ET-3336
📛 Threat Title
Ruleset Update Summary - 2026/05/22 - v11199
Indicators of Compromise (0)
No indicators of compromise on this threat.
References (1)
- Ruleset Update Summary - 2026/05/22 - v11199 Emerging Threats Community
Remediations (10)
-
web:cert.europa.eu
Summary On 29 April 2026, a high local privilege escalation vulnerability in the Linux kernel, tracked as CVE-2026-31431 and named "Copy Fail", was publicly disclosed [1].
-
web:community.emergingthreats.net
Summary : 16 new OPEN, 26 new PRO (16 + 10) Added rules: Open: 2069192 - ET WEB_SPECIFIC_APPS LiteLLM Arbitrary File Read (CVE-2026-35029) (web_specific_apps.rules) 2069193 - ET INFO Rust HTTP Client User-agent Observed (ureq) (info.rules) 2069194 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (brakyfaw .cyou) (malware.rules) 2069195 - ET MALWARE Observed Win32/Lumma Stealer ...
-
web:github.com
Custom Maltego transforms. Contribute to michenriksen/maltego development by creating an account on GitHub.
-
web:public.cyber.mil
The SRG/STIG Library Compilation comprises all DOD Security Requirements Guides (SRGs) and DOD Security Technical Implementation Guides (STIGs) housed on Cyber Exchange. Excluded are Security Readiness Review (SRR) Tools (scripts and OVAL Benchmarks), Group Policy Objects, and draft SRGs and STIGs. The SRG/STIG Library Compilation is updated quarterly to capture all newly updated or released ...
-
web:ubuntu.com
A local privilege escalation (LPE) vulnerability affecting the Linux kernel has been publicly disclosed on April 29, 2026. The vulnerability has been assigned CVE ID CVE-2026-31431 and is referred to as Copy Fail. The affected component is a kernel module that provides hardware-accelerated cryptographic functions: algif_aead. The vulnerab […]
-
web:www.cisco.com
A remediation is a program that the system launches in response to a correlation policy violation. When a remediation runs, the system generates a remediation status event. Remediation status events include details such as the remediation name, the correlation policy and rule that triggered it, and the exit status message.
-
web:www.forbes.com
Microsoft Exchange users are urged to mitigate a zero-day vulnerability that CISA has confirmed is under active exploitation.
-
web:www.iso.org
Welcome to the Online Browsing Platform (OBP) Access the most up to date content in ISO standards, graphical symbols, codes or terms and definitions. Preview content before you buy, search within documents and easily navigate between standards.
-
web:www.microsoft.com
A high-severity Linux vulnerability, "Copy Fail" (CVE-2026-31431), enables root privilege escalation across cloud environments and Kubernetes workloads. With a working exploit already in the wild, organizations should act quickly to detect, mitigate, and reduce risk.
-
web:www.picussecurity.com
Learn how CVE-2026-33825 enables attackers to escalate privileges via Windows Defender. Picus explains how the BlueHammer exploit abuses Defender's remediation logic to achieve SYSTEM access.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.