s1
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

ET-3422

📛 Threat Title

Ruleset Update Summary - 2026/08/18 - v11259

Category: forum-post First seen: Last updated: Source: Emerging Threats Community

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (1)

Remediations (10)

  • web:community.emergingthreats.net

    Summary : 21 new OPEN, 28 new PRO (21 + 7) Added rules: Open: 2070034 - ET INFO Ethereum Contract Request, get() (info.rules) 2070035 - ET INFO Ethereum Contract Request, getURL() (info.rules) 2070036 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (WieseSpark .cyou) (malware.rules) 2070037 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (WieseSpark .cyou) in TLS SNI ...

  • web:community.emergingthreats.net

    Ruleset Update Summary - 2026/08/03 - v11248 Ruleset Updates rulesbot August 3, 2026, 8:16pm

  • web:community.emergingthreats.net

    Summary : 17 new OPEN, 18 new PRO (17 + 1) Added rules: Open: 2071368 - ET WEB_SPECIFIC_APPS Red Hat Keycloak Admin REST API PII Disclosure (CVE-2026-17059) (web_specific_apps.rules) 2071369 - ET WEB_SPECIFIC_APPS Red Hat Keycloak Unauthenticated Server-side Request Forgery in OIDC Dynamic Client Registration (web_specific_apps.rules) 2071370 - ET WEB_SPECIFIC_APPS Dockwatch compose.php ...

  • web:community.emergingthreats.net

    Summary : 37 new OPEN, 47 new PRO (37 + 10) Added rules: Open: 2071437 - ET WEB_SPECIFIC_APPS Rapid7 Velociraptor Authenticated Account Takeover via Identity Spoofing (CVE-2026-18972) (web_specific_apps.rules) 2071438 - ET MALWARE Head Mare CnC Domain in DNS Lookup (penzadogshelter .site) (malware.rules) 2071439 - ET MALWARE Head Mare CnC Domain in DNS Lookup (media-hub .today) (malware.rules ...

  • web:community.emergingthreats.net

    Summary : 17 new OPEN, 54 new PRO (17 + 37) Added rules: Open: 2071501 - ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M1 (exploit_kit.rules) 2071502 - ET EXPLOIT_KIT Observed ClickFix Javascri…

  • web:community.emergingthreats.net

    Summary : 16 new OPEN, 33 new PRO (16 + 17) Added rules: Open: 2071537 - ET WEB_SPECIFIC_APPS Citrix NetScaler Unauthenticated Remote Code Execution (CVE-2026-8452) (web_specific_apps.rules) 2071538 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (erilhvs .digital) (malware.rules) 2071539 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (erilhvs .digital) in TLS SNI ...

  • web:community.emergingthreats.net

    Summary : 30 new OPEN, 59 new PRO (30 + 29) Added rules: Open: 2071553 - ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M21 (exploit_kit.rules) 2071554 - ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M22 (exploit_kit.rules) 2071555 - ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M23 (exploit_kit.rules) 2071556 - ET ...

  • web:portal.msrc.microsoft.com

    The Security Update Guide provides information on the latest Microsoft security updates , helping users understand and address potential vulnerabilities effectively.

  • web:www.fedramp.gov

    This section contains the entire Consolidated Rules for 2026 as a standalone reference for each ruleset .

  • web:www.sec.gov

    This index of the SEC's rulemaking activity can be filtered by year, status (proposed or final), or division/office that recommended the rulemaking to the Commission. Under the Regulatory Flexibility Act, the SEC is required to publish an agenda identifying rules that the agency estimates it may consider in upcoming months. View the latest SEC Reg Flex agenda.

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.