# Ruleset Update Summary - 2026/07/15 - v11234 **URL:** \ **Category:** Ruleset Updates\ **Created:** [July 15, 2026, 8:17pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2026-07-15-v11234/3383 "2026-07-15T20:17:59Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![rulesbot](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rulesbot](https://community.emergingthreats.net/u/rulesbot)\ **Post date:** [July 15, 2026, 8:17pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2026-07-15-v11234/3383/1 "2026-07-15T20:17:59Z")
## Summary: 8 new OPEN, 11 new PRO (8 + 3) * * * ## Added rules: ### Open: - 2071190 - ET MALWARE TA569 Gholoader CnC Domain in DNS Lookup (free-api .travelaccex .com) (malware.rules) - 2071191 - ET MALWARE TA569 Gholoader CnC Domain in TLS SNI (free-api .travelaccex .com) (malware.rules) - 2071192 - ET EXPLOIT\_KIT ZPHP Domain in DNS Lookup (alabastercompass .top) (exploit\_kit.rules) - 2071193 - ET EXPLOIT\_KIT ZPHP Domain in DNS Lookup (granitehearth .top) (exploit\_kit.rules) - 2071194 - ET EXPLOIT\_KIT ZPHP Domain in TLS SNI (alabastercompass .top) (exploit\_kit.rules) - 2071195 - ET EXPLOIT\_KIT ZPHP Domain in TLS SNI (granitehearth .top) (exploit\_kit.rules) - 2071196 - ET INFO DYNAMIC\_DNS Query to a \*.blogs .or .id domain (info.rules) - 2071197 - ET INFO DYNAMIC\_DNS HTTP Request to a \*.blogs .or .id domain (info.rules) ### Pro: - 2867977 - ETPRO EXPLOIT Windows DHCP Server Heap Overflow (CVE-2026-50518) (exploit.rules) - 2867978 - ETPRO WEB\_SPECIFIC\_APPS Microsoft Sharepoint Unauthenticated Remote Code Execution (CVE-2026-50522) (web\_specific\_apps.rules) - 2867979 - ETPRO HUNTING Suspicious POST to cmd URI (hunting.rules)