Snort Blog The Official Blog of the World Leading Open-Source IDS/IPS Snort.
- Talos launching new machine learning-based exploit detection engine
By Brandon Stultz.Every day, new vulnerabilities are discovered in the software critical to the function of the modern world. Security analysts take apart these new vulnerabilities, isolate what is necessary to trigger them and write signatures to block any exploits targeting them. For Snort, […]
- Snort 2.9.8.3 and Snort 2.9.13.0 End of Life
We are announcing the end of life for Talos rules in the following versions of Snort 2:Snort 2.9.8.3Snort 2.9.13.0Snort 2.9.8.3 Rules: This rule set is no longer available.Snort 2.9.13.0 Rules: We will no longer produce Talos rules for these versions of Snort on or around July 1, 2024.We encourage […]
- ICS protocol coverage using Snort 3 service inspectors
By Jared Rittle.With more devices on operational technology (OT) networks now getting connected to wide-reaching IT networks, it is more important than ever to have effective detection capabilities for ICS protocols.However, there are a few issues that usually arise when creating detection for ICS […]
- Applications open now for 2023 Snort scholarship
Applications are now open for the $10,000 Snort scholarship. We encourage everyone eligible to apply here. We will be accepting applications through May 3. After that, our hand-picked panel will review the submissions and select two students to receive a $10,000 award each. For more detailed […]
- Snort v3.1.53.0 is now available!
The SNORTⓇ team recently released a new version of Snort 3 on Snort.org and the Snort 3 GitHub. Snort 3.1.53.0 contains several new features and bug fixes. Here's a complete rundown of what's new in this version. Users are encouraged to update as soon as possible, or upgrade to Snort 3 if they […]
- New Snort 3 rule writing guide available
Snort 3's new features, improvements and detection capabilities come with updates to the Snort rule language syntax and the rule-writing process. To help with that, direct from the Talos analyst team, comes the Snort 3 Rule Writing guide: Detailed documentation for all the different rule options […]
- Snort OpenAppID Detectors have been updated
SNORTⓇ released a new update today for its OpenAppID Detector content.This release — build 356 — includes:3,374 detectors. Additional detectors from the open-source community. For more details on which contributions were included — we have added them to the "Authors" file in this […]
- Changes to the community rule release schedule
By Jon Munshaw. As of this week, we are changing the cadence for releases for the Snort community rule set. Previously, the community rules were released every day at 11:40 a.m. ET, even if there are no rule changes. Now, the rule set will align with our normal open-source build and release […]
- Weekly Snort rule update for March 25 - April 1
Cisco Talos released two new rule sets for SNORTⓇ this week, which you can view here and here.There are multiple rules to protect against the exploitation of the highly publicized Spring4Shell vulnerabilities that could lead to remote code execution. Spring is a popular framework used to […]
- Weekly Snort rule update for March 21 - 25
Cisco Talos released two new rule sets for SNORTⓇ this week, which you can view here and here.All users can subscribe to Talos' newest rule detection functionality for as low as $29 a year with a personal account. Be sure and see our business pricing as well here. The Snort 3 release is […]