ET-3396
📛 Threat Title
Ruleset Update Summary - 2026/07/24 - v11241
Indicators of Compromise (0)
No indicators of compromise on this threat.
References (1)
- Ruleset Update Summary - 2026/07/24 - v11241 Emerging Threats Community
Remediations (10)
-
web:community.emergingthreats.net
2868019 - ETPRO WEB_SPECIFIC_APPS PTC Windchill/FlexPLM Unauthenticated Remote Code Execution (CVE-2026-12569) (web_specific_apps.rules) 2868020 - ETPRO PHISHING Generic Device Code Phish Landing Page M1 2026-07-21 (phishing.rules)
-
web:community.emergingthreats.net
Summary : 16 new OPEN, 33 new PRO (16 + 17) Added rules: Open: 2071277 - ET PHISHING HiStats Lookalike Domain in DNS Lookup (histats .top) (phishing.rules) 2071278 - ET PHISHING HiStats Lookalike Domain in TLS SNI (histats .top) (phishing.rules) 2071279 - ET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (bouoher .lol) (exploit_kit.rules) 2071280 - ET EXPLOIT_KIT LandUpdate808 Domain in DNS ...
-
web:community.emergingthreats.net
Summary : 9 new OPEN, 19 new PRO (9 + 10) Added rules: Open: 2071329 - ET WEB_SPECIFIC_APPS Veracore timeoutWarning PmSess1 Parameter SQL Injection Attempt (CVE-2025-25181) (web_specific_apps.rules) 2071336 - ET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (phiplips .click) (exploit_kit.rules) 2071337 - ET EXPLOIT_KIT LandUpdate808 Domain in TLS SNI (phiplips .click) (exploit_kit.rules ...
-
web:learn.microsoft.com
Azure Web Application Firewall supports a defined set of managed ruleset versions to ensure strong security protections, predictable behavior, and a clear upgrade path for customers. Azure manages the Default Rule Set (DRS), Bot Management, and HTTP DDoS rulesets versions and periodically releases new rule set versions that include new protections, updated signatures, and rule improvements.
-
web:learn.microsoft.com
Remediate security weaknesses discovered through security recommendations, and create exceptions if needed, in Defender Vulnerability Management.
-
web:msrc.microsoft.com
The Microsoft Security Response Center (MSRC) investigates all reports of security vulnerabilities affecting Microsoft products and services, and provides the information here as part of the ongoing effort to help you manage security risks and help keep your systems protected.
-
web:support.microsoft.com
Summary The Access Control List (ACL) on the Distributed Key Manager (DKM) container enters its first hardening phase starting with the July 14, 2026 Windows security update . This hardening effort addresses an elevation of privilege (EOP) that can arise from the vulnerability documented in CVE-2026-56155.
-
web:www.fedramp.gov
This section contains the entire Consolidated Rules for 2026 as a standalone reference for each ruleset .
-
web:www.fedramp.gov
Ruleset Reference Complete Rulesets Boundary Rulesets Vulnerability Detection and Response The Vulnerability Detection and Response rules require providers to continuously identify, analyze, prioritize, mitigate, and remediate vulnerabilities and related exposures through automated systems. These rules give providers flexibility in implementation while ensuring agencies receive the information ...
-
web:www.regulations.gov
Regulations.gov is the federal government's platform for public access to and participation in regulatory processes.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.