{"id":3242,"date":"2020-12-23T11:38:55","date_gmt":"2020-12-23T11:38:55","guid":{"rendered":"https:\/\/www.intelligentcio.com\/north-america\/?p=3242"},"modified":"2021-01-05T11:27:22","modified_gmt":"2021-01-05T11:27:22","slug":"qualys-offers-free-vulnerability-management-service-following-solarwinds-breach","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/north-america\/2020\/12\/23\/qualys-offers-free-vulnerability-management-service-following-solarwinds-breach\/","title":{"rendered":"Qualys offers free vulnerability management service following SolarWinds breach"},"content":{"rendered":"\n

Qualys is offering a free 60-day integrated Vulnerability Management, Detection and Response service to help organizations quickly assess devices impacted by SolarWinds Orion vulnerabilities, SUNBURST Trojan detections and FireEye Red Team tools.<\/em><\/strong><\/p>\n\n\n\n

Qualys, a leading provider of cloud-based security and compliance solutions, has announced its research team, using the Qualys Cloud Platform, has identified 7.54\u202fmillion\u202fvulnerabilities related to\u202fFireEye\u202fRed Team assessment tools and compromised versions of SolarWinds Orion, tracked as Solorigate or SUNBURST, across its 15,700 member customer base.<\/p>\n\n\n\n

Of the vulnerabilities identified, researchers noted that across 5.29 million unique assets most are related to the FireEye Red Team tools. These findings highlight the scope of the potential attack surface if these tools are misused. The research team further identified that 99.84% of the seven million vulnerability instances are from eight vulnerabilities in Microsoft software that have patches available.  <\/p>\n\n\n\n

To help mitigate risk and exposure from this breach, Qualys is providing IT and security teams free 60-day access to its integrated Vulnerability Management, Detection and Response service, which leverages the power of the Qualys Cloud Platform.<\/p>\n\n\n\n

More information can be found on the Qualys advisory blog at qualys.com\/solarwinds-fireeye-advisory-blog-post<\/a>.<\/p>\n\n\n\n

\u201cThe Qualys free solution provides much-needed visibility and response in a single app that many need at a time when IT and security organizations around the world are scrambling to shore up their systems,\u201d said Frank Dickson, Program Vice President, Security and Trust at IDC. \u201cQualys’ solution draws from its native security and compliance platform to deliver vulnerability management, detection and response, the ability to detect malware, and the integrity of files. It is a great solution, easy to use and deploy, and it\u2019s hard to beat as it is free.\u201d<\/p>\n\n\n\n

\u201cThe scope of this nation-state attack is massive, as overnight a widely used and trusted piece of software turned into known malware,\u201d said Sumedh Thakar, President and Chief Product Officer at Qualys. \u201cSince its discovery, Qualys teams have been actively researching the issue and helping customers assess their environments. The good news is that nearly all of the CVEs are patchable, and we\u2019ve made this solution available to the industry so they can immediately work to protect themselves from being exploited by these vulnerabilities.\u201d<\/p>\n\n\n\n

Qualys is offering a fully functional license free for 60 days. The license enables full situational awareness, detection and remediation to reduce risk and exposure from the SolarWinds and FireEye breaches. It includes:<\/p>\n\n\n\n