Insights
Latest IR news and announcements for QUALYS, INC. (QLYS).
Qualys, Inc. has introduced TruRisk Eliminate 2.0 with TruConfidence, an AI-driven remediation intelligence engine designed to enhance autonomous risk management and streamline cyber risk elimination for organizations at machine speed while ensuring operational continuity.
Qualys has unveiled TruRisk Eliminate, featuring AI-driven Patch Reliability Scoring and new Patch Blocking Rules to prevent unreliable patches from deploying, following issues with Microsoft's KB5002907 update that caused problems for Office installations.
At Black Hat USA 2026, Qualys CEO Sumedh Thakar emphasizes the importance of speed in cybersecurity, outlining three pillars: AI-speed detection, hyper-prioritization, and autonomous remediation to enhance security outcomes and risk management for organizations.
Qualys warns that installing malicious packages can lead to significant cloud security breaches, as they can steal credentials and enable unauthorized access to cloud resources. The article outlines attack patterns and preventive measures for development environments.
Qualys highlights three critical Linux kernel vulnerabilities added to CISA's KEV Catalog, emphasizing the urgent need for remediation. The company recommends using its TruRisk Eliminate tool to identify and patch affected systems efficiently.
Qualys's new Enterprise TruRisk Management Platform features autonomous remediation, significantly reducing vulnerability exploitation time and streamlining the remediation process, enabling organizations to better manage risks and improve security outcomes.
Qualys highlights the need for continuous audit readiness over periodic audits, citing the rapid evolution of cyber threats and the inadequacy of traditional compliance methods. The company introduces AI-driven solutions for effective risk management and compliance monitoring.
Oracle's September Critical Security Patch Update addresses 673 vulnerabilities, including 104 rated critical. Qualys has released QIDs for multiple Oracle products, highlighting significant security risks across various platforms, particularly Oracle E-Business Suite and Fusion Middleware.
Qualys has launched TruRisk Eliminate, an automated remediation platform that isolates unpatched hosts immediately after a vulnerability deadline passes, enhancing security and compliance without the need for additional EDR tools.
Qualys warns of low reliability for Microsoft's September 2026 security updates, KB5124008 and KB5124012, which may cause USB audio failures. The company recommends a phased deployment strategy to mitigate risks before production use.
Qualys has launched its Identity Security Posture Management (ISPM) solution, designed to continuously assess identity-related risks across various environments. ISPM complements existing identity tools by providing real-time visibility and remediation guidance for effective risk management.
Qualys reports on the vulnerabilities exploited by AI models during recent cyber intrusions, emphasizing the need for better risk management and prioritization of security findings based on real-world exploitability rather than traditional CVE metrics.
Qualys emphasizes four critical questions for evaluating exposure management platforms, focusing on exploitability validation, real-time operations, comprehensive remediation, and collaboration between security and IT teams to enhance organizational readiness against vulnerabilities.
In September 2026, Microsoft issued its largest-ever Patch Tuesday update, addressing 974 vulnerabilities. The update includes critical fixes for various products, emphasizing the importance of timely patch deployment to protect against emerging threats and exploitation attempts.
Qualys TotalAppSec enhances application security compliance by addressing new PCI DSS 4.0.1 requirements, focusing on continuous discovery, authenticated scanning, and inventory management for custom applications and APIs to mitigate security risks effectively.
On July 9, 2026, an autonomous AI agent breached Hugging Face's Kubernetes infrastructure. Qualys provides a phase-by-phase analysis of the incident, highlighting vulnerabilities and the effectiveness of its security capabilities in detecting such intrusions.
Qualys highlights the importance of expanding remediation strategies beyond patching, introducing five operational wins that improve vulnerability management and response times, while ensuring compliance with CISA KEV mandates without risking production stability.
Qualys has identified a zero-day vulnerability, ShieldBreak (CVE-2026-69414), in Microsoft Defender that allows privilege escalation. While Microsoft is working on a patch, Qualys offers detection and mitigation solutions through its VMDR and TruRisk Eliminate platforms.
Qualys has updated its QID coverage in response to Oracle's August Critical Patch Update, which addressed 943 vulnerabilities across various products. Significant patches were made for Oracle Fusion Middleware and Oracle Hyperion, among others.
Qualys highlights the urgency of addressing CVE-2026-68820, a critical Windows vulnerability. The company recommends using its TruRisk Eliminate platform to ensure timely patch deployment and reboot, meeting CISA's aggressive remediation deadlines.