New in Snort3: Enhanced rule grouping for greater flexibility and control
Summary: Cisco Talos introduced a new Severity rule group for Snort3 users within Cisco Secure Firewall, adding a third way to organize detection rules by CVSS score as low, medium, high, or critical. The group sets coverage by timeframe, from level 0 (no rules enabled) through the last 2, 5, or 10 years up to level 4 (all vulnerabilities detected to date), where previously only two top-level groups existed.
Key Takeaway: Rule selection now maps directly to how far back your patching and compliance windows reach, so a level 1 setting covers only the last 2 years of vulnerabilities while level 4 enables everything ever detected. Choosing that level is effectively a decision about which old vulnerabilities your detection stops watching for.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026