Ruleset Update Summary - 2026/07/29 - v11245

Ruleset Updates
1

Summary:

4 new OPEN, 6 new PRO (4 + 2)

Added rules:

Open:

  • 2071344 - ET WEB_SPECIFIC_APPS Alibaba fastjson2 Remote Code Execution (CVE-2026-16723) (web_specific_apps.rules)
  • 2071345 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (kitchenfootballkiw .fun) (malware.rules)
  • 2071346 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (kitchenfootballkiw .fun) in TLS SNI (malware.rules)
  • 2071347 - ET WEB_SERVER Check Point CPMI Protocol Authentication Bypass via Application Login (CVE-2026-16232) (web_server.rules)

Pro:

  • 2868094 - ETPRO MALWARE Observed UNK_SteadySplit Certificate M1 (malware.rules)
  • 2868095 - ETPRO MALWARE Observed UNK_SteadySplit Certificate M2 (malware.rules)