{"id":22386,"date":"2026-07-30T06:13:53","date_gmt":"2026-07-30T06:13:53","guid":{"rendered":"https:\/\/any.run\/cybersecurity-blog\/?p=22386"},"modified":"2026-07-30T07:30:22","modified_gmt":"2026-07-30T07:30:22","slug":"july-threat-coverage-2026","status":"publish","type":"post","link":"https:\/\/any.run\/cybersecurity-blog\/july-threat-coverage-2026\/","title":{"rendered":"Threat Coverage Digest: New TI Report, Threat Research and 750+ Detection Rules"},"content":{"rendered":"\n

July brought another set of threat coverage updates designed to help security teams work faster and with more confidence. ANY.RUN<\/a> added 42 behavior signatures, 11 YARA rules, and 703 Suricata rules, giving SOCs broader visibility across files, malware behavior, and network activity. <\/p>\n\n\n\n

We also published new threat intelligence and technical research on active malware and phishing campaigns. Together, these updates help teams validate alerts sooner, reduce manual investigation work, and make faster response decisions. <\/p>\n\n\n\n

Here is a closer look at July\u2019s threat coverage and research updates. <\/p>\n\n\n\n

Threat Intelligence Report <\/h2>\n\n\n\n

In July, we published a new Threat Intelligence Report<\/a> covering ORACLESPY, Rokarolla, and ZOHOMURK. <\/p>\n\n\n\n

Available to TI Lookup Premium<\/a> users, the report includes IOCs, detection guidance, MITRE ATT&CK mappings, and TI Lookup queries for exploring related activity and sandbox sessions. <\/p>\n\n\n

\n
\"TI
TI Reports on malware and phishing attacks for deeper investigations<\/em><\/figcaption><\/figure>\n<\/div>\n\n\n

The report covers: <\/p>\n\n\n\n