Qualys CyberSecurity Asset Management

No entries match these filters. Clear filters

1. changelog Jul 14, 2026 · issue 015

   Qualys ETM Identity unifies identity risk, attack pathattack pathA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately. analysis, and automated remediation into CSAM's risk model.

   ⤢ ⤢ ⤢ ⤢
   • New Qualys ETM Identity module discovers risky identities and correlates identity and asset risk into a unified risk model.
   • Supports attack path analysis and domain trust mapping to visualize lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access. exposure across Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. environments.
   • Introduces Identity TruRisk scoring to quantify identity risk based on criticality and associated misconfiguration severity.
   • Detects Pass-the-Hash (PtH) risk conditions including legacy NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. authentication, cached credentials, weak authentication settings, and excessive admin privileges.
   • Maps DCSyncDCSyncAn attack that abuses Active Directory replication permissions to request password-related data from a domain controller. It imitates the synchronization normally performed between controllers. exposure in identity graphs, surfacing identities with replication rights before they can be exploited.

   +2 more show less

   • Identifies accounts with disabled KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. pre-authentication and other risky identity configurations.
   • Enables automated remediation workflows driven by correlated identity posture, exploitability, and asset context.

   7 details in Everything

2. changelog Jul 7, 2026 · issue 009

   Qualys CSAM integrates with Cisco Cloud Control, exposing asset inventory, TruRisk scores, and remediation workflows to Cisco AI agents.

   └──▷ HOW TO FIND IT
   Use Cisco AI Canvas to query Qualys asset and risk context for a specific host directly from the AI agent workflow.
   📍In Cisco AI Canvas, navigate to the AI Agents panel, select the Qualys integration tools (Unified Asset Inventory, TruRisk Prioritized Findings), and invoke a tool call for a target host to retrieve vulnerability detections, TruRisk score, exploit context, and available remediation workflows.
   • New Cisco Cloud Control integration connects Qualys Unified Asset Inventory, TruRisk Prioritized Findings, and remediation workflows into Cisco's AI Canvas environment.
   • Cisco AI agents can now query Qualys at runtime — pulling asset inventory, vulnerability detections per host/workload, TruRisk scores, exploit context, and triggering remediation or mitigation workflows as typed tool calls.
   • Enables cross-domain asset and risk visibility spanning cloud, network, identity, datacenter, and security domains without manual tool-switching.

   3 details in Everything