logo

Qualys Blog

ID: 238d9eda-62f4-519f-ad05-e8f31580e042

STIX ID: identity--238d9eda-62f4-519f-ad05-e8f31580e042

Feed Type: rss

Earliest post: 2023-11-27

Latest post: 2026-10-05

Threat research, vulnerability management insights, cloud & endpoint security guidance, and expert analysis from the Qualys cybersecurity team.

01/01/2020
10/14/2026
Title Date Published ↓Threat ScoreAuthorVisible
The Developer is the New Perimeter: How Supply Chain Attacks Are Becoming Cloud Breaches 2026-09-2885Nehal BaviskarTrue
CISA BOD 26-04 Timelines for Three Linux Kernel CVEs2026-09-2380Maihar AroraTrue
Oracle Critical Security Patch Update, September 2026 Review2026-09-1670Diksha OjhaTrue
The Models That Found 10,000 Zero-Days Broke Into Three Companies Using Weak Passwords2026-09-0978Himanshu KathpalTrue
Microsoft and Adobe Patch Tuesday, September 2026 Security Update Review2026-09-0878Diksha OjhaTrue
Anatomy of a Silent Domain Takeover2026-09-0275Rushikesh ChandakTrue
PCI DSS 4.0.1: Application Requirements You’re Being Assessed On in 20262026-08-2765Shravan DandageTrue
When an AI Agent Turned Attacker: What Qualys Sees Across Every Phase of the Hugging Face Kubernetes Intrusion 2026-08-2685Balasaheb SalunkeTrue
CVE-2026-69414 ShieldBreak Zero-Day: No Patch, and CISA BOD 26-04 Gives You 14 Days2026-08-2578Vamika SheelTrue
CVE-2026-69414 ShieldBreak Zero-Day: No Patch, and CISA BOD 26-04 Gives You 14 Days2026-08-2080Vamika SheelTrue
Oracle Critical Patch Update, August 2026 Security Update Review2026-08-1970Diksha OjhaTrue
CVE-2026-68820 is in KEV. Here Is What CISA BOD 26-04 Actually Requires Now2026-08-1875Vamika SheelTrue
Microsoft Patch Tuesday, August 2026 Security Update Review2026-08-1175Diksha OjhaTrue
The Sub-10-Minute Cloud Takeover: How Exposed IAM Keys, Misconfiguration and AI Are Rewriting the Rules of Cloud Breaches2026-07-2770Sayali WarekarTrue
RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600) 2026-07-2285Saeed AbbasiTrue
Oracle Critical Patch Update, July 2026 Security Update Review2026-07-2265Diksha OjhaTrue
CVE-2026-8933: Local Privilege Escalation in Set-Capabilities snap-confine2026-07-2175Saeed AbbasiTrue
Is Your Security Program Ready for AI-Speed Application Exploitation?2026-07-2070Indrani DasTrue
Microsoft and Adobe Patch Tuesday, July 2026 Security Update Review 2026-07-1475Diksha OjhaTrue
FortiBleed: Credential Reuse, Legacy Hashes, and the Risk of Internet-Exposed FortiGate Devices 2026-07-0878Arun Pratap SinghTrue
CERT-In’s AI Vulnerability Blueprint: Why Indian CISOs Need Machine-Speed Risk Operations in the Post-Mythos Era 2026-06-2475Indrani DasTrue
Oracle Critical Patch Update, June 2026 Security Update Review2026-06-1870Diksha OjhaTrue
Microsoft and Adobe Patch Tuesday, June 2026 Security Update Review2026-06-0985Diksha OjhaTrue
From Operating Model to Product: How We Built the ROC for Detection-Speed Remediation2026-06-0470Vivek BhandariTrue
The HazyBeacon Protocol – How Malware Weaponizes Amazon Web Services (AWS) Lambda Function URLs2026-06-0275Aniket HarneTrue
CVE-2026-46333: Local Root Privilege Escalation and Credential Disclosure in the Linux Kernel ptrace Path2026-05-2090Saeed AbbasiTrue
Microsoft and Adobe Patch Tuesday, May 2026 Security Update Review2026-05-1255Diksha OjhaTrue
Dirty Frag: Using the Page Caches as an Attack Surface2026-05-0980Mayuresh DaniTrue
Don’t Wait for a Patch. Mitigate RedSun Zero-Day Risk in Microsoft Defender Today 2026-04-2278Mukesh ChoudharyTrue
Oracle Critical Patch Update, April 2026 Security Update Review2026-04-2275Diksha OjhaTrue
Microsoft and Adobe Patch Tuesday, April 2026 Security Update Review2026-04-1475Diksha OjhaTrue
Anatomy of an Autonomous AI Agent Risk: How Qualys ETM Connects the Dots on OpenClaw2026-04-1378Viren ChaudhariTrue
CVE-2026-3888: Important Snap Flaw Enables Local Privilege Escalation to Root2026-03-1775Saeed AbbasiTrue
Countering Current Geopolitical Cyber Threats Based on CISA Intel With Qualys2026-03-1785Alex KreileinTrue
CrackArmor: Critical AppArmor Flaws Enable Local Privilege Escalation to Root2026-03-1285Saeed AbbasiTrue
Microsoft Patch Tuesday, March 2026 Security Update Review2026-03-1070Diksha OjhaTrue
How Security Tool Misuse Is Reshaping Cloud Compromise2026-02-1978Sayali WarekarTrue
Microsoft and Adobe Patch Tuesday, February 2026 Security Update Review2026-02-1080Diksha OjhaTrue
Mutagen Astronomy: From Discovery to CISA Recognition—A Seven-Year Journey2026-02-0278Saeed AbbasiTrue
How Public Container Registries Have Become a Silent Risk Multiplier in a Modern Supply Chain2026-01-2265Amit GadhaveTrue
Why Serverless Risk Demands Identity-Aware Security at Cloud Scale 2026-01-1570Siddhant PatilTrue
Microsoft Patch Tuesday, January 2026 Security Update Review2026-01-1380Diksha OjhaTrue
ShadyPanda: The Silent Browser Takeover Threat and How Qualys TruRisk Eliminate Helps You Stop It2025-12-1785Lavish JhambTrue
React2Shell: Decoding CVE-2025-55182 – The Silent Threat in React Server Components2025-12-1195Kaustubh JagtapTrue
Microsoft and Adobe Patch Tuesday, December 2025 Security Update Review2025-12-0980Diksha OjhaTrue
Active Exploitation of 7-Zip RCE Vulnerability Shows Why Manual Patching is No Longer an Option 2025-12-0475Mohd Anas KhanTrue
Unauthenticated Authentication Bypass in Fortinet FortiWeb (CVE-2025-64446) Exploited in the Wild2025-11-1590Mayuresh DaniTrue
Microsoft Patch Tuesday, November 2025 Security Update Review2025-11-1175Diksha OjhaTrue
Inside an Automotive Giant’s Data Leak — A Cloud Misconfiguration Lesson for AWS Users2025-11-0375Rahul PareekTrue
What Security Teams Need to Know as PHP and IoT Exploits Surge  2025-10-3075Amit GadhaveTrue

1–50 of 135

Built by the dogesec team. Copyright 2026.