October 2018 Patch Tuesday: Microsoft fixes 49 flaws, one APT-wielded zero-day

With the October 2018 Patch Tuesday release Microsoft has fixed 49 vulnerabilities, 12 of which are rated “critical.” Previously known flaws and an actively exploited zero-day The only zero-day in this batch is CVE-2018-8453, an elevation o… Continue reading October 2018 Patch Tuesday: Microsoft fixes 49 flaws, one APT-wielded zero-day

Building security into DevOps versus bolting it on

In this podcast, Hari Srinivasan, Director of Product Management for Qualys, talks about building security into DevOps versus bolting it on, specifically for containers. Here’s a transcript of the podcast for your convenience. Hello! My name is Hari Sr… Continue reading Building security into DevOps versus bolting it on

How to gain visibility with global IT asset inventory

In this podcast recorded at Black Hat USA 2018, Pablo Quiroga, Director of Product Management at Qualys, talks about how to gain unprecedented visibility with global IT asset inventory. Here’s a transcript of the podcast for your convenience. My name i… Continue reading How to gain visibility with global IT asset inventory

September 2018 Patch Tuesday: Microsoft fixes actively exploited zero-day

Microsoft’s September 2018 Patch Tuesday has brought fixes for a little over 60 security vulnerabilities, 17 of which are critical and one is being actively exploited in the wild. The software giant has also released two advisories: one detailing… Continue reading September 2018 Patch Tuesday: Microsoft fixes actively exploited zero-day

Qualys Community Edition: Discover IT assets, manage vulnerabilities, scan web apps

In this podcast recorded at Black Hat USA 2018, Anthony Mogannam, Product Manager, SME/SMB Solutions at Qualys, talks about issues related to open source software and Qualys Community Edition. Here’s a transcript of the podcast for your convenience. He… Continue reading Qualys Community Edition: Discover IT assets, manage vulnerabilities, scan web apps

Incorporating sensitive asset data into your vulnerability and compliance program

In this podcast recorded at Black Hat USA 2018, Tim White, Director of Product Management, Policy Compliance at Qualys, talks about the importance of incorporating inaccessible or sensitive asset data into your overall vulnerability and compliance prog… Continue reading Incorporating sensitive asset data into your vulnerability and compliance program

Endpoint breach prevention by reducing attack surfaces

In this podcast recorded at Black Hat USA 2018, Chris Carlson, VP of Product Management, Cloud Agent Platform at Qualys, talks about endpoint breach prevention by reducing attack surfaces. Here’s a transcript of the podcast for your convenience. Welcom… Continue reading Endpoint breach prevention by reducing attack surfaces

Patch Tuesday, August 2018 Edition

Adobe and Microsoft each released security updates for their software on Tuesday. Adobe plugged five security holes in its Flash Player browser plugin. Microsoft pushed 17 updates to fix at least 60 vulnerabilities in Windows and other software, includ… Continue reading Patch Tuesday, August 2018 Edition

August 2018 Patch Tuesday: Microsoft fixes two actively exploited zero-days

In the August 2018 Patch Tuesday, Microsoft has plugged over 60 vulnerabilities, two of which are being actively exploited in the wild. In addition to those, the company has also released a critical update advisory that addresses vulnerabilities found … Continue reading August 2018 Patch Tuesday: Microsoft fixes two actively exploited zero-days