Qualys

We're excited to welcome Nathan Smolenski as Qualys' new Chief Information Security Officer! Nathan brings 20+ years of cybersecurity leadership across financial services, insurance, and technology, and was most recently CISO at Cyera. He'll lead our cybersecurity strategy, protecting our products, operations, and global business as we continue to help customers stay ahead of accelerating threats. Welcome to the team, Nathan! #Cybersecurity #Leadership #Qualys

Less than 1% of CVEs ever get weaponized. But for that 1%, the response window is existential. Join us today as Saeed Abbasi, Head of the Qualys Threat Research Unit (TRU), brings that data-driven perspective to the CVE Program's virtual event, "CVE in an Era of AI-Enabled Vulnerability Discovery," hosted by CVE. org / MITRE. Saeed joins the Consumer Perspectives Panel with security leaders from Capital One, Root Evidence, and Tenable, moderated by MITRE. The broader event brings together experts from CISA, Microsoft, NVIDIA, Cisco, Red Hat, OpenSSF, Broadcom, Empirical Security, and more. The defining question: AI is accelerating vulnerability discovery. Can defenders keep pace? TRU data shows defenders holding the line at a ~9-day median detection-to-closure. The real question is how long that math holds as volume explodes, and what must change upstream. 📅 July 30 | 11:45 AM ET | Free & virtual https://lnkd.in/gt8Fw5Zc #CVE #QualysTRU #ThreatResearch #VulnerabilityManagement #Cybersecurity #AI

We’re back in São Paulo for ROCon LATAM, bringing together CISOs, security leaders, and practitioners on August 18 for a day of strategy, innovation, and collaboration. As AI accelerates vulnerability discovery, compresses exploit timelines, and expands the attack surface, organizations need a new approach to cyber risk—one that unifies visibility, prioritizes what matters most, and enables teams to respond at machine speed. Estamos de volta a São Paulo para a ROCon LATAM, reunindo CISOs, líderes e profissionais de cybersecurity no dia 18 de agosto para um dia de estratégia, inovação e colaboração.  À medida que a IA acelera a descoberta de vulnerabilidades, reduz os prazos de exploração e expande a superfície de ataque, as organizações precisam de uma nova abordagem para o risco cibernético - uma que unifique a visibilidade, priorize o que é mais importante e permita que as equipes respondam na velocidade da IA. Register now: https://lnkd.in/dJrQfMn4  #CyberSecurity #AI #CyberResilience #ROCon2026 

Scanning needs to mind the gap. By the time a scan finds a vulnerability, attackers already know about it. AI has cut exploit timelines from weeks to hours. The old scan-and-wait model can't keep up. A new era of scanning arrives soon. Meet us at Black Hat USA, booth 2333, to see it first. https://bit.ly/4gUP7xA #BHUSA #Qualys #CyberSecurity

"What do a cybersecurity CEO and a world-class cricketer have in common? A masterclass in performing under pressure." Qualys President & CEO Sumedh Thakar sat down with SF Unicorns star R. Ashwin to find out. Cybersecurity CEOs and world-class athletes understand one thing well: pressure. According to spinner R. Ashwin, everyone has a bandwidth in which they can perform at their best under duress, and that window is short. The real skill is making the most of it with hard work. We’re proud to be the Major Partner and Official Cybersecurity Partner of the San Francisco Unicorns – demonstrating that relentless work ethic is what matters the most. #Leadership #Cybersecurity #MLC #Cricket #Qualys

While AI adoption is an enterprise imperative today, AI governance faces a proof problem: most teams have zero technical evidence of where AI runs, how AI behaves in production, or whether controls are working. Qualys TotalAI brings fast-moving, ungoverned AI adoption under control by turning unified, continuous code-to-runtime AI security evidence into provable AI governance. • Discover: Build a trusted inventory of shadow AI, MCP servers, all AI workloads, and active models. • Secure: Assess AI risk across posture, behavior, runtime, and code. • Govern: Generate audit-ready reporting for board, customers, and regulatory authorities. Read the full breakdown here - https://lnkd.in/eWz2DzYj #AIGovernance #AICompliance #OWASP #NIST #EUAIAct

Siloed security tools are the biggest blind spot for modern hybrid and AI workloads. Relying on disconnected platforms for cloud and container security tools creates a dangerous gap between detection and action. To build true operational resilience, you need a unified view across your entire environment. With backlogs growing past human scale, a unified attack surface with autonomous remediation is the way forward. Watch the webinar to master unified cloud defense: https://lnkd.in/gckTQ9gX #CloudSecurity #AutonomousRemediation #SecOps Abhinav Mishra

Your scanner says the app is covered, but it tested one documented role. BOLA, BFLA, and IDOR went untested behind it. Three gaps show up in almost every program mapped to OWASP Top 10 2025: > API authorization tested past a single happy-path role > OAuth2 and JWT endpoints sitting outside scan scope > Supply chain and script injection that surface before a CVE exists Which gap is your program carrying right now? See how your current coverage measures up before your next audit cycle. Read the practitioner's guide to close your AppSec coverage gaps: https://lnkd.in/ec2-Y78a #AppSec #APISecurity #OWASP2025 #OWASPTop10 #Qualys #TotalAppSec Shravan Dandage

Mythos has put the spotlight on unresolved gaps, but it’s no cause for panic – it's a wakeup call to fix your exposure and vulnerability management. In the Gartner report, “Pivotal Moment: Capitalize on Mythos Hype to Fix Your Exposure and Vulnerability Management,” experts explain why security leaders should move beyond static severity scoring and offer solutions on prioritizing response. Our takeaways from the report: ✅ Why frontier AI models are accelerating focus on exposure management ✅ How Exposure Windows measure risk more meaningfully than severity scores ✅ How to correlate exposures across attack surfaces to validate real attack paths ✅ How to set shorter remediation SLAs with clearer ownership Get the report here: https://lnkd.in/ewHhp3Ea #Mythos #Cybersecurity #AI

Cybersecurity teams can't keep up with machine-speed threats using manual workflows alone. That's why the Qualys platform has evolved beyond dashboards and APIs. Platform capabilities are now available in an agentic way, enabling AI agents to continuously evaluate threats, automate cyber risk workflows, and help security teams respond faster- 24/7. Watch how our cyber risk agents act as digital teammates, augmenting your team with continuous intelligence and automation. Join us at Black Hat USA to see our AI Agents in action and experience the future of agentic cybersecurity, or book a one-to-one meeting with our security experts. https://lnkd.in/gyUN4WiR #BlackHat #BHUSA #AI #AgenticAI #Cybersecurity #Qualys Dilip Bachwani