ET-3260
📛 Threat Title
Ruleset Update Summary - 2026/04/10 - v11169
Indicators of Compromise (0)
No indicators of compromise on this threat.
References (1)
- Ruleset Update Summary - 2026/04/10 - v11169 Emerging Threats Community
Remediations (10)
-
web:community.emergingthreats.net
Summary : 35 new OPEN, 45 new PRO (35 + 10) Added rules: Open: 2068628 - ET PHISHING Generic Device Code Landing Page 2026-04-07 (phishing.rules) 2068629 - ET PHISHING EvilTokens Fetch Valid user_code from Microsoft API (phishing.rules) 2068630 - ET PHISHING EvilTokens Poll for user_code Authentication Status (phishing.rules) 2068631 - ET WEB_SPECIFIC_APPS Citrix Netscaler SAML IDP Memory ...
-
web:community.emergingthreats.net
Summary : 2 new OPEN, 2 new PRO (2 + 0) Added rules: Open: 2068693 - ET MALWARE LucidRook FTP C2 Activity (Exfil Host Info) (malware.rules) 2068694 - ET MALWARE LucidRook FTP C2 Activity (Download Payload) (malware.rules)
-
web:community.emergingthreats.net
Summary : 49 new OPEN, 79 new PRO (49 + 30) Added rules: Open: 2068850 - ET WEB_SPECIFIC_APPS nginx-ui MCP Module Authentication Bypass (CVE-2026-33032) (web_specific_apps.rules) 2068851 - ET INFO DYNAMIC_DNS Query to a *.sulekutlay .com domain (info.rules) 2068852 - ET INFO DYNAMIC_DNS HTTP Request to a *.sulekutlay .com domain (info.rules) 2068853 - ET MALWARE Win32/Lumma Stealer Related CnC ...
-
web:learn.microsoft.com
Ruleset update The bot mitigation ruleset list of known bad IP addresses updates multiple times per day from the Microsoft Threat Intelligence feed to stay in sync with the bots. Your web applications are continuously protected even as the bot attack vectors change.
-
web:public.cyber.mil
The SRG/STIG Library Compilation comprises all DOD Security Requirements Guides (SRGs) and DOD Security Technical Implementation Guides (STIGs) housed on Cyber Exchange. Excluded are Security Readiness Review (SRR) Tools (scripts and OVAL Benchmarks), Group Policy Objects, and draft SRGs and STIGs. The SRG/STIG Library Compilation is updated quarterly to capture all newly updated or released ...
-
web:sc1.checkpoint.com
A specific Rule in the ruleset (optional, if missing, all rules are implied) Select an Environment that applies the remediation to rules in the selected ruleset only when the ruleset is applied to the selected environments.
-
web:www.cisco.com
A remediation is a program that the system launches in response to a correlation policy violation. When a remediation runs, the system generates a remediation status event. Remediation status events include details such as the remediation name, the correlation policy and rule that triggered it, and the exit status message.
-
web:www.dell.com
The laptop is getting BSOD and from the WinDiag and we found out it is the dell support assist remediation from the dell command update , after we uninstall it that's all good until dell command update push it back into the system because it was marked as critical update .
-
web:www.microsoft.com
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages for version updates to download from command and control (C2) that Microsoft Threat Intelligence has attributed to the North Korean state actor Sapphire Sleet. Although the malicious versions are no longer available for download, since Axios is one of the most widely ...
-
web:www.sentinelone.com
Explore 9 top vulnerability remediation tools for 2026 to effectively identify, prioritize, and resolve security risks with smart features and tips.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.