ET-3433
📛 Threat Title
Ruleset Update Summary - 2026/08/28 - v11269
Indicators of Compromise (0)
No indicators of compromise on this threat.
References (1)
- Ruleset Update Summary - 2026/08/28 - v11269 Emerging Threats Community
Remediations (10)
-
web:community.emergingthreats.net
Summary : 17 new OPEN, 18 new PRO (17 + 1) Added rules: Open: 2071368 - ET WEB_SPECIFIC_APPS Red Hat Keycloak Admin REST API PII Disclosure (CVE-2026-17059) (web_specific_apps.rules) 2071369 - ET WEB_SPECIFIC_APPS Red Hat Keycloak Unauthenticated Server-side Request Forgery in OIDC Dynamic Client Registration (web_specific_apps.rules) 2071370 - ET WEB_SPECIFIC_APPS Dockwatch compose.php ...
-
web:community.emergingthreats.net
Summary : 16 new OPEN, 33 new PRO (16 + 17) Added rules: Open: 2071537 - ET WEB_SPECIFIC_APPS Citrix NetScaler Unauthenticated Remote Code Execution (CVE-2026-8452) (web_specific_apps.rules) 2071538 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (erilhvs .digital) (malware.rules) 2071539 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (erilhvs .digital) in TLS SNI ...
-
web:community.emergingthreats.net
Summary : 30 new OPEN, 59 new PRO (30 + 29) Added rules: Open: 2071553 - ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M21 (exploit_kit.rules) 2071554 - ET EXPLOIT_KIT Observed ClickFix Javascr…
-
web:community.emergingthreats.net
Summary : 54 new OPEN, 84 new PRO (54 + 30) Added rules: Open: 2071583 - ET CURRENT_EVENTS VMware Exploit Campaign Inbound - User-Agent (GoodMoodle-VCFleet/1.0) (current_events.rules) 2071584 - ET CURRENT_EVENTS VMware Exploit Campaign Inbound - User-Agent (GoodMoodle-VCProbe/1.0) (current_events.rules) 2071585 - ET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (randenbrink .lol) (exploit_kit ...
-
web:community.emergingthreats.net
Summary : 41 new OPEN, 50 new PRO (41 + 9) Added rules: Open: 2071683 - ET WEB_SPECIFIC_APPS Apache Tika XML External Entity Injection (CVE-2025-54988) (web_specific_apps.rules) 2071684 - ET MALWARE TA569 Gholoader CnC Domain in DNS Lookup (pa-api .salondeguitaredemontreal .com) (malware.rules) 2071685 - ET MALWARE TA569 Gholoader CnC Domain in TLS SNI (pa-api .salondeguitaredemontreal .com ...
-
web:community.emergingthreats.net
Summary : 22 new OPEN, 35 new PRO (22 + 13) Added rules: Open: 2071782 - ET MALWARE GET Request to Minecraft Java Edition Port with Custom X-Header (malware.rules) 2071784 - ET MALWARE DeviceManager CnC DNS Communicati…
-
web:community.emergingthreats.net
Summary : 16 new OPEN, 29 new PRO (16 + 13) Added rules: Open: 2071830 - ET INFO Microsoft Exchange Server MRSProxy NTLM Authentication (info.rules) 2071831 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (methodpsdusx .shop) (malware.rules) 2071832 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (methodpsdusx .shop) in TLS SNI (malware.rules) 2071833 - ET EXPLOIT ...
-
web:msrc-ppe.microsoft.com
The Microsoft Security Response Center (MSRC) investigates all reports of security vulnerabilities affecting Microsoft products and services, and provides the information here as part of the ongoing effort to help you manage security risks and help keep your systems protected.
-
web:portal.msrc.microsoft.com
The Security Update Guide provides information on the latest Microsoft security updates , helping users understand and address potential vulnerabilities effectively.
-
web:www.fedramp.gov
This section contains the entire Consolidated Rules for 2026 as a standalone reference for each ruleset .
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.