1119 matches found
Qualys Cloud Agent 竞争条件问题漏洞
Qualys Cloud Agent is a lightweight application from Qualys USA, Inc. A single agent for real-time, global visibility and response. A security vulnerability exists in Qualys Cloud Agent versions prior to 3.1.3.34 through 4.5.3.1 that stems from the presence of a race condition, which could be...
PT-2023-21591 · Qualys · Qualys Cloud Agent For Windows
Name of the Vulnerable Software and Affected Versions: Qualys Cloud Agent for Windows versions 3.1.3.34 through 4.5.3.1 Description: A Race Condition exists in the Qualys Cloud Agent for Windows platform. This allows attackers to escalate privileges limited on the local machine during...
Qualys Cloud Agent 代码问题漏洞
Qualys Cloud Agent is a lightweight application from Qualys USA, Inc. Single agent for real-time, global visibility and response. A security vulnerability exists in Qualys Cloud Agent version 2.5.1-75 prior to Qualys Cloud Agent 3.7, which stems from the presence of a local privilege escalation...
PT-2023-21592 · Qualys +1 · Qualys Cloud Agent +1
Name of the Vulnerable Software and Affected Versions: Qualys Cloud Agent for macOS versions 2.5.1-75 through 3.7 Description: The Qualys Cloud Agent for macOS installer allows a local escalation of privilege, bounded only to the time of installation and only on older macOSX versions macOS 10.15...
Microsoft (& Apple) Patch Tuesday, April 2023 Edition
Microsoft today released software updates to plug 100 security holes in its Windows operating systems and other software, including a zero-day vulnerability that is already being used in active attacks. Not to be outdone, Apple has released a set of important updates addressing two zero-day...
Augment Security Asset Tagging with Custom Assessment and Remediation (CAR)
Security asset tagging provides a flexible and scalable way to organize the assets in your environment based on specific requirements. It enables you to create tags and assign them to your assets, which can improve your cybersecurity maturity and reduce risks for breaches and audit failures. Qual...
Risk-based Vulnerability Management Combined With A Cyber Risk Management Platform
Recent insights from IDCs recent report, Worldwide Device Vulnerability Management Forecast, 2023–2027: Evolving Beyond Scanning Feb. 2023, provide a sobering look at the future of what cybersecurity stacks may look like in a few years. As the name suggests, this report took a deep dive into the...
Active TLS1.1 and Weak Ciphers Causing environment Vulnerabilities
This Tech Paper aims to convey what someone skilled in ADC would configure as a generic implementation to receive an A+ grade atQualys SSL Labs...
Debian: Security Advisory (DLA-139-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Qualys VMDR & Jira Integration Now Available
The increasing number of vulnerabilities poses a significant challenge for most organizations trying to effectively manage and mitigate Cyber risks. According to NVD, the number of vulnerabilities in 2022 increased by approximately 25% as compared to 2021. As we are in start of March the...
What’s Next After Log4Shell?
How To Deal With the Next Open-Source Vulnerability Using Custom Scripts A critical vulnerability in Apache’s Log4j Java-based logging utility CVE-2021-44228 was previously referred to as the “most critical vulnerability of the last decade.” In the wake of Log4Shell exploits, many security...
Automating Vulnerability Management with Qualys VMDR & ServiceNow
With a growing number of cyber-attacks and the push to stay ahead of adversaries, the Vulnerability Management lifecycle has become necessary for ensuring enterprise-grade cyber resiliency. For many organizations, there is a persistent challenge in supporting vulnerability assessment and...
Forta GoAnywhere Zero-Day Exploited By Threat Actors
On February 1st, 2023, Forta released an advisory behind an auth wall notifying their customers of a remote code execution zero-day exploit affecting their GoAnywhere Managed File Transfer MFT application. This was picked up by Brian Krebs, an investigative journalist who published this on his...
Don’t forget about risk remediation of your macOS assets
Employees love for Macs has propelled tremendous growth for Apple. According to a recent study by Parallels, 55% of businesses use Mac devices themselves or explicitly approve of their use within the company. It is hard to believe Macs have been around for almost 4 decades. Largely introduced to...
Real-Time Defense of Multi-Cloud Environments From Malicious Attacks and Threats
Organizations today cannot detect real-time threats at runtime due to the multi-cloud infrastructure, resulting in the possibility of malicious actors exploiting the environment. It is imperative for the modern organization to have a solution to detect advanced run-time threats in real-time to...
Introducing Enterprise TruRisk Management from Qualys
Since the release of Qualys VMDR 2.0 with TruRisk last year, our customers have quickly adopted it to perform cyber risk assessments across the entire enterprise. With detail-rich cyber risk visualization, customers can now pinpoint the areas of their business exposed to elevated levels of cyber...
Launching Qualys Cloud Threat Database
We are proud to announce the release of the Qualys Cloud Threat Database which correlates more than 25 different threat intelligence feeds into a single source for all Qualys products to leverage. This comprehensive vulnerability and threat intelligence database pulls from trusted sources such as...
Ransomware Targets Outdated VMware ESXi Hypervisors: Protect Your Systems Now!
Updated on February 8, 2023 at 2:40 PM Pacific Standard Time: This article has been updated with EVALUATE Vendor-Suggested Mitigation with Policy Compliance PC Updated on February 7, 2023 at 9:05 PM Pacific Standard Time: This article has been updated with the latest information on the...
macOS Patching Is Here!
In the past few years, many of our customers have seen a sharp increase in the number of Mac devices introduced to their environment. All those new Mac devices introduce new vulnerabilities that must be remediated. To keep up with the new volume of vulnerabilities, organizations had to opt-in, bu...
