🧰 Snort

The items that name it 14

• A quiet week in infosec <.<
  articleas tools2026-10-29

  Coverage for the two critical PHP core RCE vulnerabilities, detailed in a Talos blog

• Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
  writeupas classification.technologies2026-10-28
• Tech and Security Companies Respond to PHP2Shell Vulnerabilities
  articleas classification.technologies2026-10-22
• Compromised eMudhra intermediate certificates
  advisoryas tools2026-10-21It is written here as Snort (SIDs 67363 - 67374): network intrusion coverage for this threat.

  SIDs 67363 - 67374

• There's only so much code: the rise in vulnerability numbers
  articleas classification.technologies2026-10-20
• Show HN: VoidAccess – open-source dark web OSINT, from query to a graph
  repoas classification.key entities2026-10-20
• Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
  advisoryas classification.technologies2026-10-13
• UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing
  writeupas tools2026-10-08

  Network intrusion detection/prevention

• Microsoft, Adobe, Apple, and Foxit vulnerabilities
  advisoryas tools2026-10-07

  rule sets to detect exploitation of the vulnerabilities disclosed in this post, available from Snort.org

• China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
  writeupas tools2026-09-30

  IDS/IPS rules to cover this threat (Snort 2: 1:66880, 1:66881, 1:66882; Snort 3: 1:66880, 1:66881, 1:66882)

• Should you care about an “AI slowdown?”
  articleas classification.technologies2026-09-17
• Active exploitation of Cisco Secure Firewall Management Center vulnerabilities
  writeupas tools2026-09-09

  network intrusion prevention signatures (SIDs) released by Cisco Talos to detect exploitation of CVE-2026-20079 (SIDs 66075-66080), CVE-2026-20316 (SID 66883), and associated malware (SIDs 66960, 66961)

• UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations
  writeupas tools2026-08-20

  Network intrusion detection rules provided: Snort2 SIDs 1:66697, 1:66696; Snort3 SIDs 1:66697, 1:66696

• ElearnSecurity Certified Incident Responder (eCIR) review
  articleas tools2021-08-08

  IDS tool, introduced at a basic/introductory level in the course