Snort Subscriber Rule Set Update for 09/30/2014

Just released:
Snort Subscriber Rule Set Update for 09/30/2014

We welcome the introduction of the newest rule release from Talos. In this release we introduced 32 new rules and made modifications to 6 additional rules.

There were no changes made to the snort.conf in this release.

Talos's rule release:

The VRT has added and modified multiple rules in the blacklist, browser-other, exploit-kit, file-flash, file-office, file-pdf, malware-cnc and server-webapp rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to Talos's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats!

Snort Subscriber Rule Set Update for 09/26/2014

Just released:
Snort Subscriber Rule Set Update for 09/26/2014

We welcome the introduction of the newest rule release from Talos. In this release we introduced 3 new rules and made modifications to 7 additional rules.

There were no changes made to the snort.conf in this release.

Talos would like to thank the following individuals for their contributions, their rules are included in the Community Ruleset:

Avery Tarasov
31990
31991
32008

Yaser Mansour

32009

32010

32011

Talos's rule release:

The VRT has added and modified multiple rules in the exploit-kit and os-other rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to Talos's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats!

Snort Community Rule Set out-of-band release for CVE-2014-7169, CVE-2014-6271

Our Snort Community Rule Set is normally published every morning, however, because of the increasing interest in vulnerability CVE-2014-6271 and CVE-2014-7169, commonly known as "that bad bash vulnerability", we've pushed the coverage written for the vulnerability into the Snort Community Ruleset to allow everyone to get it for free, without delay.

The Snort Community Rule Set is available for immediate download at: https://www.snort.org/downloads.

Rules 31975-31978,31985 cover this vulnerability from several different attack vectors.  Further research is under way on additional attack vectors, and further coverage will be posted at that time.

If you run a pulledpork update, and have the community ruleset enabled (which it is by default):

rule_url=https://s3.amazonaws.com/snort-org/www/rules/community/|community-rules.tar.gz|Community

 You will download the latest update.

Snort Subscriber Rule Set Update for 09/25/2014

Just released:
Snort Subscriber Rule Set Update for 09/25/2014

We welcome the introduction of the newest rule release from Talos. In this release we introduced 24 new rules and made modifications to 7 additional rules.

There were no changes made to the snort.conf in this release.

Talos would like to thank the following individuals for their contributions, their rules are included in the Community Ruleset:

Avery Tarasov
31990
31991
32008

Talos's rule release:

The VRT has added and modified multiple rules in the blacklist, browser-ie, browser-plugins, exploit-kit, file-office, file-other, malware-backdoor, malware-cnc, malware-other and server-webapp rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to Talos's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats!

Snort Subscriber Rule Set Update for 09/24/2014

Just released:
Snort Subscriber Rule Set Update for 09/24/2014

We welcome the introduction of the newest rule release from Talos. In this release we introduced 10 new rules and made modifications to 0 additional rules.

There were no changes made to the snort.conf in this release.

Talos's rule release:

The VRT has added multiple rules in the os-other and server-other rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to Talos's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats!

Snort Subscriber Rule Set Update for 09/23/2014

Just released:
Snort Subscriber Rule Set Update for 09/23/2014

We welcome the introduction of the newest rule release from Talos. In this release we introduced 47 new rules and made modifications to 10 additional rules.

There were no changes made to the snort.conf in this release.

Talos would like to thank the following individuals for their contributions, their rules are included in the Community Ruleset:

Yaser Mansour
31965
31966
31967
31968
31969
31970
31971
31972

Avery Tarasov
31964
31973


Talos's rule release:

The VRT has added and modified multiple rules in the blacklist, exploit-kit, file-java, malware-cnc, server-mail and server-webapp rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to Talos's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats!

Snort Subscriber Rule Set Update for 09/18/2014

Just released:
Snort Subscriber Rule Set Update for 09/18/2014

We welcome the introduction of the newest rule release from Talos. In this release we introduced 21 new rules and made modifications to 24 additional rules.

There were no changes made to the snort.conf in this release.

