Suricata before 8.0.8 fixes multiple high-severity denial-of-service flaws
Listed issues cover CPU and memory exhaustion and a crash in TFTP, SIP, HTTP/2 and DoH2.
Stories per day · 30 days
2 RSS
Relatedintrusion-detection2network-security2calibration1denial-of-service1http21ids1model-calibration1tftp1vx-one1
12 stories, newest first · one card per story
Stories tagged #suricata
VX-One study tests typed decision heads for perimeter triage
A 100K–10M-parameter model is measured against XGBoost and a Suricata cascade on public IDS sets.
VX-One study tests typed heads for real-time perimeter triage
Under CIC-IDS2017 drift VX-One leads detection, but calibration error rises from 0.04 to 0.40 for every method.
Threat Coverage Digest: New Malware Reports and 1,100+ Detection Rules
ANY.RUN's September digest adds 76 behavior signatures, 16 YARA rules, and 1,098 Suricata rules plus TI reports on IronToll and CSuite phishing.
1
How It's Made: Uncovering Detection Engineering Processes for Network Intrusion Detection Rules
SuriCap study of 60 engineers writing 3,146 Suricata rules finds prior experience barely affects rule quality and identifies three rule-engineering phases.
Passive Hybrid Network-Based Intrusion Detection System (Hybrid-NIDS) Combining Suricata and Random Forest
Suricata and Random Forest hybrid NIDS scored F1 0.97 on UNSW-NB15 but failed in lab tests.
Re: Suricata 8.0.7 released with 67 vulnerabilities fixed
Suricata 8.0.7 patches 67 vulnerabilities in the open-source network IDS/IPS engine, with follow-up discussion on oss-security.
Re: Suricata 8.0.7 released with 67 vulnerabilities fixed
Suricata 8.0.7 was released fixing 67 vulnerabilities; project lead Victor Julien confirmed the announcement and offered future posts.
Suricata 8.0.7 released with 67 vulnerabilities fixed
Suricata 8.0.7, the open-source network IDS/IPS engine, ships a patch release fixing 67 vulnerabilities with no known exploitation reported.
When Agents Look Like Beacons: NIDS Evasion by Model Context Protocol Traffic
Research shows Model Context Protocol agent traffic structurally resembles C2 beaconing and evades Suricata signatures and RITA behavioral scoring in testbeds.
Release Notes: Faster TI Investigations, Fresh Threat Research, and 650+ Threat Coverage Updates
ANY.RUN August release adds TI Lookup connections view, 81 behavior signatures, 16 YARA rules, 559 Suricata rules, and three new threat intelligence reports.
What researchers learned about building an LLM security workflow
Oslo and FFI researchers show structured agentic workflows lift LLM alert-triage accuracy from 0% to about 93% on malicious cases.
3