First month of the year, and we’re starting it off with updates that support faster decisions and more predictable SOC operations. In January, we introduced a major workflow enhancement with the new ANY.RUN Sandbox integration with MISP, alongside expanded detection coverage across behavior signatures, YARA rules, and Suricata. Let’s find out what this means for your team. Product Updates January brought another solid round of improvements…
Category: Service Updates
ANYRUN, Cybersecurity, Emerging Tech, features, Global Security News, release, Service Updates
Release Notes: AI Sigma Rules, Live Threat Landscape & 1,700+ New Detections
ANY.RUN is wrapping up 2025 with updates that take pressure off your SOC and help your team work faster. You can now get AI‑generated Sigma rules, track threats by industry and region, and detect new campaigns with better speed and accuracy. Let’s see what these improvements bring to your security stack. Product Updates Industry & Geo Threat Landscape…
ANYRUN, Cybersecurity, Global Security News, Malware Analysis, Service Updates
AI Sigma Rules: Scale Threat Detection, Drive Down MTTR
Security teams face thousands of alerts every single day. Many of them don’t clearly show whether there’s a true threat behind them. Investigation slows down, analysts lose time on low-value signals, and important findings are often buried in noise. AI Sigma Rules change this routine. With this new capability in ANY.RUN’s Interactive Sandbox, SOC teams can not only see the source of malicious activity…
ANYRUN, Cybersecurity, Global Security News, Malware Analysis, Service Updates
Track Evolving Cyber Threat Landscape for Your Industry & Country in Real Time
Effective cyber security depends on knowing which risks matter most. ANY.RUN’s Threat Intelligence Lookup provides industry and geographic context, powered by live attack investigations from 15,000+ companies, that SOC teams need to prioritize alerts, IOCs, and threats with confidence and build their defense strategy for maximum ROI. Here’s how. Challenge: Context-free TI Wastes SOC Time Most threat intelligence sources return long lists of IPs, domains,…
ANYRUN, Cybersecurity, Emerging Tech, Global Security News, Malware Analysis, malware behavior, Service Updates
Threat Coverage Digest: New Malware Reports and 5K+ Detection Rules
November was a packed month for detection coverage. We rolled out new behavioral insights, broadened our visibility across multiple threat families, and strengthened rulesets at every layer. On top of that, our analysts uncovered and documented a new phishing wave targeting Italian organizations through malicious PDF attachments, now fully mapped in a dedicated TI report. Let’s walk through…
ANYRUN, Cybersecurity, Emerging Tech, Global Security News, Malware Analysis, release, Service Updates
Release Notes: ANY.RUN & ThreatQ Integration, 3,000+ New Rules, and Expanded Detection Coverage
October brought another strong round of updates to ANY.RUN, from a new ThreatQ integration that connects our real-time Threat Intelligence Feeds directly into one of the industry’s leading TIPs, to hundreds of new signatures and rules that sharpen network and behavioral detection. With 125 new behavior signatures, 17 YARA rules, and 3,264 Suricata rules, analysts can now spot emerging threats…
ANYRUN, Cybersecurity, Emerging Tech, Global Security News, release, Service Updates, update
Release Notes: Palo Alto Networks, Microsoft, IBM Connectors and 2,300+ Suricata Rules
September brought big updates to ANY.RUN. From four new connectors that plug our sandbox and threat intelligence straight into the world’s top SIEM and SOAR platforms, to a redesigned Threat Intelligence Lookup home screen built for speed and simplicity, your SOC now works smarter and faster than ever. Add in 99 fresh signatures, 11 new YARA rules, and 2,322…
ANYRUN, Cybersecurity, Emerging Tech, Global Security News, Malware Analysis, release, Service Updates
Release Notes: Fresh Connectors, SDK Update, and 2,200+ New Detection Rules
August was a busy month at ANY.RUN. We expanded our list of connectors with Microsoft Sentinel and OpenCTI, added Linux Debian (ARM) support to the SDK, and strengthened detection across hundreds of new malware families and techniques. With fresh signatures, rules, and product updates, your SOC can now investigate faster, detect more threats in real time, and keep defenses sharp…
ANYRUN, Cybersecurity, Emerging Tech, features, Global Security News, release, Service Updates
Release Notes: QRadar SOAR App, TI Lookup Free Access, and 2,900+ New Detection Rules
July brought powerful new updates to help your SOC catch threats faster, reduce manual effort, and make more confident decisions, right inside your existing workflows. From fresh integrations to better detection coverage, these changes are built to support your team every step of the way. In this update: New IBM QRadar SOAR integration to automate investigations and speed…
