Qualys

The leading provider of disruptive cloud-based security, compliance and IT solutions.

[Qualys @qualys]

Do CISOs really need to be on top of every new AI innovation? What should they really be focused on? Qualys President & CEO Sumedh Thakar shares his insights in On Location for StudioC60 / ISTP Magazine.

Don’t miss the full interview here: https://t.co/I0zZnhUlQR

For more exclusive insights for CISOs and security professionals, register for ROCon Americas 2026 and get access to workshops, demos, and expert speaking sessions: https://t.co/ETgVs8OCJc

#CISO #Cybersecurity

[Qualys @qualys]

When autonomous AI can discover and exploit vulnerabilities in hours rather than weeks, board-level cyber governance has to evolve. Measuring theoretical risk scores is no longer enough- directors need visibility into validated, business-context risk.

On October 29, our CISO, Nathan Smolenski, will join the @National Association of Corporate Directors (NACD) for The Mythos Inflection Point: Board Oversight in the Age of Autonomous AI.

Together, they will discuss:
> How autonomous AI changes the window between vulnerability discovery and exploitation.
> Key questions board members should ask management to evaluate operational readiness.
> Shifting governance frameworks toward validated, risk-based decision-making.

Register here to join the discussion: https://t.co/egBbCZ5Ptm

#CyberGovernance #BoardOversight #AISecurity #Qualys

[Qualys @qualys]

PHP2Shell: Know your exposure. Take action.

PHP2Shell is CVSS 9.2 critical, and end-of-life PHP won't get a patch. Qualys is offering a free 15-day mitigation service for up to 1,000 assets that can help you:
-Detect vulnerable PHP instances within 60 minutes
-Validate exploitability to prioritize real risk
- Mitigate what you can't patch with patchless remediation

Get Free PHP2Shell Mitigation Service: https://t.co/qyYOA5qhbk

[Qualys @qualys]

PHP2Shell is two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619, CVSS v4.0 9.2) that can allow unauthenticated remote code execution, and attack traffic has already been reported. See how Qualys helps you detect exposure with InstaScan, confirm exploitability with TruConfirm, and mitigate before you patch with TruRisk Eliminate. https://t.co/xN6TWNbTpK

[Qualys @qualys]

The latest PHP flaws have been dubbed the next Log4J with millions of installations affected around the world, including government services, critical infrastructure, and enterprises.

Qualys is offering its solutions for free as a service to the community to help organizations detect their exposure, validate if it's exploitable in each specific environment, and patch or mitigate what remains vulnerable. More info at https://t.co/hzrgPtOnB7

[Qualys @qualys]

ROCon APAC, the Qualys Risk Operations Conference, is built to address a simple question: how do you run a security program when exposures occur faster than your team can respond?

Join us in Mumbai 18-19 November to see how today's security leaders are moving from enumerating risk to eliminating it.

What to expect:
✔️ Free Hands-On Training & CISO Workshop (Nov 18): Four tracks covering Qualys ETM, scanning/agent troubleshooting, cloud/AI risk, and RemOps.
✔️Executive Keynotes (Nov 19): Insights on building an AI ROC from CEO Sumedh Thakar, and Qualys leaders Shailesh Athalye, Kunal Modasiya, among others.
✔️Technical Sessions: Deep dives on verified risk reduction, exploitability, ITOps remediation, cloud/containers, and new attack surfaces.
✔️Real-World Impact: Customer case studies on prioritizing exploitability and optimizing remediation programs.

Register today at: https://t.co/0seoRT9GIv

#roconapac #qualys #cybersecurity

[Qualys @qualys]

PHP has released fixes for CVE-2026-109618 and CVE-2026-109619, both rated CVSS 9.2. Researchers demonstrated unauthenticated RCE and memory disclosure, including RCE before application code runs on Apache mod_php. Cloudflare has already observed attack traffic.

Patching is the only complete fix. Prioritize internet-facing systems, restart affected workers, and verify they are running patched PHP. Qualys detection QIDs are now available.

Read the PHP2Shell blog for remediation, temporary mitigations, and detection coverage.

#CyberSecurity #VulnerabilityManagement #AppSec

[Qualys @qualys]

Don’t miss our Keynote Session at the virtual CSA AI Security Summit 2026, featuring Qualys’ Nathan Smolenski.

