{"id":20643,"date":"2026-04-30T11:57:42","date_gmt":"2026-04-30T11:57:42","guid":{"rendered":"https:\/\/any.run\/cybersecurity-blog\/?p=20643"},"modified":"2026-10-14T12:18:39","modified_gmt":"2026-10-14T12:18:39","slug":"release-notes-april-2026","status":"publish","type":"post","link":"https:\/\/any.run\/cybersecurity-blog\/release-notes-april-2026\/","title":{"rendered":"Release Notes: Expanded Threat Intelligence Access, AI Assisted Search 1,770 New Detections and More"},"content":{"rendered":"\n

April brought several updates across ANY.RUN\u2019s Threat Intelligence and detection coverage. <\/p>\n\n\n\n

The biggest change is expanded access to Threat Intelligence: Free plan users now get 20 premium requests in TI Lookup and YARA Search<\/strong>. This gives security teams a practical way to check suspicious indicators, explore related sandbox sessions, and validate malware or phishing activity using real attack data. <\/p>\n\n\n\n

On the detection side, our team added 78 new behavior signatures<\/strong>, 1,657 new Suricata rules<\/strong>, and 35 new YARA rules<\/strong>. We also released new Threat Intelligence Reports covering malware, loaders, RATs, backdoors, and supply-chain threats observed in recent submissions. <\/p>\n\n\n\n

Here\u2019s a closer look at what\u2019s new. <\/p>\n\n\n\n

Product Updates <\/h2>\n\n\n\n

In April, ANY.RUN expanded access to Threat Intelligence<\/a> capabilities, giving more teams a way to test threat context directly in their SOC workflows. <\/p>\n\n\n\n

The key update: Free plan users<\/strong><\/a> now get 20 premium requests in TI Lookup and <\/strong>YARA Search<\/strong><\/a>.<\/strong> This gives security teams a practical way to check indicators, explore related sandbox sessions, and validate suspicious activity using real attack data from ANY.RUN\u2019s community. <\/p>\n\n\n\n

More Threat Context with 20 Premium TI Requests<\/em> <\/h3>\n\n\n\n

Threat intelligence brings the most value when it helps teams make faster decisions during active investigations. Instead of stopping at one suspicious IP, domain, hash, or behavior, analysts can pivot to connected samples, infrastructure, artifacts, and attack context. <\/p>\n\n\n\n

With 20 premium requests now included in the Free plan, SOC and MSSP teams can explore threat data across IOCs, IOBs, and IOAs linked to recent malware and phishing activity. <\/p>\n\n\n

\n
\"\"
TI Lookup request with AI assistant that helps the user select sandbox analyses of malware using a TTP<\/em><\/figcaption><\/figure>\n<\/div>\n\n\n

Teams can use this expanded access across key SOC workflows: <\/p>\n\n\n\n