USA media coverage.

SAP GUI Flaws Expose Sensitive Data via Weak or No Encryption

CSO Magazine

SAP GUI Input History Found Vulnerable to Weak Encryption

InfoSecurity Magazine

Researchers Uncover Weak Encryption in SAP User Interface for Windows and Java

Dark Reading

Researchers Uncover Weak Encryption in SAP User Interface for Windows and Java

Silicon Angle

Demystifying Cyber Risk: How Qualys is Transforming Security Leadership

Cyber Defense Magazine

New Vulnerabilities in Linux Core Dump Handlers Expose Password Hashes

Security Buzz

Linux flaws chain allows Root access across major distributions

Security Affairs

New Linux Flaws Enable Full Root Access via PAM and Udisks Across Major Distributions

The Hacker News

GodFather Malware Upgraded to Hijack Legitimate Mobile Apps

InfoSecurity Magazine

‘GodFather’ Malware Hijacks Banking Apps, Leverages Advanced Virtualization for Account Takeover

TechNadu

Linux Security: New Flaws Allow Root Access, CISA Warns of Old Bug Exploitation

Security Week

New Linux udisks flaw lets attackers get root on major Linux distros

Bleeping Computer

Novel TokenBreak Attack Method Can Bypass LLM Security Features

Security Boulevard

The 60,000-plus blind spots your security tools are likely skipping

SC Magazine

Silicon Valley And Hollywood Identities Invest In San Francisco Unicorns Cricket Franchise

Forbes

New Chrome, Edge Warning—Update Browser By June 26 Deadline

Forbes

Put ROCs before SOCs, Qualys tells public sector

Computer Weekly

Linux Crash Reporting Flaws (CVE-2025-5054, 4598) Expose Password Hashes

Hackread

Critical Linux Vulnerabilities Risk Password Hash Theft Worldwide

Security Boulevard

Millions Of Linux Passwords At Risk From 2 Critical Vulnerabilities

Forbes

Linux Crash Dump Flaws Expose Passwords, Encryption Keys

Gov InfoSecurity

What The LockBit Data Breach Reveals About Its Inner Workings

Security Magazine

Qualys TRU Uncovers Fileless PowerShell Loader Delivering Remcos RAT

Security Buzz

A new leak has exposed the internal operations of the ransomware giant LockBit

SC Magazine

Additional LockBit secrets uncovered by data leak

SC Magazine

Inside LockBit: New Leak Exposes Ransomware Giant's Operations

Secure World Magazine

Tenable Adds Third-Party Connectors to Exposure Management Platform

Dark Reading

Fileless PowerShell Loader Deploys Remcos RAT

Gov InfoSecurity

Hackers Actively Exploiting PowerShell to Evade Antivirus & EDR

CyberSecurity News

Updated Remcos RAT Deployed in Fileless Intrusion

SC Magazine

Fileless Remcos RAT Delivered via LNK Files and MSHTA in PowerShell-Based Attacks

The Hacker News

Qualys CEO on Cybersecurity Risks: Tech Disruptors

Bloomberg

PowerShell-Based Loader Deploys Remcos RAT in New Fileless Attack

InfoSecurity Magazine

Fileless Remcos RAT Attack Evades Antivirus Using PowerShell Scripts

Hackread

Stealth RAT Uses a PowerShell Loader For Fileless Attacks

CSO Online

Offensive Security Skills: What Cybersecurity Pros Need to Know

Dice Insights

Exploitable Storage and Backup Vulnerabilities

Solutions Review

What your tools miss at 2:13 AM: How gen AI attack chains exploit telemetry lag – Part 2

VentureBeat

Zero-Day Suspected in SAP NetWeaver Attacks

Security Buzz

The industry speaks: International Anti-ransomware Day 2025

Cyber Daily

Ransomware Won’t Knock—It’ll Kick Down the Firewall: Are You Ready?

