't miss, Features, Hot stuff, IT assets, News, opinion, Qualys / SecurityTicks

CISOs’ new ally: Qualys CyberSecurity Asset Management 3.0 2024-06-25 at 06:31 By Mirko Zorz In this Help Net Security interview, Kunal Modasiya, VP of Product Management and Growth at Qualys, explores the key features, significant advantages, and innovative technologies behind Qualys CyberSecurity Asset Management 3.0. Can you explain the key features of Qualys CyberSecurity Asset

React to this headline:

CISOs’ new ally: Qualys CyberSecurity Asset Management 3.0 Read More »

Photos: Infosecurity Europe 2024

Adaptive Shield, Akamai, conferences, Jamf, Microsoft, News, Plainsea, Qualys / SecurityTicks

Photos: Infosecurity Europe 2024 2024-06-05 at 16:01 By Help Net Security Infosecurity Europe is taking place at ExCel London from 4-6 June 2024. Help Net Security is on-site. This gallery takes you inside the event. The featured vendors are: Plainsea, Qualys, Akamai, Microsoft, Bridewell, Adaptive Shield, Jamf. The post Photos: Infosecurity Europe 2024 appeared first

React to this headline:

Photos: Infosecurity Europe 2024 Read More »

NIST’s NVD has encountered a problem

Chainguard, Don't miss, enterprise, Hot stuff, News, NIST, Qualys, Rapid7, vulnerability, vulnerability management / SecurityTicks

NIST’s NVD has encountered a problem 2024-03-19 at 15:47 By Zeljka Zorz Whether the cause is insurmountable technical debt, lack of funds, a third reason or all of them, NIST’s National Vulnerability Database (NVD) is struggling, and it’s affecting vulnerability management efforts. What happened? Anyone who regularly uses the NVD as a source of information

React to this headline:

NIST’s NVD has encountered a problem Read More »

Infosec products of the month: February 2024

Appdome, BackBox, Center for Internet Security, Cisco, CompliancePro Solutions, Cyberhaven, LOKKER, ManageEngine, Metomic, News, OPSWAT, Pindrop, ProcessUnity, Qualys, SentinelOne, Sumsub, Truffle Security, Vade Secure, Varonis / SecurityTicks

Infosec products of the month: February 2024 2024-02-29 at 05:48 By Help Net Security Here’s a look at the most interesting products from the past month, featuring releases from: Appdome, BackBox, Center for Internet Security, Cisco, CompliancePro Solutions, Cyberhaven, LOKKER, ManageEngine, Metomic, OPSWAT, Pindrop, ProcessUnity, Qualys, SentinelOne, Sumsub,Truffle Security, Vade Secure, and Varonis. CIS ESS

React to this headline:

Infosec products of the month: February 2024 Read More »

New infosec products of the week: February 9, 2024

Cisco, Metomic, News, OPSWAT, Qualys, Varonis / SecurityTicks

New infosec products of the week: February 9, 2024 2024-02-09 at 08:01 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Cisco, Metomic, OPSWAT, Qualys, and Varonis. Varonis MDDR helps organizations prevent data breaches Varonis introduced Varonis Managed Data Detection and Response (MDDR), a managed

React to this headline:

New infosec products of the week: February 9, 2024 Read More »

Qualys TotalCloud 2.0 measures cyber risk in cloud and SaaS apps

Industry news, Qualys / SecurityTicks

Qualys TotalCloud 2.0 measures cyber risk in cloud and SaaS apps 2024-02-07 at 16:31 By Industry News Qualys unveiled TotalCloud 2.0. This significant upgrade to Qualys’ AI-powered cloud native application protection platform (CNAPP) delivers a single prioritized view of cloud risk and is the first to extend its protection to SaaS applications. The shift toward

React to this headline:

Qualys TotalCloud 2.0 measures cyber risk in cloud and SaaS apps Read More »

Qualys enhances CyberSecurity Asset Management to discover risky unmanaged devices

Industry news, Qualys / SecurityTicks

Qualys enhances CyberSecurity Asset Management to discover risky unmanaged devices 2024-02-01 at 16:46 By Industry News Qualys is expanding Qualys CyberSecurity Asset Management (CSAM) to identify unmanaged and untrusted devices in real-time. Leveraging the Qualys Cloud Agent to continuously monitor the network, this passive discovery method complements scans, agents, and API-based discovery to build a

React to this headline:

Qualys enhances CyberSecurity Asset Management to discover risky unmanaged devices Read More »