Key Takeaways At 1,252 CVEs this month, “patch everything now” isn’t a plan; teams need to decide what to patch first, what to test, and what to mitigate.…
Tag: Qualys Security Blog
PHP2Shell and Node2Shell: Find, Fix, and Verify Across Your Web Apps and APIs
Key Takeaways Neither flaw is in your application code. Every app and API on a vulnerable runtime inherits the risk. PHP2Shell (CVE-2026-109618,…
AI Didn’t Create a New Kind of Risk. It Removed the Time You Had to Fix the Old One.
Mandiant’s AI Risk and Resilience 2026 report shows attackers putting agentic AI to work across the intrusion. Vulnerability exploitation is still the…