Endpoint Security and Network Monitoring News for the Week of May 9th: SonicWall, Cyware, Barracuda and More

Solutions Review

Qualys Expands mROC Partner Alliance

Channel Vision Mag

Global Managed Service Providers Embrace Qualys' Risk Operations Center (ROC) Strategy Delivering Business-Aligned Cyber Risk Management

VMblog

Exploring Cyber Threat Intelligence with April Lenhard | RSAC Conference 2025

Techstrong

This is What Happens When Security Stops Chasing Threats and Starts Managing Risk | A Brand Story with Rich Seiersen from Qualys | An On Location RSAC Conference 2025 Brand Story

ITSP Magazine

Critical 9.8 Langflow RCE bug added to CISA vulnerability list

SC Magazine

Unpatched Erlang SSH Vulnerability Opens Door to Full System Takeover

Security Buzz

Endpoint Security and Network Monitoring News for the Week of May 2nd: Palo Alto Networks, IBM, Vectra AI, and More

Solutions Review

Cybersecurity Skill Sets Require AI Knowledge and a Lot More

Dice Insights

RSA Conference 2025: The Top News and Announcements

Solutions Review

Diligent, Cloudflare, and Qualys Team Up to Demystify Cyber Risk for the Boardroom

Enterprise Security Tech

RSA Conference: New Huntress, Qualys Offers, Malwarebytes Channel Initiatives

Channel Futures

RSA Conference 2025 Announcement Summary (Day 2) - SecurityWeek

Security Week

Qualys Adds Tool to Automate Audit Workflows

Security Boulevard

Ep1138: Operationalizing Cyber Risk with Sumedh Thakar

SAP Patches Zero Day Rated 10.0 in NetWeaver

SC Magazine

Verizon 2025 Data Breach Investigations Report shows rise in cyberattacks

Security Magazine

Changes to CVE program are a call to action on your AppSec strategy

Security Boulevard

Verizon's 2025 DBIR: Threats Are Faster, Smarter, and More Personal

Dangerous New 2FA, Crypto, Password Infostealer Update Confirmed

Forbes

Extension to Federal Information Sharing Cybersecurity Law Introduced Ahead of September Expiration Date

CPO Magazine

Bill Introduced to Extend the Cybersecurity Information Sharing Act

Security Magazine

2025 Tax Season Alert: Cybersecurity Experts Warn of AI-Powered Tax Scams and How to Protect Yourself

VMblog

Mayuresh Ektare from Qualys Addresses Risk Operations Center, Human Errors, and Vulnerability Management to Mitigate Threats

TechNadu

World Backup Day: A Clarion Call for Cyber Resilience

Secure World Magazine

World Backup Day: A Clarion Call for Cyber Resilience

SecureWorld

New Ubuntu Linux security bypasses require manual mitigations

Bleeping Computer

It's Time to Update Chrome ASAP - Again! - To Fix This Critical Flaw

ZDNET

Cyber Leaders Weigh in on Proposed Vulnerability Disclosure Policy

Security Magazine

Reflections on International Women’s Day: Celebrating leadership, diversity and empowerment

Security Info Watch

A Chinese Espionage Group is Targeting the IT Supply Chain

Security Magazine

Celebrating International Women's Day 2025 with Tech Leaders Across the Industry

VMblog

Silk Typhoon Targets IT Supply Chain in Evolving Cyber Campaign

Security Buzz

Should Contractors Disclose Vulnerabilities to Get Government Work?

SC Magazine

Federal Contractor Cybersecurity Vulnerability Reduction Act Passes in U.S. House

SecureWorld

China's Silk Typhoon APT Shifts to IT Supply Chain Attacks

Dark Reading

Black Basta Leak Offers Glimpse Into Group’s Inner Workings

Security Week

Ransomware access playbook: What Black Basta’s leaked logs reveal

CSO Online

Ransomware Gang Leak Shows Stolen Passwords And 2FA Codes Driving Attacks

Forbes

MITRE Caldera Security Advisory Warns of Maximum Severity Flaw

Security Magazine

Generative AI Shows Promise for Faster Triage of Vulnerabilities

Dark Reading

Leaked Black Basta Ransomware Chat Logs Reveal Inner Workings and Internal Conflicts

The Hacker News

Go Beyond Vulnerabilities For Your AppSec: Here's Why It's Essential

Security Boulevard

Overcoming Critical AI Security Risks Uncovered in DeepSeek-R1

Cybersecurity Insiders

Max Severity RCE Vuln in All Versions of MITRE Caldera

Dark Reading

CEO Outlook 2025

CRN

The 20 Coolest Security Operations, Risk And Threat Intelligence Of 2025: The Security 100

