{"id":22977,"date":"2026-09-03T09:11:42","date_gmt":"2026-09-03T09:11:42","guid":{"rendered":"https:\/\/any.run\/cybersecurity-blog\/?p=22977"},"modified":"2026-09-03T09:30:36","modified_gmt":"2026-09-03T09:30:36","slug":"release-notes-august-2026","status":"publish","type":"post","link":"https:\/\/any.run\/cybersecurity-blog\/release-notes-august-2026\/","title":{"rendered":"Release Notes: Faster TI Investigations, Fresh Threat Research, and 650+ Threat Coverage Updates"},"content":{"rendered":"\n

Security teams need threat intelligence that helps them move quickly from a suspicious indicator to the context, evidence, and next action. ANY.RUN<\/a>\u2019s August updates focus on making that process faster and more practical, while expanding detection coverage across host, file, and network activity. <\/p>\n\n\n\n

The release brings a more connected Threat Intelligence Lookup<\/a> experience, broader threat coverage, and new research on active campaigns and emerging malware, giving analysts more context to investigate threats, reduce manual work, and act with greater confidence. <\/p>\n\n\n\n

Product Updates <\/h2>\n\n\n\n

This month\u2019s product update focuses on making threat intelligence easier to investigate and act on. Threat Intelligence Lookup now gives analysts a clearer path from a single indicator to related infrastructure, relevant observables, and the next step in the investigation. <\/p>\n\n\n\n

New Connections Block in TI Lookup for Faster Threat Investigation <\/h3>\n\n\n\n

Threat Intelligence Lookup<\/a> now makes it much easier to move from a single indicator to the wider network context around it. Instead of piecing together separate results, analysts can quickly follow related observables, focus on what matters, and move from a TI query to the next investigation step with less manual work. <\/p>\n\n\n\n

The Domains, IPs, and URLs<\/strong> tabs have also been updated to make related observables easier to explore and pivot between. Whitelisted data is hidden by default, helping analysts focus on potentially relevant activity without legitimate infrastructure crowding the results. <\/p>\n\n\n

\n
\"TI
TI Lookup Connections bringing related observables into one investigation view<\/em><\/figcaption><\/figure>\n<\/div>\n\n\n

Analysts can also export filtered results in JSON<\/strong>, so selected observables can be reused for retrohunting, checked against SIEM\/NDR data, added to blocking workflows, or passed to Detection Engineering for further action. <\/p>\n\n\n\n

Instead of stopping at a verdict or a list of indicators, analysts can now use TI Lookup to: <\/p>\n\n\n\n