This session examines the intersection of AI governance, cybersecurity, executive oversight, and regulatory accountability. Find out how autonomous AI changes risk ownership, impacts board responsibilities, and creates new obligations for technology and business leaders. This presentation will outline practical governance patterns, oversight models, and accountability frameworks that organizations can use to safely adopt agentic AI while maintaining compliance, transparency, and stakeholder trust.

Register now and don’t miss this event on Wednesday, October 21: https://t.co/aaPD8INMhB

[Qualys @qualys]

That’s a wrap on #ROCon26!

We spent three days in Austin with CISOs, customers, partners and practitioners, all working on one question. How do you eliminate cyber risk at the speed of frontier AI?

The energy came from the conversations. Customers shared how they’re moving from measuring risk to eliminating it. Partners showed how they’re scaling risk operations for the organizations they serve. And the hallway debates kept going long after the last session ended.

We launched TruRisk Eliminate with TruConfidence to deliver AI powered remediation intelligence so teams can fix what matters most at machine speed without disrupting the business.

Thank you to everyone who shared their ideas, asked great questions at ROCon and brought their skills and competitive spirit to the RiskBusters competition.

We’ll see you in 2027.

#ROCon26 #Cybersecurity

[Qualys @qualys]

That’s a wrap on Day 3 of #ROCon2026!

Three days of expert insights, customer experiences, partner perspectives, and conversations on turning cyber risk into action. From Ivan Milenkovic’s Risk Yoga keynote on staying focused amid the chaos of Frontier AI, to @saeed4bbasi demonstrating how Qualys Threat Research uncovers emerging threats, the day brought practical insights into what it takes to manage cyber risk in the AI era.

But understanding risk is only part of the equation. The next step is acting on it. As AI accelerates the pace of exploitation, remediation has to keep up. That means moving beyond patching alone to take the right action, at the right time, with the confidence to reduce risk without disrupting the business.

Thanks to everyone who joined us in Austin!

Stay tuned for our ROCon recap and key takeaways on operationalizing your AI-ROC.

[Qualys @qualys]

ROCon Americas 2026 mainstage kicked off in Austin today.

Qualys President and CEO Sumedh Thakar opened the day with a clear message. “Autonomous exploitation requires an equally automated remediation.” He then unveiled TruRisk Eliminate 2.0 with TruConfidence, the AI-powered remediation intelligence engine that powers Autonomous RemOps for the frontier AI era.

Built on Qualys’ experience deploying half a billion patches, TruConfidence helps organizations eliminate risk at machine speed without putting business operations at risk. It extends remediation across endpoints, perimeter devices, cloud and applications, applies compensating mitigations when patching isn’t an option, and monitors system health after every action.

From there, attendees went deep in sessions and panels with security leaders, customers and Qualys experts on how to measure, communicate and eliminate cyber risk in the AI era.

Thank you to everyone who joined us today. See you tomorrow for Day 2. #ROCon2026

Learn more about TruConfidence and 2.0 here: https://t.co/ptAJqUa4Cn

#ROCon26 #Cybersecurity #FrontierAI #TruRiskEliminate

[Qualys @qualys]

We’re excited to announce the official launch of Qualys’ TruRisk Eliminate 2.0!

2.0 is powered by TruConfidence, an AI-powered remediation and orchestration intelligence engine. It gives you the intelligence and confidence to run autonomous RemOps while keeping operations resilient.

In this current frontier AI era, vulnerabilities are being discovered faster than we can close them. The confidence gap is why the backlog keeps growing – TruRisk 2.0 closes that confidence gap by employing Agent Sara and TruConfidence, our remediation and orchestration intelligence engine.

Give your board confidence in security and business continuity with TruRisk Eliminate 2.0.

Learn more here: https://t.co/dA6TED868s

#TruConfidence #FrontierAI #Cybersecurity #TruRiskEliminate2.0

[Qualys @qualys]

ROCon Americas 2026 kicks off in Austin with a full day of hands-on training.

Attendees are building practical skills through real-world scenarios, learning directly from Qualys experts and gaining product knowledge they can put to work with their teams. They can also earn CPE credits.

