Search: “Qualys”

77 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 296 Exploit / PoC 91 Ransomware 60 Policy & legal 50 Malware 36 Data breach 31 Industry 26 Phishing & fraud 9 Threat actor 7 Advisory 4 AI industry 3 AI research 2 Research 2 AI safety & security 2

SeverityAll critical 398 high 77 medium 102 low 32 info 11

Oracle Critical Security Patch Update, September 2026 Review

Oracle's September 2026 Critical Patch Update fixes 673 vulnerabilities, including 104 critical, with many remotely exploitable in E-Business Suite and Fusion Middleware.

Oracle released 673 security patches in its September 2026 Critical Patch Update: 104 rated critical, 503 high, and 59 medium. Oracle E-Business Suite received the most patches (159, 24% of total), with 19 exploitable without credentials including CVE-2026-83327, CVE-2026-83452, and CVE-2026-83462 at CVSS 9.8. Fusion Middleware received 153 patches with 78 remotely exploitable without authentication, and 41 patches address third-party open-source component flaws. Qualys published detection QIDs for vulnerable assets.

Qualys ThreatPROTECTSep 16, 14:15 UTC · 18h agoAdvisory CVE-2026-83154 CVE-2026-83196 CVE-2026-83197+10 CVEs

Microsoft posts nearly 1,000 bugs for Patch Tuesday as CISA warns two being exploited

CISA confirms exploitation of two Windows zero-days among 973 Microsoft patches; 22,000 Exchange servers remain unpatched.

Microsoft's September Patch Tuesday sets a record with 973 vulnerabilities, and CISA confirms CVE-2026-81963 and CVE-2026-85880 are being exploited, giving federal agencies until September 22 to patch. Nightwing estimates over 22,000 corporate Exchange servers are unpatched against weaponized exploit code. Analysts describe CVE-2026-81963 as an early link in ransomware chains where phishing leads to privilege escalation, and note year-to-date Microsoft disclosures exceed 2,600 bugs.

The RecordSep 8, 22:40 UTC · 8d agoExploit / PoC in the wildCVE-2026-81963 CVE-2026-85880

CVE-2021-28372: How a Vulnerability in Third-Party Technology Is Leaving Many IP Cameras and Surveillance Systems Vulnerable

Palo Alto Unit 42Jun 5, 23:26 UTC · Jun 5, 2024Vulnerability CVE-2021-28372

Search: “Qualys”

Oracle Critical Security Patch Update, September 2026 Review

Microsoft posts nearly 1,000 bugs for Patch Tuesday as CISA warns two being exploited

Cybersecurity jobs available right now: March 24, 2026

Compromised AsyncAPI npm Packages Deliver Multi

F5 vulnerability highlights weak points in DHS’s CDM program

Salesloft Takes Drift Offline After OAuth Token Theft Hits Hundreds of Organizations

Qilin Ransomware Adds "Call Lawyer" Feature to Pressure Victims for Larger Ransoms

NIST Defers Pre-2018 CVEs to Tackle Growing Vulnerability Backlog

Cybersecurity jobs available right now: December 3, 2024

Cybersecurity jobs available right now: June 19, 2024

Hackers Abuse EDRSilencer Tool to Bypass Security and Hide Malicious Activity

U.S. CISA adds SonicWall SonicOS, ImageMagick and Linux Kernel bugs to its Known Exploited Vulnerabilities catalog

New SMS Stealer Malware Targets Over 600 Global Brands

New OpenSSH Vulnerability Discovered: Potential Remote Code Execution Risk

CVE-2021-28372: How a Vulnerability in Third-Party Technology Is Leaving Many IP Cameras and Surveillance Systems Vulnerable

Hands-on Review: Cynomi AI

Be prepared to patch high-severity vulnerability in curl and libcurl

Androxgh0st malware hackers creating large botnet, CISA and FBI warn

Kinsing threat actors probed the Looney Tunables flaws

Security Patch for Two New Flaws in Curl Library Arriving on October 11

Maintainers warn of vulnerability affecting foundational open

Alert: Phishing Campaigns Deliver New SideTwist Backdoor and Agent Tesla Variant

Old vulnerabilities are still a big problem

Safe Security unveils Cyber Risk Cloud of Clouds platform

Blind Eagle Hackers Return with Refined Tools and Sophisticated Infection Chain

Week in review: Medical device IP protection, how to select a CDR solution, Patch Tuesday forecast

Beg Bounties

HPE wars customers of Sudo flaw in Aruba AirWave Management Platform

Getting Started with Security Testing: A Practical Guide for Startups

Week in review: Most effective security practices, worst password offenders, Patch Tuesday forecast

Weekly Update 217

Week in review: Mass iPhone hacking, SSL VPNs under attack, SOC analysts overwhelmed

Infosec expert viewpoint: Vulnerability patching

Innovation drivers for the global web application firewall market

Week in review: Android Oreo security, hacking robots, DDoS attacks on the rise

Week in review: Evaluating AI-based cyber security systems, how CIA hit air-gapped computers

CryPy ransomware uses a unique Key for each encrypted file