CRN

Qualys Identifies Critical Vulnerabilities that Enable DDoS, MITM Attacks

Security Buzz

OpenSSH Patches Vulnerabilities Allowing MitM, DoS Attacks

Security Week

OpenSSH fixes flaws that enable man-in-the-middle, DoS attacks

CSO

OpenSSH Flaws Could Enable Man-in-the-Middle Attacks, Denial of Service

SC Magazine

Critical OpenSSH Vulnerabilities Expose Users to MITM and DoS Attacks

Hackread

New OpenSSH Flaws Expose SSH Servers to MiTM and DoS Attacks

Bleeping Computer

New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks — Patch Now

The Hacker News

OpenSSH vulnerabilities could pose huge threat to businesses everywhere

Tech Radar

Proof-of-Concept Exploits Published for 2 New OpenSSH Bugs

Data Breach Today

Proof-of-Concept Exploits Published for 2 New OpenSSH Bugs

BankInfoSecurity

Proof-of-Concept Exploits Published for 2 New OpenSSH Bugs

Gov InfoSecurity

New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks — Patch Now

CyberSecurity News

7 Best Vulnerability Scanning Tools & Software for 2025

eSecurity Planet

Suspicious file analysis: Enhance your SOC to fight sophisticated attacks

ReversingLabs

Patch Tuesday: Microsoft Fixes 63 Bugs with 2 Zero-Days

Hackread

Security Researchers Warn of New Risks in DeepSeek AI App

BankInfoSecurity

Security Researchers Warn of New Risks in DeepSeek AI App

Gov InfoSecurity

Qualys Puts the Power of ROC into MSSPs’ Hands

MSSP Alert

The Gately Report: More Services, Certifications Coming for Qualys Partners

Channel Futures

Qualys Introduces Managed Risk Operation Center (mROC) Partner Alliance to Scale Cyber Risk Services

VMblog

Dilip Bachwani on Analyzing DeepSeek with TotalAI

Techstrong

Qualys TotalAppSec Strengthens Application Risk Management

Security Boulevard

DeepSeek-R1 LLM Fails Over Half of Jailbreak Attacks in Security Analysis

Hackread

MSSP Market Update: Judy Security, Strike Graph Partner for NIST Compliance

MSSP Alert

Qualys Introduces Managed Risk Operation Center Partner Alliance to Scale Cyber Risk Services

Disaster Recovery Journal

Qualys Unveils TotalAppSec

Global Security Mag

Channel Brief: Qualys Launches TotalAppSec Solution

Channele2e

Qualys introduces Managed Risk Operation Center (mROC) Partner Alliance

Security Info Watch

DeepSeek AI Model Riddled With Security Vulnerabilities

Security Boulevard

Secure by Design and Secure by Default: You Need Both to Boost AppSec

Security Boulevard

Bots Now Dominate the Web, and That’s a Problem

Tech News World

Qualys, Inc. Introduces TotalAppSec To Help Organizations Track And Reduce Cyber Risks

IT Security Wire

Qualys Unveils TotalAppSec: New Comprehensive Application Risk Management Solution

CIO Influence

Qualys unveils TotalAppSec, a comprehensive application risk management solution

Security Info Watch

New Mirai Variant Targets Flaws in Cameras and Routers

BankInfoSecurity

New Mirai Variant Targets Flaws in Cameras and Routers

Gov InfoSecurity

Mirai Botnet Spinoffs Unleash Global Wave of DDoS Attacks

Dark Reading

New Mirai Variant Murdoc_Botnet Launches DDoS Attacks via IoT Exploits

Hackread

Mirai Variant Murdoc_Botnet Exploits AVTECH IP Cameras and Huawei Routers

The Hacker News

New Mirai Variant ‘Murdoc_Botnet’ Targets AVTECH Cameras and Huawei Routers

Silicon Angle

Cyber Insights 2025: Attack Surface Management

Security Week

Critical Flaws in Veeam Service Provider Console Demand Urgent Action

Security Buzz

Stop Wasting Money on Ineffective Threat Intelligence: 5 Mistakes to Avoid

CSO

Microsoft Reveals macOS Vulnerability That Allowed System Integrity Protection Bypass

Silicon Angle

Apple Bug Allows Root Protections Bypass Without Physical Access

Dark Reading

New Bug Lets Attackers Bypass macOS System Integrity Protection

SC Magazine

Do Not Click—New Gmail, Outlook, Apple Mail Warning For Billions

Forbes

Moxa Patches Two Flaws in its OT Devices, One a Critical RCE

SC Magazine

What Companies Need to Help Secure AI

CIO Dive

What companies need to help secure AI

Cybersecurity Dive

Russian Hackers Turn Trusted Online Stores Into Phishing Pages

CSO

New PhishWP Plugin on Russian Forum Turns Sites into Phishing Pages

Hackread

New PhishWP Plugin Enables Sophisticated Payment Page Scams

Infosecurity

WordPress Plugin Exploited to Turn Legitimate Sites Into Phishing Traps

Security Boulevard