Talos would like to thank the following individuals for their contributions, their rules are included in the Community Ruleset:

Avery Tarasov
31916
31917
31918
31919
31920
31921
31922
31923
31924

Talos's rule release:

The VRT has added and modified multiple rules in the blacklist, deleted, exploit-kit, file-office, malware-cnc, protocol-voip and server-webapp rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to Talos's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats!

Snort Subscriber Rule Set Update for 09/16/2014

Just released:
Snort Subscriber Rule Set Update for 09/16/2014


We welcome the introduction of the newest rule release from Talos. In this release we introduced 60 new rules and made modifications to 13 additional rules.

There were no changes made to the snort.conf in this release.


Talos's rule release:

The VRT has added and modified multiple rules in the blacklist, browser-ie, exploit-kit, file-flash, file-identify, file-multimedia, file-office, malware-cnc, os-windows, protocol-snmp, server-mail, server-other and sql rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to Talos's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats!

Snort Subscriber Rule Set Update for 09/11/2014

Just released:
Snort Subscriber Rule Set Update for 09/11/2014

We welcome the introduction of the newest rule release from Talos. In this release we introduced 34 new rules and made modifications to 4 additional rules.

There were no changes made to the snort.conf in this release.

Talos would like to thank the following individuals for their contributions, their rules are included in the Community Ruleset:

Avery Tarasov:
31820
31824
31825
31826
31827
31829

Yaser Mansour:
31830
31831


Talos's rule release:

The VRT has added and modified multiple rules in the blacklist, file-flash, file-office, file-other, malware-backdoor, malware-cnc, malware-other and server-webapp rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to Talos's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats!

Snort Subscriber Rule Set Update for 09/09/2014, MsTuesday

Just released:
Snort Subscriber Rule Set Update for 09/09/2014

We welcome the introduction of the newest rule release from Talos. In this release we introduced 32 new rules and made modifications to 12 additional rules.

There were no changes made to the snort.conf in this release.

Talos's rule release:

Microsoft Security Bulletin MS14-052:
Internet Explorer suffers from programming errors that may lead to
remote code execution.

Previously released rules will detect attacks targeting these
vulnerabilities and have been updated with the appropriate reference
information. They are included in this release and are identified with
GID 1, SIDs 29821 through 29822, and 30110 through 30113.

New rules to detect attacks targeting these vulnerabilities are also
included in this release and are identified with GID 1, SIDs 31782
through 31791, 31794 through 31797, 31799 through 31802, and 31809
through 31812.

The VRT has added and modified multiple rules in the blacklist,
browser-ie, exploit-kit, file-office, indicator-compromise and
server-webapp rule sets to provide coverage for emerging threats from
these technologies.

In order to subscribe now to Talos's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats!

Snort Subscriber Rule Set Update for 09/04/2014

Just released:
Snort Subscriber Rule Set Update for 09/04/2014

We welcome the introduction of the newest rule release from Talos. In this release we introduced 15 new rules and made modifications to 12 additional rules.

There were no changes made to the snort.conf in this release.

Talos's rule release:

The VRT has added and modified multiple rules in the exploit-kit, file-identify, file-office, file-other, malware-cnc, protocol-voip and server-webapp rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to Talos's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats!

OpenAppID Detector Package update for 09/03/2014

Just Released:
OpenAppID Detector Package update for 09/03/2014

We welcome the introduction of the newest OpenAppID release from the Detection Team. In this release:

* Increased the coverage of our application detectors to an additional 243 detectors which brings our total coverage to 2,450 detectors. 

For more information about the list of detectors they can be viewed in the appMapping.data file.
You can download Snort 2.9.7.0 beta and the OpenAppId content at https://www.snort.org/downloads in the Development section.

Snort Subscriber Rule Set Update for 09/02/2014

Just released:
Snort Subscriber Rule Set Update for 09/02/2014

We welcome the introduction of the newest rule release from Talos. In this release we introduced 25 new rules and made modifications to 23 additional rules.

There were no changes made to the snort.conf in this release.

Talos's rule release:

The VRT has added and modified multiple rules in the blacklist, browser-ie, browser-plugins, file-flash, file-office, indicator-shellcode, malware-backdoor, malware-cnc, policy-other and server-webapp rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to Talos's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats!