# Ruleset Update Summary - 2026/08/04 - v11249 **URL:** \ **Category:** Ruleset Updates\ **Created:** [August 4, 2026, 8:02pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2026-08-04-v11249/3408 "2026-08-04T20:02:06Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![rulesbot](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rulesbot](https://community.emergingthreats.net/u/rulesbot)\ **Post date:** [August 4, 2026, 8:02pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2026-08-04-v11249/3408/1 "2026-08-04T20:02:06Z")
## Summary: 17 new OPEN, 18 new PRO (17 + 1) * * * ## Added rules: ### Open: - 2071368 - ET WEB\_SPECIFIC\_APPS Red Hat Keycloak Admin REST API PII Disclosure (CVE-2026-17059) (web\_specific\_apps.rules) - 2071369 - ET WEB\_SPECIFIC\_APPS Red Hat Keycloak Unauthenticated Server-side Request Forgery in OIDC Dynamic Client Registration (web\_specific\_apps.rules) - 2071370 - ET WEB\_SPECIFIC\_APPS Dockwatch compose.php composePath Parameter Command Injection Attempt (CVE-2026-58455) (web\_specific\_apps.rules) - 2071371 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (trenadne .cyou) (malware.rules) - 2071372 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (trenadne .cyou) in TLS SNI (malware.rules) - 2071373 - ET EXPLOIT\_KIT LandUpdate808 Domain in DNS Lookup (griffihhs .click) (exploit\_kit.rules) - 2071374 - ET EXPLOIT\_KIT LandUpdate808 Domain in TLS SNI (griffihhs .click) (exploit\_kit.rules) - 2071375 - ET MALWARE TA569 Gholoader CnC Domain in DNS Lookup (img2 .lelispices .com) (malware.rules) - 2071376 - ET MALWARE TA569 Gholoader CnC Domain in DNS Lookup (js-dl .kaliesthenics .com) (malware.rules) - 2071377 - ET MALWARE TA569 Gholoader CnC Domain in DNS Lookup (js .galmabuna .com) (malware.rules) - 2071378 - ET MALWARE TA569 Gholoader CnC Domain in DNS Lookup (sc-api .abuarerestaurant .net) (malware.rules) - 2071379 - ET MALWARE TA569 Gholoader CnC Domain in TLS SNI (img2 .lelispices .com) (malware.rules) - 2071380 - ET MALWARE TA569 Gholoader CnC Domain in TLS SNI (js-dl .kaliesthenics .com) (malware.rules) - 2071381 - ET MALWARE TA569 Gholoader CnC Domain in TLS SNI (js .galmabuna .com) (malware.rules) - 2071382 - ET MALWARE TA569 Gholoader CnC Domain in TLS SNI (sc-api .abuarerestaurant .net) (malware.rules) - 2071383 - ET EXPLOIT\_KIT ZPHP Domain in DNS Lookup (namastheandhra .com) (exploit\_kit.rules) - 2071384 - ET EXPLOIT\_KIT ZPHP Domain in TLS SNI (namastheandhra .com) (exploit\_kit.rules) ### Pro: - 2868133 - ETPRO MALWARE Malicious Win32/NetSupport Rat CnC Checkin (malware.rules)