https://cybertoolchain.io/tools/qualys-patch-management New releases and features in Qualys Patch Management, tracked by The Cyber Toolchain. en Wed, 28 Oct 2026 06:35:45 GMT https://blog.qualys.com/category/vulnerabilities-threat-research https://blog.qualys.com/category/vulnerabilities-threat-research Wed, 28 Oct 2026 06:35:45 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/qualys-patch-management https://blog.qualys.com/category/product-tech https://blog.qualys.com/category/product-tech Wed, 14 Oct 2026 12:46:46 GMT TruRisk Eliminate 2.0 debuts TruConfidence AI orchestration engine and Agent Sara for autonomous, ring-based patch remediation at scale.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces TruRisk Eliminate 2.0, an Autonomous RemOps platform that replaces ticket-driven patching with a continuous Decide → Execute → Prove cycle across the full attack surface.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces TruConfidence, an AI-powered Remediation and Orchestration Intelligence engine that selects the safest remediation action — patch, mitigation, uninstall, or existing control — per validated exposure. • Introduces Agent Sara, Qualys' autonomous AI agent, which executes TruConfidence remediation plans in customer-defined waves and progressive rings with automatic rollback on anomaly detection. • Extends scanner-based remediation to edge and perimeter devices using existing Qualys scanners, closing coverage gaps that agent-only approaches miss. • Supports zero-touch automation for high-reliability patches on low-impact applications alongside ring-based deployment for higher-risk changes, with operational health monitoring and sub-0.1% rollback rate. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/qualys-patch-management https://blog.qualys.com/category/product-tech https://blog.qualys.com/category/product-tech Wed, 14 Oct 2026 12:46:46 GMT TruRisk Eliminate 2.0 debuts TruConfidence AI orchestration engine and Agent Sara for autonomous, ring-based patch remediation at scale.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces TruRisk Eliminate 2.0, an Autonomous RemOps platform that replaces ticket-driven patching with a continuous Decide → Execute → Prove cycle across the full attack surface.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces TruConfidence, an AI-powered Remediation and Orchestration Intelligence engine that selects the safest remediation action — patch, mitigation, uninstall, or existing control — per validated exposure. • Introduces Agent Sara, Qualys' autonomous AI agent, which executes TruConfidence remediation plans in customer-defined waves and progressive rings with automatic rollback on anomaly detection. • Extends scanner-based remediation to edge and perimeter devices using existing Qualys scanners, closing coverage gaps that agent-only approaches miss. • Supports zero-touch automation for high-reliability patches on low-impact applications alongside ring-based deployment for higher-risk changes, with operational health monitoring and sub-0.1% rollback rate. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/qualys-patch-management https://blog.qualys.com/category/product-tech https://blog.qualys.com/category/product-tech Tue, 29 Sep 2026 08:28:47 GMT Qualys TruRisk Eliminate adds Patch Blocking Rules and AI-Powered Patch Reliability Scoring to keep bad patches out of automation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Patch Blocking Rules` in `TE > Configuration > Patch Blocking Rules` (available for Windows, Linux, and Mac in release 4.2), letting you define patches via a QQL query and block them across every deployment job at once without editing individual jobs; scope is controlled by up to five asset tags per rule, with up to 10 rules per platform, and each rule requires a name and blocking reason.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds AI-Powered Patch Reliability Scoring that combines LLM analysis of real-world internet feedback with Qualys rollback and vulnerability-reopen telemetry to rate each patch High, Medium, Low, or Unidentified — automatically skipping Low-reliability patches from zero-touch jobs when reliability intelligence is added to the job's QQL in the `Select Patches` step. • Introduces Qualys-curated mitigations as a complementary layer to reduce exposure while a blocked or low-reliability patch is held in testing and staging. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/qualys-patch-management https://blog.qualys.com/category/product-tech https://blog.qualys.com/category/product-tech Tue, 29 Sep 2026 08:28:47 GMT Qualys TruRisk Eliminate adds Patch Blocking Rules and AI-Powered Patch Reliability Scoring to keep bad patches out of automation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Patch Blocking Rules` in `TE > Configuration > Patch Blocking Rules` (available for Windows, Linux, and Mac in release 4.2), letting you define patches via a QQL query and block them across every deployment job at once without editing individual jobs; scope is controlled by up to five asset tags per rule, with up to 10 rules per platform, and each rule requires a name and blocking reason.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds AI-Powered Patch Reliability Scoring that combines LLM analysis of real-world internet feedback with Qualys rollback and vulnerability-reopen telemetry to rate each patch High, Medium, Low, or Unidentified — automatically skipping Low-reliability patches from zero-touch jobs when reliability intelligence is added to the job's QQL in the `Select Patches` step. • Introduces Qualys-curated mitigations as a complementary layer to reduce exposure while a blocked or low-reliability patch is held in testing and staging. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/qualys-patch-management https://blog.qualys.com/category/product-tech https://blog.qualys.com/category/product-tech Tue, 18 Aug 2026 18:06:38 GMT Qualys Patch Management adds AI-Powered Patch Reliability Scoring combining LLM sentiment analysis and telemetry signals. • New Qualys AI-Powered Patch Reliability Scoring predicts patch deployment success before rollout by combining LLM-analyzed global public sentiment (technical discussions, release feedback) with Qualys telemetry on patch rollback rates and vulnerability reopen rates into a single reliability score. • TruRisk Eliminate now reports true remediation state — including reboot completion — so teams can verify KEV deadline compliance after deploying cumulative updates. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/qualys-patch-management https://blog.qualys.com/category/product-tech https://blog.qualys.com/category/product-tech Tue, 21 Jul 2026 15:05:36 GMT Qualys TruRisk Eliminate adds AI-Powered Patch Reliability Score and zero-touch automation for low-risk application patching. • New AI-Powered Patch Reliability Score uses crowd-sourced signals from patch deployments across the internet to assess whether a patch is safe to deploy before rollout. • New zero-touch patch automation enables low-risk applications (e.g., browsers and standalone software) to receive patches automatically after a one-time job setup, with no manual intervention required. • Supports autonomous remediation workflow: high-reliability patches deploy with confidence while low-reliability patches are flagged for review, balancing speed and production safety. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/qualys-patch-management https://blog.qualys.com/category/qualys-insights https://blog.qualys.com/category/qualys-insights Wed, 08 Jul 2026 14:56:19 GMT Qualys Patch Management adds autonomous zero-day remediation via TruRisk Eliminate and Windows 11 upgrade orchestration through QQL and CAR scripts. • New autonomous remediation workflows via Qualys TruRisk Eliminate enable machine-speed patching, mitigation, container image replacement, workload isolation, and firewall policy updates triggered directly from confirmed vulnerability findings. • Supports patchless/compensating mitigation actions when immediate patching is not feasible, reducing exposure window while permanent fixes are prepared. • Enables enterprise-wide Windows 11 upgrade orchestration through TruRisk Eliminate, covering three paths: enablement packages, ISO-based feature updates, and direct Windows 10-to-Windows 11 upgrades. • New QQL filters for patch targeting: `patch.title:"Enablement"` for enablement packages and `patch.isFeatureUpdate:true AND patch.vendor:\`Microsoft\`` for ISO-based feature updates. • Windows 10-to-Windows 11 upgrade scripts now available in the Custom Assessment and Remediation (CAR) library under Script Library → System Updates and Upgrades → Windows OS Upgrades. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/qualys-patch-management