{"id":16646,"date":"2025-11-01T10:18:34","date_gmt":"2025-11-01T10:18:34","guid":{"rendered":"\/cybersecurity-blog\/?p=16646"},"modified":"2025-11-01T10:18:34","modified_gmt":"2025-11-01T10:18:34","slug":"release-notes-october-2025","status":"publish","type":"post","link":"https:\/\/any.run\/cybersecurity-blog\/release-notes-october-2025\/","title":{"rendered":"Release Notes: ANY.RUN & ThreatQ Integration, 3,000+ New Rules, and Expanded Detection Coverage\u00a0"},"content":{"rendered":"\n

October brought another strong round of updates to ANY.RUN<\/a>, from a new ThreatQ integration<\/strong> that connects our real-time Threat Intelligence Feeds directly into one of the industry\u2019s leading TIPs, to hundreds of new signatures and rules that sharpen network and behavioral detection. <\/p>\n\n\n\n

With 125 new behavior signatures<\/strong>, 17 YARA rules<\/strong>, and 3,264 Suricata rules<\/strong>, analysts can now spot emerging threats faster and with greater precision. Together with the ThreatQ connector, these improvements make it easier for SOCs and MSSPs to enrich alerts, automate response, and gain deeper visibility into live attack activity. <\/p>\n\n\n\n

Product Updates <\/h2>\n\n\n\n

Expanding Threat Intelligence Reach: ANY.RUN & ThreatQ <\/h3>\n\n\n\n

October brought another major milestone to ANY.RUN\u2019s growing ecosystem; a new integration that links ANY.RUN\u2019s Threat Intelligence Feeds<\/a> directly with ThreatQ<\/strong><\/a>, one of the industry\u2019s leading Threat Intelligence Platforms (TIPs). <\/p>\n\n\n\n

This integration helps SOC teams and MSSPs gain real-time visibility into active global threats, cut investigation time, and strengthen detection accuracy across phishing, malware, and network attack surfaces. <\/p>\n\n\n\n

Now, analysts using ThreatQ can automatically ingest fresh, high-confidence IOCs<\/strong> gathered from live sandbox investigations of malware samples detonated by 15,000+ organizations and 500,000+ analysts worldwide<\/strong>. <\/p>\n\n\n\n

How this update helps security teams: <\/p>\n\n\n

\n
\"\"
TI Feeds help SOCs boost key security metrics<\/em>\u00a0<\/figcaption><\/figure><\/div>\n\n\n