{"id":15734,"date":"2025-09-04T09:56:44","date_gmt":"2025-09-04T09:56:44","guid":{"rendered":"\/cybersecurity-blog\/?p=15734"},"modified":"2025-09-08T06:39:09","modified_gmt":"2025-09-08T06:39:09","slug":"release-notes-august-2025","status":"publish","type":"post","link":"https:\/\/any.run\/cybersecurity-blog\/release-notes-august-2025\/","title":{"rendered":"Release Notes: Fresh Connectors, SDK Update, and 2,200+ New Detection Rules\u00a0"},"content":{"rendered":"\n

August was a busy month at ANY.RUN. We expanded our list of connectors with Microsoft Sentinel<\/strong> and OpenCTI<\/strong>, added Linux Debian (ARM) support<\/strong> to the SDK, and strengthened detection across hundreds of new malware families and techniques. With fresh signatures, rules, and product updates, your SOC can now investigate faster, detect more threats in real time, and keep defenses sharp against the latest campaigns. <\/p>\n\n\n\n

Let\u2019s dive into the details now. <\/p>\n\n\n\n

Product Updates <\/h2>\n\n\n\n

New Connectors: Bringing Threat Intelligence into Your Existing Stack <\/h3>\n\n\n\n

We continue to expand ANY.RUN connectors so teams can work with familiar tools while boosting threat visibility. Our goal is simple: reduce setup friction and deliver fresh, high-fidelity IOCs directly into your workflows; no extra tools, no complex scripts, no wasted analyst time. <\/p>\n\n\n\n

Microsoft Sentinel <\/h3>\n\n\n\n

ANY.RUN now delivers Threat Intelligence (TI) Feeds<\/strong><\/a> directly to Microsoft Sentinel via the built-in STIX\/TAXII connector<\/a>. That means: <\/p>\n\n\n\n