YARA-X 1.14.0 Release, (Sat, Mar 7th)
2026-03-07T13:23:49Z•94059a8150a7d3faaa1a4e0e4fc982c513697de3f91fe8b7515db477a51faf26
bruteforcecrushftpcveintrusion-detectionmalwarepodcastrtfthreat-intelvulnerabilitieswiresharkxwormyarayara-xzero-day
What happened
SANS ISC diary feed (early March 2026) covering multiple security updates and incidents: YARA‑X 1.14.0 released (minor improvements/bugfixes); Wireshark 4.6.4 released fixing three vulnerabilities; reports of brute‑force scans against CrushFTP with references to prior serious flaws (CVE-2024-4040, CVE-2025-31161) and an actively exploited July 2025 zero‑day (CVE-2025-54309); new waves of XWorm malware observed; guidance on extracting ZIPs from RTFs; and a guest diary on distinguishing targeted intrusions from opportunistic scanning. The feed highlights active exploitation risk (CrushFTP zero‑d
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 94059a8150a7d3faaa1a4e0e4fc982c513697de3f91fe8b7515db477a51faf26
- Enrichment time
- 2026-03-07T13:23:49Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.