Qualys covers vulnerability management, asset discovery, and compliance checks that help organizations identify and reduce security risks.
Search across headline titles and summaries.
Background for this topic.
Qualys is a cloud-based security platform used to inventory IT assets, identify software vulnerabilities, assess configuration and compliance, and scan web applications. It collects information through network scanners and endpoint agents, then centralizes findings so security teams can track exposure and remediation across servers, workstations, cloud resources, and applications.
Its security value depends on complete, accurate asset coverage: unmanaged systems, failed agents, or incomplete credentials can leave vulnerabilities undiscovered. Findings must also be validated and prioritized using factors such as exploitability, exposure, and business context; a scanner’s severity rating alone does not determine urgency. Because the platform may receive detailed asset, software, configuration, and credential-related data, access controls, role separation, and secure integration are important. Teams can use its records to support vulnerability management and compliance evidence, while incident responders may use historical asset and detection data to scope affected systems and confirm remediation.
Weekly headline count for the current query.
Update now: Qualys says flaws give root to local users, are 'easily exploitable' Researchers at Qualys refuse to release exploit code for five bugs in the Linux world's needrestart utility that allow unprivileged local attackers to gain root access without any user interaction.…
Update now: Qualys says vulnerabilities give root and are 'easily exploitable' Researchers at Qualys refuse to release exploit code for five bugs in Ubuntu Server's needrestart utility that allow unprivileged attackers to gain root access without any user interaction.…
PLUS: Qualys CEO says APAC has infosec advantages; Singapore's Sea ebbs in Americas; Toshiba's tepid takeover update; and more Asia In Brief Indonesia's competition regulator, the Komisi Pengawas Persaingan Usaha (KPPU) has alleged that Google has violated local anti-monopoly laws by abusing its dominant position for the distribution of apps and its requirement that developers must use its payment systems.…
Or you could think of them as a superuser password reset function The snap-confine tool in the Linux world's Snap software packaging system can be potentially exploited by ordinary users to gain root powers, says Qualys.…