Qualys

Can't patch PHP2Shell yet? Here's how to build a stopgap with the controls you own. PHP2Shell comes with a clear instruction: update PHP. But patching at this scale still takes time. In Qualys telemetry, only 199,000 of the 156 million PHP package installations with a known version (about 0.13%) had been patched in the first 12 hours after disclosure. Here is how to bridge the gap between disclosure and patch, in four steps: 1. Find and Prioritize Exposed PHP 2. Apply the Qualys Mitigation 3. Add Layers from the Security Stack you already run 4. Patch, Restart, and Re-Validate Learn more and don't forget to access our free PHP2Shell service to help product your environment against this threat: blog.qualys.com/product-tech… #PHP2Shell

Qualys is ranked #1 by @infotechRG's Vulnerability Management Emotional Footprint report in @SW_Reviews! Our recognition is built entirely on verified end/user reviews from hundreds of users. Thank you to our customers for taking the time to share insights that help other industry practitioners make informed decisions. Find out why we consistently have the highest reviews here: softwarereviews.com/products… #CustomerStory #Qualys

Earlier this month, @ashimmy interviewed Qualys President and CEO Sumedh Thakar and other Qualys leaders at ROCon Americas for Techstrong TV. Sumedh shared his perspective on the current state of cybersecurity, why automated remediation is critical as frontier AI accelerates threats, how ROCon has evolved, the role of AI-ROC in risk operations, and his predictions for cybersecurity in 2027. Don't miss the full interview from @TechstrongTV here: techstrong.tv/videos/qualys-… #AI #Cybersecurity

In an interview with VARINDIA, our CMO, May Mitchell, breaks down how Qualys aligns brand positioning with real enterprise security challenges. Effective marketing requires keeping our narrative simple, compelling, and tailored to the problems leaders need to address. We meet organizations wherever they are on their cyber risk journey to help build frontier AI readiness. Ultimately, it comes down to strong product-market fit and listening directly to customer feedback. Read the complete feature on VARINDIA: bit.ly/4zUuXtK #RiskOperations #Cybersecurity #Qualys

Patch automation has existed for years. What teams have lacked is the confidence to trust it. See how TruConfidence™ in Qualys TruRisk™ Eliminate 2.0 makes autonomous remediation safe to trust. 📅 Live webinar: Wednesday, November 4th | 9:00 AM PT | 12:00 PM ET Link to the webinar: brighttalk.com/webcast/11673… #Qualys #cybersecurity #TruConfidence #Webinar

PHP has released security updates for two critical vulnerabilities that can allow unauthenticated remote code execution. Our Qualys Threat Research Unit (TRU) has uncovered that millions of installations are at risk, and attack traffic linked to the vulnerabilities have already been reported. Here's how we’re stepping up to help. Qualys is offering free services to help organizations identify and mitigate exposure to PHP2Shell vulnerabilities. Our service includes access to products from our TruRisk Platform, including VMDR, TruRisk Management, and TruRisk Eliminate. Read the full coverage from @techday_au here: securitybrief.com.au/story/q… #PHP2Shell #PHP

When autonomous AI can discover and exploit vulnerabilities in hours rather than weeks, board-level cyber governance has to evolve. Measuring theoretical risk scores is no longer enough- directors need visibility into validated, business-context risk. On October 29, our CISO, Nathan Smolenski, will join the @National Association of Corporate Directors (NACD) for The Mythos Inflection Point: Board Oversight in the Age of Autonomous AI. Together, they will discuss: > How autonomous AI changes the window between vulnerability discovery and exploitation. > Key questions board members should ask management to evaluate operational readiness. > Shifting governance frameworks toward validated, risk-based decision-making. Register here to join the discussion: bit.ly/4dSZzDC #CyberGovernance #BoardOversight #AISecurity #Qualys

PHP2Shell: Know your exposure. Take action. PHP2Shell is CVSS 9.2 critical, and end-of-life PHP won't get a patch. Qualys is offering a free 15-day mitigation service for up to 1,000 assets that can help you: -Detect vulnerable PHP instances within 60 minutes -Validate exploitability to prioritize real risk - Mitigate what you can't patch with patchless remediation Get Free PHP2Shell Mitigation Service: qualys.com/php2shell-risk-as…

PHP2Shell is two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619, CVSS v4.0 9.2) that can allow unauthenticated remote code execution, and attack traffic has already been reported. See how Qualys helps you detect exposure with InstaScan, confirm exploitability with TruConfirm, and mitigate before you patch with TruRisk Eliminate. blog.qualys.com/vulnerabilit…

The latest PHP flaws have been dubbed the next Log4J with millions of installations affected around the world, including government services, critical infrastructure, and enterprises. Qualys is offering its solutions for free as a service to the community to help organizations detect their exposure, validate if it's exploitable in each specific environment, and patch or mitigate what remains vulnerable. More info at bit.ly/4dWNxJo

ROCon APAC, the Qualys Risk Operations Conference, is built to address a simple question: how do you run a security program when exposures occur faster than your team can respond? Join us in Mumbai 18-19 November to see how today's security leaders are moving from enumerating risk to eliminating it. What to expect: ✔️ Free Hands-On Training & CISO Workshop (Nov 18): Four tracks covering Qualys ETM, scanning/agent troubleshooting, cloud/AI risk, and RemOps. ✔️Executive Keynotes (Nov 19): Insights on building an AI ROC from CEO Sumedh Thakar, and Qualys leaders Shailesh Athalye, Kunal Modasiya, among others. ✔️Technical Sessions: Deep dives on verified risk reduction, exploitability, ITOps remediation, cloud/containers, and new attack surfaces. ✔️Real-World Impact: Customer case studies on prioritizing exploitability and optimizing remediation programs. Register today at: bit.ly/4z2gT1g #roconapac #qualys #cybersecurity