The Best Defense is a Good Defense
Summary: Sourcefire's VRT reports that Snort is at version 2.9.3.1, and that versions older than 2.9.1.2 are past end of life, with 2.9.1.2 itself reaching EOL on 2012-10-17. The VRT states that newer features and most rules written for current threats will not work on older Snort versions, and that it regularly receives inquiries about running current rule packages on EOL releases.
Why it matters: An intrusion prevention system running an EOL Snort build cannot load most of the detection content written for present-day threats, so the rules you believe are protecting you may not run at all.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026