ANYRUN, Cybersecurity, Emerging Tech, features, Global Security News, release, Service Updates
Release Notes: QRadar SOAR App, TI Lookup Free Access, and 2,900+ New Detection Rules
July brought powerful new updates to help your SOC catch threats faster, reduce manual effort, and make more confident decisions, right inside your existing workflows. From fresh integrations to better detection coverage, these changes are built to support your team every step of the way. In this update: New IBM QRadar SOAR integration to automate investigations and speed…
ANYRUN, Cybersecurity, Emerging Tech, features, Global Security News, release, Service Updates
Release Notes: QRadar SOAR App, TI Lookup Free Access, and 2,900+ New Detection Rules
July brought powerful new updates to help your SOC catch threats faster, reduce manual effort, and make more confident decisions, right inside your existing workflows. From fresh integrations to better detection coverage, these changes are built to support your team every step of the way. In this update: New IBM QRadar SOAR integration to automate investigations and speed…
ANYRUN, Cybersecurity, features, Global Security News, release, Service Updates
Detect ARM Malware in Seconds with Debian Sandbox for Stronger Enterprise Security
ANY.RUN’s Interactive Sandbox provides SOC teams with the fastest solution for analyzing and detecting cyber threats targeting Windows, Linux, and Android systems. Now, our selection of VMs has been expanded to include Linux Debian 12.2 64-bit (ARM). With the rapid rise of ARM-based malware, the sandbox helps businesses tackle this threat through proactive analysis and…
ANYRUN, Cybersecurity, Emerging Tech, Global Security News, release, Service Updates, update
Turn Alert Noise into Threat Insights without Leaving QRadar SOAR with ANY.RUN
IBM QRadar SOAR is a go-to platform for incident response. To make things faster and easier for SOCs to use this powerful tool with ANY.RUN’s services, we built an official app. Now you can seamlessly launch different playbooks directly inside SOAR to streamline threat analysis, speed up investigations, and reduce Mean Time to Respond (MTTR)…
ANYRUN, Cybersecurity, Emerging Tech, features, Global Security News, malware behavior, Service Updates
Free. Powerful. Actionable. Make Smarter Security Decisions with Live Attack Data
Threat Intelligence in ANY.RUN continues to evolve — not only by adding more features, but by making the right ones easier to use. We’ve simplified access to ANY.RUN Threat Intelligence with a free version of TI Lookup. You now can explore Public Samples, TTPs, Suricata rules, and malware trends inside our Threat Intelligence product…
ANYRUN, Cybersecurity, Exploits, features, Global Security News, release, Service Updates
Release Notes: Detonation Actions, Enhanced QR Extraction, and 1,400+ New Detection Rules
We’ve packed June with updates designed to make your day-to-day analysis faster, clearer, and easier than before. Whether you’re just getting started or deep into reverse engineering every day, these improvements are here to save you time and help you catch more threats. In this update: Real-time Detonation Action hints that guide you through the…
ANYRUN, Cybersecurity, features, Global Security News, release, Service Updates
Simplify Threat Analysis and Boost Detection Rate with Detonation Actions
Threat analysis is a complex task that demands full attention, especially during active incidents, when every second counts. ANY.RUN’s Interactive Sandbox is designed to ease that pressure with an intuitive interface and fast threat detection. Our new feature, Detonation Actions, takes this further by highlighting detonation steps during analysis. When a specific action is needed…
ANYRUN, Cybersecurity, features, Global Security News, release, Service Updates
Simplify Threat Analysis and Boost Detection Rate with Detonation Actions
Threat analysis is a complex task that demands full attention, especially during active incidents, when every second counts. ANY.RUN’s Interactive Sandbox is designed to ease that pressure with an intuitive interface and fast threat detection. Our new feature, Detonation Actions, takes this further by highlighting detonation steps during analysis. When a specific action is needed…
ANYRUN, Cybersecurity, features, Global Security News, release, Service Updates
Simplify Threat Analysis and Boost Detection Rate with Detonation Actions
Threat analysis is a complex task that demands full attention, especially during active incidents, when every second counts. ANY.RUN’s Interactive Sandbox is designed to ease that pressure with an intuitive interface and fast threat detection. Our new feature, Detonation Actions, takes this further by highlighting detonation steps during analysis. When a specific action is needed…
