https://cybertoolchain.io/tools/qualys New releases and features in Qualys, tracked by The Cyber Toolchain. en Wed, 21 Oct 2026 02:59:03 GMT https://blog.qualys.com/category/vulnerabilities-threat-research https://blog.qualys.com/category/vulnerabilities-threat-research Wed, 21 Oct 2026 02:59:03 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/qualys https://blog.qualys.com/category/product-tech https://blog.qualys.com/category/product-tech Thu, 17 Sep 2026 22:52:48 GMT Qualys adds AI-Powered Policy Creation, Audit Insights continuous monitoring, and Audit Fix automated remediation to Policy Audit⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds AI-Powered Policy Creation for Policy Audit, enabling teams to upload frameworks, benchmarks, vendor guidance, or internal policies and use AI assistance to map controls to policy logic, assessment criteria, and expected values — with human review and approval before publication.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces Audit Insights to continuously monitor controls, detect compliance drift, and automatically collect evidence throughout the year instead of at point-in-time assessments. • Introduces Audit Fix to streamline correction of compliance findings through pre-built remediation content and automated workflows, validating that fixes remain in place over time. • Adds risk-based prioritization to Policy Audit findings by incorporating asset criticality, threat exposure, business context, ransomware relevance, and security risk indicators. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/qualys https://blog.qualys.com/category/product-tech https://blog.qualys.com/category/product-tech Thu, 17 Sep 2026 22:52:48 GMT Qualys adds AI-Powered Policy Creation, Audit Insights continuous monitoring, and Audit Fix automated remediation to Policy Audit⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds AI-Powered Policy Creation for Policy Audit, enabling teams to upload frameworks, benchmarks, vendor guidance, or internal policies and use AI assistance to map controls to policy logic, assessment criteria, and expected values — with human review and approval before publication.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces Audit Insights to continuously monitor controls, detect compliance drift, and automatically collect evidence throughout the year instead of at point-in-time assessments. • Introduces Audit Fix to streamline correction of compliance findings through pre-built remediation content and automated workflows, validating that fixes remain in place over time. • Adds risk-based prioritization to Policy Audit findings by incorporating asset criticality, threat exposure, business context, ransomware relevance, and security risk indicators. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/qualys https://blog.qualys.com/category/product-tech https://blog.qualys.com/category/product-tech Tue, 15 Sep 2026 18:00:53 GMT Qualys TruRisk Eliminate adds AI-powered Patch Reliability Scoring and automated host isolation via Cloud Agent for overdue CISA KEV vulnerabilities.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `patch.kb` QQL filter in the Patch Management app (Patches > Windows) to surface Patch Reliability assessments for specific KBs, with `Patch Reliability: Low` drill-down opening an AI Assessment window showing known issues and source links via `Detailed Report`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds AI-Powered Patch Reliability Scoring in TruRisk Eliminate that combines LLM-analyzed public sentiment with Qualys telemetry on patch rollback and vulnerability reopen rates to produce a pre-deployment reliability score (Low / High) for each patch. • Adds automated host isolation in TruRisk Eliminate, triggered natively through the Qualys Cloud Agent when a user-defined QQL policy is met — no EDR integration required — quarantining the host within seconds and writing a timestamped audit record of which rule, host, and deadline triggered the action. • Adds a CISA KEV isolation QQL use case using `vulnerabilities.status:[ACTIVE,NEW,REOPENED]`, `vulnerabilities.riskFactor.cisaKEVDueDate < 'now-1s'`, and `vulnerabilities.riskFactor.cisaKnownExploits:TRUE` to automatically isolate hosts where a KEV deadline has passed and the vulnerability remains open. • Supports ring-based phased deployment in TruRisk Eliminate Patch Management, allowing low-reliability patches to be progressively validated through Test → Staging → Production environments before broader rollout. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/qualys https://blog.qualys.com/category/product-tech https://blog.qualys.com/category/product-tech Tue, 15 Sep 2026 18:00:53 GMT Qualys TruRisk Eliminate adds AI-powered Patch Reliability Scoring and automated host isolation via Cloud Agent for overdue CISA KEV vulnerabilities.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `patch.kb` QQL filter in the Patch Management app (Patches > Windows) to surface Patch Reliability assessments for specific KBs, with `Patch Reliability: Low` drill-down opening an AI Assessment window showing known issues and source links via `Detailed Report`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds AI-Powered Patch Reliability Scoring in TruRisk Eliminate that combines LLM-analyzed public sentiment with Qualys telemetry on patch rollback and vulnerability reopen rates to produce a pre-deployment reliability score (Low / High) for each patch. • Adds automated host isolation in TruRisk Eliminate, triggered natively through the Qualys Cloud Agent when a user-defined QQL policy is met — no EDR integration required — quarantining the host within seconds and writing a timestamped audit record of which rule, host, and deadline triggered the action. • Adds a CISA KEV isolation QQL use case using `vulnerabilities.status:[ACTIVE,NEW,REOPENED]`, `vulnerabilities.riskFactor.cisaKEVDueDate < 'now-1s'`, and `vulnerabilities.riskFactor.cisaKnownExploits:TRUE` to automatically isolate hosts where a KEV deadline has passed and the vulnerability remains open. • Supports ring-based phased deployment in TruRisk Eliminate Patch Management, allowing low-reliability patches to be progressively validated through Test → Staging → Production environments before broader rollout. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/qualys https://blog.qualys.com/category/vulnerabilities-threat-research https://blog.qualys.com/category/vulnerabilities-threat-research Wed, 22 Jul 2026 16:23:46 GMT Qualys releases QID coverage for CVE-2026-64600 (RefluXFS), a critical XFS kernel privilege-escalation vulnerability affecting RHEL, Oracle Linux, Amazon Linux, and Fedora. • New QID 387841 detects the RefluXFS local privilege escalation (CVE-2026-64600) via XFS reflink direct-I/O race condition. • New QID coverage added across VULNSIGS-2.6.651-2 through 2.6.656-2 for vendor kernel advisories on RHEL, Oracle Linux, AlmaLinux, Rocky Linux, and Fedora addressing CVE-2026-64600. • Existing QID 45097 (Linux Kernel Version Running) can be used to identify the active kernel version and assess exposure to RefluXFS across Linux endpoints. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/qualys