ET-3428
📛 Threat Title
Ruleset Update Summary - 2026/08/22 - v11264
Indicators of Compromise (0)
No indicators of compromise on this threat.
References (1)
- Ruleset Update Summary - 2026/08/22 - v11264 Emerging Threats Community
Remediations (10)
-
web:community.emergingthreats.net
Summary : 9 new OPEN, 19 new PRO (9 + 10) Added rules: Open: 2071329 - ET WEB_SPECIFIC_APPS Veracore timeoutWarning PmSess1 Parameter SQL Injection Attempt (CVE-2025-25181) (web_specific_apps.rules) 2071336 - ET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (phiplips .click) (exploit_kit.rules) 2071337 - ET EXPLOIT_KIT LandUpdate808 Domain in TLS SNI (phiplips .click) (exploit_kit.rules ...
-
web:community.emergingthreats.net
Summary : 10 new OPEN, 28 new PRO (10 + 18) Added rules: Open: 2071358 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (matchny .cyou) (malware.rules) 2071359 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (matchny .cyou) in TLS SNI (malware.rules) 2071360 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (perfoxd .xyz) (malware.rules) 2071361 - ET ...
-
web:github.com
Version 4.29.0 - 2026-08-17 What's Changed 🆕 New features and detections 🎉 fix (932): add backslash-prefix evasion to shell command detection by @zoutjebot in #4599 feat (unix): detect basic quote evasion attempts against known unix commands by @EsadCetiner in #4649 feat (unix): detect stat command at pl-2+ by @EsadCetiner in #4735
-
web:learn.microsoft.com
Azure Web Application Firewall supports a defined set of managed ruleset versions to ensure strong security protections, predictable behavior, and a clear upgrade path for customers. Azure manages the Default Rule Set (DRS), Bot Management, and HTTP DDoS rulesets versions and periodically releases new rule set versions that include new protections, updated signatures, and rule improvements.
-
web:www.cisa.gov
Bulletins provide weekly summaries of new vulnerabilities. Patch information is provided when available.
-
web:www.cisa.gov
This page contains a web-friendly version of the Cybersecurity and Infrastructure Security Agency's Binding Operational Directive 26-04: Prioritizing Security Updates Based on Risk. A Binding Operational Directive is a compulsory direction to federal, executive branch, departments, and agencies for purposes of safeguarding federal information and information systems. 44 U.S.C. § 3552 (b) (1 ...
-
web:www.fedramp.gov
This section contains the entire Consolidated Rules for 2026 as a standalone reference for each ruleset .
-
web:www.fedramp.gov
On June 10, 2026, CISA released Binding Operational Directive 26-04: Prioritizing Security Updates Based on Risk. This Binding Operational Directive (BOD)reprioritizes vulnerability remediation based on public exposure, Known Exploited Vulnerability status, automatability, and technical impact.
-
web:www.sec.gov
This index of the SEC's rulemaking activity can be filtered by year, status (proposed or final), or division/office that recommended the rulemaking to the Commission. Under the Regulatory Flexibility Act, the SEC is required to publish an agenda identifying rules that the agency estimates it may consider in upcoming months. View the latest SEC Reg Flex agenda.
-
web:www.tenable.com
CISA BOD 26-04 gives federal agencies new, risk-based requirements for vulnerability prioritization and remediation . Highest-risk vulns must be remediated in as few as three days.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.