# Ruleset Update Summary - 2026/07/30 - v11246 **URL:** \ **Category:** Ruleset Updates\ **Created:** [July 30, 2026, 8:42pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2026-07-30-v11246/3405 "2026-07-30T20:42:52Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![rulesbot](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rulesbot](https://community.emergingthreats.net/u/rulesbot)\ **Post date:** [July 30, 2026, 8:42pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2026-07-30-v11246/3405/1 "2026-07-30T20:42:52Z")
## Summary: 5 new OPEN, 6 new PRO (5 + 1) * * * ## Added rules: ### Open: - 2022531 - ET RETIRED Possible 2015-7547 Malformed Server response (retired.rules) - 2071347 - ET EXPLOIT Check Point CPMI Protocol Authentication Bypass via Application Login (CVE-2026-16232) (exploit.rules) - 2071348 - ET INFO Check Point FWM/CPMI Unauthenticated Legacy Gui\_Client Handshake (SIC DN Disclosure) (info.rules) - 2071349 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (glazeom .cyou) (malware.rules) - 2071350 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (glazeom .cyou) in TLS SNI (malware.rules) ### Pro: - 2868096 - ETPRO MALWARE Malicious Win32/NetSupport Rat CnC Checkin (malware.rules) * * * ## Removed rules: - 2022531 - ET EXPLOIT Possible 2015-7547 Malformed Server response (exploit.rules) - 2071347 - ET WEB\_SERVER Check Point CPMI Protocol Authentication Bypass via Application Login (CVE-2026-16232) (web\_server.rules)