@Meghabl

The GitHub RCE That Could Have Compromised Millions of Repositories: CVE-2026-3854 — And How Qualys Helps You Find It

May 24 · 18 min read · Let me be honest with you — when I first read about this one, I paused and re-read it twice. Before we dive in — what is GitHub, and why does this matter? If you work in security but haven't spent muc

From Generative to Agentic: How AI Got Its Own Hands

Apr 26 · 11 min read · There's a moment in every good thriller where the antagonist stops taking orders and starts making decisions. That's roughly what happened with AI over the last two years. In November, we talked about

OWASP Top 10 (2025 Edition)

Mar 14 · 1 min read · Introduction If you read my earlier post on the OWASP Top 10 (2021), you'll remember I ended it with a section on what changes were expected in the 2025 edition. Well — it's here. And it's more signif

The Dark Side of AI: Hallucinations, Attacker Playbooks, and What Defenders Must Know

Feb 11 · 15 min read · In November, I wrote about how AI is transforming cybersecurity for the better — faster detection, smarter vulnerability prioritisation, SOC automation that actually works. I meant every word of it. B

Mapping Qualys PC Controls to CIS Level 1: A Practitioner's Guide

Jan 18 · 6 min read · If you have spent time working with Qualys Policy Compliance (PC), you know that the platform ships with pre-built policies mapped to CIS Benchmarks. On the surface, this looks like a complete solutio