Qualys Cloud Platform release 2.17 includes updates and new features for:
- AssetView (version 2.17.0)
- Cloud Agent Platform (version 1.8.0)
- Continuous Monitoring (version 1.16.0)
- Security Assessment Questionnaire (version 2.2.0)
A number of security researchers recently discovered that Dell laptops come pre-installed with an additional root certificate call eDellRoot. Since the private key is also available on the machine this exposes their customers to the risk of a Man-in-the-Middle (MITM) attack. In a MITM attack, the attacker sits on the network between server and client and uses the eDellRoot certificate to intercept and manipulate HTTPS connections. This vulnerability leaves anyone using these Dell laptops at risk for sensitive data exposure and even infections with malicious payload, all under the cover of a trusted connection.