New rule groups and new rules for SCADA
Summary: Cisco Talos's VRT Certified Rule release introduced two new rule groupings, scada.rules and web-activex.rules. The SCADA group covers rules for the Supervisory Control and Data Acquisition protocol used for computer-controlled system monitoring and process control, while the Web-ActiveX group was created to better manage the large number of ActiveX rules formerly in web-client.rules.
What's compelling: The rules only take effect if an organization adds the new groups to snort.conf, so SCADA protocol coverage sits unused by default until someone deliberately turns it on.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026