A FABULOUS policy rule
Summary: Cisco Talos reported that Stephanie Meyer's website was serving the Crimepack Exploit Kit, which the author confirmed by pulling a PCAP of the site after Brian Krebs tweeted about it. The existing rule set covered the infection via SID 21039, which detects a common form of JavaScript obfuscation.
What's compelling: The compromise surfaced on a low-traffic author site, and detection rested on a single signature for JavaScript obfuscation, with Talos noting it was still working on more aggressive rules that conservative CSOs would accept running.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026