ET-3490

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (1)

• Ruleset Update Summary - 2026/10/26 - v11319 Emerging Threats Community

• Azure Web Application Firewall managed ruleset support policy
  web:learn.microsoft.com

  Azure Web Application Firewall supports a defined set of managed ruleset versions to ensure strong security protections, predictable behavior, and a clear upgrade path for customers. Azure manages the Default Rule Set (DRS), Bot Management, and HTTP DDoS rulesets versions and periodically releases new rule set versions that include new protections, updated signatures, and rule improvements.

  2026-10-27 02:38 UTC
• Advisory - Security Update Guide - Microsoft
  web:msrc.microsoft.com

  The Microsoft Security Response Center (MSRC) investigates all reports of security vulnerabilities affecting Microsoft products and services, and provides the information here as part of the ongoing effort to help you manage security risks and help keep your systems protected.

  2026-10-27 02:38 UTC
• CISA KEV Adds 12 CVEs as BOD 26-04 Cuts Deadline [2026]
  web:shattered.io

  CISA added 12 CVEs to its KEV catalog as BOD 26-04 cuts federal patch deadlines to 3 days for the riskiest bugs.

  2026-10-27 02:38 UTC
• Description of version 2 of the security update for Microsoft Exchange ...
  web:support.microsoft.com

  Describes version 2 of the security update for Microsoft Exchange Server Subscription Edition RTM (KB5129955) that was released on October 2, 2026.

  2026-10-27 02:38 UTC
• FedRAMP Vulnerability Remediation Timeline for 2026
  web:tcinfra.dev

  A source-linked guide to FedRAMP 2026 vulnerability evaluation, PAIN mitigation and remediation timeframes, KEV due dates, monthly reporting, and accepted vulnerabilities.

  2026-10-27 02:38 UTC
• Addressing PHP2Shell CVE-2026-109618 and CVE-2026-109619: upgrade ...
  web:techcommunity.microsoft.com

  Written in collaboration with and   Introduction Today, two critical remote code execution (RCE) vulnerabilities were disclosed in PHP. We strongly...

  2026-10-27 02:38 UTC
• Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE ...
  web:unit42.paloaltonetworks.com

  CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems.

  2026-10-27 02:38 UTC
• 2026 - FedRAMP Consolidated Rules for 2026
  web:www.fedramp.gov

  Welcome to the FedRAMP Consolidated Rules for 2026. This site brings the rules, definitions, timelines, stakeholder guidance, and source material together so agencies, cloud service providers, independent assessors, advisors, and FedRAMP can work from the same public reference.

  2026-10-27 02:38 UTC
• Complete Ruleset Reference - FedRAMP Consolidated Rules for 2026
  web:www.fedramp.gov

  This section contains the entire Consolidated Rules for 2026 as a standalone reference for each ruleset .

  2026-10-27 02:38 UTC
• CVE-2026-109618 and CVE-2026-109619: What you should do now
  web:www.vincentschmalbach.com

  Details of two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, leaked on 20 October 2026, before PHP had released a fix. PHP's security team rates both at 9.2 out of 10 on the CVSS…

  2026-10-27 02:38 UTC

Only Available for Registered Users. Sign in to view.