ANYRUN, Cybersecurity, features, Global Security News, release, Service Updates
Simplify Threat Analysis and Boost Detection Rate with Detonation Actions
Threat analysis is a complex task that demands full attention, especially during active incidents, when every second counts. ANY.RUN’s Interactive Sandbox is designed to ease that pressure with an intuitive interface and fast threat detection. Our new feature, Detonation Actions, takes this further by highlighting detonation steps during analysis. When a specific action is needed…
Cybersecurity, features, Global Security News, release, Service Updates, update
Integrate Threat Intelligence Feeds via TAXII Protocol
ANY.RUN’s Threat Intelligence Feeds (TI Feeds) provide security teams with exclusive intel on threats targeting 15,000 companies worldwide. With TAXII protocol, you can safely and easily reinforce your company’s proactive detection with TI Feeds. Why Use TAXII for TI Feeds? TAXII (Trusted Automated eXchange of Indicator Information) allows for swift and comfortable delivery of threat…
Cybersecurity, features, Global Security News, release, Service Updates, update
Integrate Threat Intelligence Feeds via TAXII Protocol
ANY.RUN’s Threat Intelligence Feeds (TI Feeds) provide security teams with exclusive intel on threats targeting 15,000 companies worldwide. With TAXII protocol, you can safely and easily reinforce your company’s proactive detection with TI Feeds. Why Use TAXII for TI Feeds? TAXII (Trusted Automated eXchange of Indicator Information) allows for swift and comfortable delivery of threat…
Cybersecurity, features, Global Security News, release, Service Updates, update
Integrate Threat Intelligence Feeds via TAXII Protocol
ANY.RUN’s Threat Intelligence Feeds (TI Feeds) provide security teams with exclusive intel on threats targeting 15,000 companies worldwide. With TAXII protocol, you can safely and easily reinforce your company’s proactive detection with TI Feeds. Why Use TAXII for TI Feeds? TAXII (Trusted Automated eXchange of Indicator Information) allows for swift and comfortable delivery of threat…
Cybersecurity, features, Global Security News, release, Service Updates, update
Integrate Threat Intelligence Feeds via TAXII Protocol
ANY.RUN’s Threat Intelligence Feeds (TI Feeds) provide security teams with exclusive intel on threats targeting 15,000 companies worldwide. With TAXII protocol, you can safely and easily reinforce your company’s proactive detection with TI Feeds. Why Use TAXII for TI Feeds? TAXII (Trusted Automated eXchange of Indicator Information) allows for swift and comfortable delivery of threat…
ANYRUN, Cybersecurity, Emerging Tech, features, Global Security News, release, Service Updates
Release Notes: TAXII Support for TI Feeds, New Sandbox Onboarding, and 900+ Detection Rules
We’ve packed May with updates to make your experience smoother and your threat detection even sharper. Whether you’re just getting started or knee-deep in malware every day, these changes are here to save you time and give you better insights. In this update: A brand-new onboarding tutorial in the sandbox to guide you step by…
ANYRUN, Cybersecurity, Emerging Tech, features, Global Security News, release, Service Updates
Release Notes: TAXII Support for TI Feeds, New Sandbox Onboarding, and 900+ Detection Rules
We’ve packed May with updates to make your experience smoother and your threat detection even sharper. Whether you’re just getting started or knee-deep in malware every day, these changes are here to save you time and give you better insights. In this update: A brand-new onboarding tutorial in the sandbox to guide you step by…
ANYRUN, Cybersecurity, Emerging Tech, features, Global Security News, release, Service Updates
Release Notes: TAXII Support for TI Feeds, New Sandbox Onboarding, and 900+ Detection Rules
We’ve packed May with updates to make your experience smoother and your threat detection even sharper. Whether you’re just getting started or knee-deep in malware every day, these changes are here to save you time and give you better insights. In this update: A brand-new onboarding tutorial in the sandbox to guide you step by…
ANYRUN, Cybersecurity, Emerging Tech, features, Global Security News, release, Service Updates
Release Notes: TAXII Support for TI Feeds, New Sandbox Onboarding, and 900+ Detection Rules
We’ve packed May with updates to make your experience smoother and your threat detection even sharper. Whether you’re just getting started or knee-deep in malware every day, these changes are here to save you time and give you better insights. In this update: A brand-new onboarding tutorial in the sandbox to guide you step by…