Update Feb 3, 2021: It has been reported that macOS, AIX, and Solaris are also vulnerable to CVE-2021-3156, and that others may also still be vulnerable. Qualys has not independently verified the…

The Qualys Research Team has discovered a size_t-to-int type conversion vulnerability in the Linux Kernel’s filesystem layer affecting most Linux operating systems. Any unprivileged user can gain...

The Stack Clash is a vulnerability in the memory management of Linux, OpenBSD, NetBSD, FreeBSD and Solaris, on i386 and amd64. It can be exploited by attackers to corrupt memory and execute arbitrary…

Vulnerabilities discovered by researchers at Qualys.

The Qualys Threat Research Unit (TRU) has discovered a remote code execution vulnerability in OpenSSH’s forwarded ssh-agent. This vulnerability allows a remote attacker to potentially execute…

As part of our commitment to keeping customers and the community informed about how we are addressing and resolving the Accellion FTA cyber incident, we are providing the following update to confirm…

The Qualys Threat Research Unit (TRU) has recently unearthed four significant vulnerabilities in the GNU C Library, a cornerstone for countless applications in the Linux environment.

The Qualys Threat Research Unit (TRU) has discovered a new vulnerability in snap-confine function on Linux operating systems, a SUID-root program installed by default on Ubuntu.

Professional hackers work to keep people safe by finding security vulnerabilities before criminals do.

“Wheel” was part of the team that discovered the heap overflow vulnerability in SUDO, Baron Samedit (CVE-2021-3156), that impacted major Unix-like operating ...

Vulnerabilities discovered by researchers at Qualys.

The maintainers of the Exim email server software have released updates today to patch a collection of 21 vulnerabilities that can allow threat actors to take over servers using both local and remote...

Ivanti and Qualys partner to manage end-point vulnerability outside the firewall - SiliconANGLE

Vulnerabilities discovered by researchers at Qualys.

Full root privileges on Ubuntu 20.04, Debian 10, and Fedora 33 demonstrated.

A now-fixed Sudo vulnerability allowed any local user to gain root privileges on Unix-like operating systems without requiring authentication.

Qualys Research Labs discovered a vulnerability in OpenBSD’s OpenSMTPD mail server that allows an attacker to execute arbitrary shell commands with elevated privileges.

Recently new vulnerabilities like Zombie POODLE, GOLDENDOODLE, 0-Length OpenSSL and Sleeping POODLE were published for websites that use CBC (Cipher Block Chaining) block cipher modes.

In what may be the first public weaponizing of April’s Shadow Brokers dump of NSA exploits, a ransomware attack has crippled IT systems globally and disrupted operations at major organizations…

Worried your device is infected? Here are some of the best free malware removal tools at your disposal in 2023

The new Burp extension for Qualys Web Application Scanning imports Burp-discovered issues into Qualys WAS for integrated analysis of manual and automated web app testing data.

The BlueKeep vulnerability, initially released in May 2019, is currently being exploited in the wild. Cybersecurity researchers have spotted initial attacks of Bluekeep RDP vulnerability.

Qualys hopes to offer enterprise companies a way to ensure compliance on mobile devices.

Vulnerabilities discovered by researchers at Qualys.

Rami Malek is the star of Mr. Robot- A USA series about the life of a hacker creating massive turbulence in the modern world. Here at RSA 2016- Rami appears ...