Cisco Talos shared the newest rule update for SNORTⓇ this afternoon.
Tuesday's release includes new protection against the BlackMatter ransomware attack. Japanese technology company Olympus recently suffered an attack from this group, suffering outages across its European, Middle East and Africa computer networks. BlackMatter also recently infected a large grain co-op in Iowa, with the group demanding a $5.9 million ransom payment.
Here's a full breakdown of Thursday's rule update:
| Shared object rules | Modified shared object rules | New rules | Modified rules |
|---|---|---|---|
| 4 | 0 | 13 | 5 |
There were no changes made to the snort.conf in this release.
Cisco Talos' rule release:
Talos has added and modified multiple rules in the file-other, malware-other, malware-tools, protocol-other and server-webapp rule sets to provide coverage for emerging threats from these technologies.
You can subscribe to Talos' newest rule detection functionality for as low as $29 a year with a personal account. Be sure and see our business pricing as well here. The Snort 3 release is also here after years of development and improvements. Upgrade here.