A big thank you to our trainers for sharing their expertise and to our registration team for giving everyone a warm welcome to Austin this morning.

Tomorrow, the main conference begins. Follow along for announcements, product innovations and more from #ROCon2026.

[Qualys @qualys]

This month’s release addresses an astounding 1414 vulnerabilities, including 78 critical and 1329 important-severity vulnerabilities. With a huge jump in vulnerabilities after the Mythos launch, it's clear that this trend has become the new normal.

It's now more critical than ever to cover your bases with tools like Qualys' TruRisk Eliminate. With frontier AI driving a surge like this, no team can keep up with manual remediation. The solution is automation that fights AI with AI. Don't miss our exciting announcements that will be coming soon at our Risk Operations Center Conference 2026 this very week.

Learn all about the newest Patch Tuesday findings here, and RSVP for the webinar as well :
https://t.co/nQIAg3bKmp

#Vulnerabilities #Cybersecurity #ROCon26

[Qualys @qualys]

ROCon26 Americas is coming in less than 4 days! In addition to networking sessions, workshops, demos, and panels, centered around proactive cyber risk management for the frontier AI era, we’ll also have our four keynote speakers: Sumedh Thakar, Cynthia Kaiser, Shailesh Athalye, and Ivan Milenkovic.

Their keynotes will touch upon the future of TruRisk Eliminate, cybersecurity for critical infrastructure, and how to build your own AI-Risk Operations Center.

Don’t miss their insights and register for ROCon now: https://t.co/L8APqoR2pH

#Cybersecurity #ROCon2026 #FrontierAI

[Qualys @qualys]

What’s next for Qualys’ TruRisk Eliminate?

Manual patching by ticket had a good run. For years, Qualys customers have gone beyond patching to mitigating the risks that patching alone can’t reach.

But AI is now finding vulnerabilities faster than any queue can move. So we kept building, toward remediation that doesn’t wait on a ticket. The future is autonomous.

Since launching TruRisk Eliminate, we’ve added groundbreaking capabilities such as Agent Sara, our AI agent for risk remediation, AI-powered patch reliability scoring. Along the way, we’ve resolved over half a billion patches, 50% of them autonomously with a <0.1% rollback.

We’ll share what’s next for Eliminate at ROCon26 Americas, Oct 13–15 in Austin.
https://t.co/L8APqoR2pH

#Cybersecurity #ROCon26

[Qualys @qualys]

The latest Qualys Enterprise TruRisk Management release brings Attack Path to show how attackers could chain findings to reach your critical assets, CISA BOD 26-04-aligned remediation prioritization with SLA tracking, industry-specific threat intelligence in TruLens, and multiple scanner selection for TruConfirm scans.

ETM 1.13 Release Notes: https://t.co/PeEJKWCYiH
#Qualys #cybersecurity #releasesummaryvideos

[SoftwareReviews @SW_Reviews]

Meet the 2026 Vulnerability Management Emotional Footprint Award Winners! 🚀

Kudos to @Qualys, @Carson__SAINT, and @Rapid7 for their incredible accomplishments!

Download our recently released report! 🔗✨
https://t.co/c1aaW24ZKI

#VulnerabilityManagement #Software #Awards2026

[Qualys @qualys]

@uoazeez Congrats!

[DRJ @drjournal]

ONLINE EXCLUSIVE: "From the ‘Department of No’ to the ‘Department of Know’" by Ivan Milenkovic of @qualys • #DRJ

https://t.co/b0v7jUJ0zC

[Qualys @qualys]

Only one week to go for ROCon26 Americas!

This is the industry's only conference focused entirely on cyber risk operations. Over three days, you'll get hands-on training, deep dives into AI-speed detection, Hyper-prioritization, and Zero-day remediation with agentic AI and real-world case studies from practitioners at NiSource, Cintas, TD Bank and 3M on how they leverage Qualys to reduce risk at AI speed.

Then put it to the test in our Risk Busters Capture the Flag, where you'll detect, prioritize and remediate at AI speed with your own agent. Join us in Austin, Oct. 13-15.

Don't miss out and secure your spot today: https://t.co/L8APqoR2pH

#ROCon26 #Cybersecurity