{"id":16218,"date":"2025-10-02T11:37:36","date_gmt":"2025-10-02T11:37:36","guid":{"rendered":"\/cybersecurity-blog\/?p=16218"},"modified":"2026-02-03T14:52:22","modified_gmt":"2026-02-03T14:52:22","slug":"release-notes-september-2025","status":"publish","type":"post","link":"https:\/\/any.run\/cybersecurity-blog\/release-notes-september-2025\/","title":{"rendered":"Release Notes: Palo Alto Networks, Microsoft, IBM Connectors and 2,300+ Suricata Rules"},"content":{"rendered":"\n

September brought big updates to ANY.RUN<\/a>. From four new connectors<\/strong> that plug our sandbox and threat intelligence straight into the world\u2019s top SIEM and SOAR platforms, to a redesigned <\/strong>Threat Intelligence Lookup home screen<\/strong><\/a> built for speed and simplicity, your SOC now works smarter and faster than ever.  <\/p>\n\n\n\n

Add in 99 fresh signatures, 11 new YARA<\/a> rules, and 2,322 Suricata<\/a> rules<\/strong>, and you\u2019ve got sharper coverage against the latest ransomware, stealers, and phishing campaigns. <\/p>\n\n\n\n

Product Updates <\/h2>\n\n\n\n

Expanding the Ecosystem: New Integrations and Connectors for Top SIEMs & SOARs <\/h3>\n\n\n\n

We continue to grow the ANY.RUN ecosystem so security teams can work inside familiar platforms while gaining richer, faster visibility into threats. The new integrations with IBM QRadar SIEM, Palo Alto Networks Cortex XSOAR, Microsoft Sentinel, and Microsoft Defender<\/strong> bring sandboxing and real-time IOCs directly into your daily workflows. <\/p>\n\n\n

\n
\"\"
File analysis with ANY.RUN\u2019s Interactive Sandbox inside Cortex XSOAR<\/em> <\/figcaption><\/figure><\/div>\n\n\n

Instead of switching platforms or manually enriching alerts, analysts can now automate malware analysis, correlate logs with high-fidelity IOCs, and prioritize incidents faster; all without disrupting existing workflows. <\/p>\n\n\n\n

    \n
  1. IBM QRadar SIEM<\/a>: Enrich log and event correlation with real-time IOCs<\/a> from ANY.RUN\u2019s Threat Intelligence Feeds<\/a>. Analysts can pivot from QRadar alerts straight into sandbox context for faster triage. <\/li>\n<\/ol>\n\n\n\n
      \n
    1. Palo Alto Networks Cortex XSOAR<\/a>: Build automated playbooks that include sandbox analysis enrichment, IOCs from TI Feeds, and Threat Intelligence lookup<\/a> without leaving XSOAR. <\/li>\n<\/ol>\n\n\n\n
        \n
      1. Microsoft Sentinel<\/a>: Detonate suspicious files and links directly from Sentinel alerts and get enriched verdicts and IOCs fed back automatically. <\/li>\n<\/ol>\n\n\n
        \n
        \"\"
        An alert generated in MS Defender based on an indicator from TI Feeds<\/em><\/figcaption><\/figure><\/div>\n\n\n
          \n
        1. Microsoft Defender<\/a>: Enhance endpoint alerts with Interactive Sandbox<\/a> insights and live Threat Intelligence Feeds, reducing manual enrichment and improving accuracy. <\/li>\n<\/ol>\n\n\n\n\n
          \n\n

          \nIntegrate ANY.RUN\u2019s products for stronger proactive security<\/span>
          Request a quote or demo for your SOC  \n<\/p>\n\n          \nContact us<\/a>\n\n<\/div>\n\n\n\n