{"id":24126,"date":"2026-11-02T12:12:32","date_gmt":"2026-11-02T12:12:32","guid":{"rendered":"https:\/\/any.run\/cybersecurity-blog\/?p=24126"},"modified":"2026-11-02T12:33:54","modified_gmt":"2026-11-02T12:33:54","slug":"it-sa-2026-recap","status":"publish","type":"post","link":"https:\/\/any.run\/cybersecurity-blog\/it-sa-2026-recap\/","title":{"rendered":"it-sa 2026 Recap: Key Trends Shaping Security Operations"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">From October 27 to 29, the <a href=\"https:\/\/any.run\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=it-sa-2026-recap&amp;utm_term=02112026&amp;utm_content=linktolanding\" target=\"_blank\" rel=\"noopener\">ANY.RUN<\/a> team joined <strong>it-sa 2026 in Nuremberg<\/strong>, meeting customers, partners, SOC and MSSP teams, and cybersecurity professionals from across Europe. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Three days of conversations gave us a valuable opportunity to hear what security teams are focused on today, exchange ideas about evolving security operations, and discuss how malware analysis and threat intelligence can support faster and more confident decisions. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Meeting Customers and the Cybersecurity Community <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This year, visitors could meet ANY.RUN at two locations: our booth in <strong>Hall 9, Stand 9-114<\/strong>, and in <strong>Hall 6, Stand 6-432 together with ALLNET GmbH<\/strong>. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It was great to reconnect with existing customers, meet new organizations, and speak directly with security professionals working with malware, phishing, incident response, and threat intelligence every day. <\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"721\" src=\"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVoUZZNWcAAA4T5-1024x721.jpeg\" alt=\"\" class=\"wp-image-24127\" srcset=\"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVoUZZNWcAAA4T5-1024x721.jpeg 1024w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVoUZZNWcAAA4T5-300x211.jpeg 300w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVoUZZNWcAAA4T5-767x540.jpeg 767w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVoUZZNWcAAA4T5-1536x1081.jpeg 1536w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVoUZZNWcAAA4T5-370x260.jpeg 370w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVoUZZNWcAAA4T5-270x190.jpeg 270w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVoUZZNWcAAA4T5-2048x1441.jpeg 2048w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVoUZZNWcAAA4T5-740x521.jpeg 740w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><em>The ANY.RUN team at it-sa Expo&amp;Congress 2026<\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Many conversations focused on practical challenges familiar to modern <a href=\"https:\/\/any.run\/enterprise\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=it-sa-2026-recap&amp;utm_term=02112026&amp;utm_content=linktoenterprise\" target=\"_blank\" rel=\"noopener\">SOC<\/a> and <a href=\"https:\/\/any.run\/mssp\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=it-sa-2026-recap&amp;utm_term=02112026&amp;utm_content=linktomssp\" target=\"_blank\" rel=\"noopener\">MSSP<\/a> teams: <\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Reducing time spent validating suspicious files and URLs;<\/strong> <\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Giving analysts stronger evidence for incident response decisions;<\/strong> <\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Using fresh threat intelligence to support investigation and threat hunting;<\/strong> <\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Improving detection against new and changing threats;<\/strong> <\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Building security processes that meet growing enterprise and regulatory requirements.<\/strong> <\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">These conversations are especially valuable because they connect technology with the reality of day-to-day security operations. They also give our team direct insight into the priorities, constraints, and workflows that security teams are dealing with across different industries and environments. <\/p>\n\n\n\n<!-- Regular Banner START -->\n<div class=\"regular-banner\">\n<!-- Text Content -->\n<p class=\"regular-banner__text\">\n90% of companies achieve <span class=\"highlight\">higher detection rates  <\/span>\nwith actionable threat intelligence. <\/p>\n<!-- CTA Link -->\n<a class=\"regular-banner__link\" id=\"article-banner-regular\" href=\"https:\/\/any.run\/threat-intelligence-lookup\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=it-sa-2026-recap&amp;utm_term=02112026&amp;utm_content=linktotilookuplanding#contact-sales\" rel=\"noopener\" target=\"_blank\">\nBoost Your Threat Visibility <\/a>\n<\/div>\n<!-- Regular Banner END -->\n<!-- Regular Banner Styles START -->\n\n<style>\n.regular-banner {\ndisplay: flex;\ntext-align: center;\nflex-direction: column;\nalign-items: center;\ngap: 1.5rem;\nwidth: 100%;\npadding: 2rem;\nmargin: 1.5rem 0;\nborder-radius: 0.5rem;\nfont-family: 'Catamaran Bold';\nmargin-inline: auto;\nbackground: rgba(32, 168, 241, 0.1);\nborder: 1px solid rgba(75, 174, 227, 0.32);\n}\n\n.regular-banner__text {\nfont-size: 1.5rem;\nmargin: 0;\n}\n\n.highlight {\ncolor: #ea2526;\n}\n\n.regular-banner__link {\npadding: 0.5rem 1.5rem;\nfont-weight: 500;\ntext-decoration: none;\nborder-radius: 0.5rem;\ncolor: #FFFFFF;\nbackground-color: #1491D4;\ntext-align: center;\ntransition: all 0.2s ease-in;\n}\n\n.regular-banner__link:hover {\nbackground-color: #68CBFF;\ncolor: white;\n}\n<\/style>\n<!-- Regular Banner Styles END -->\n\n\n\n<h2 class=\"wp-block-heading\">DORA, NIS2, and Security Compliance Were Part of the Conversation <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Compliance and operational resilience were also recurring topics at it-sa. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For organizations operating in Europe, frameworks such as <a href=\"https:\/\/any.run\/cybersecurity-blog\/dora-tlpt-requirements-explained\/\" target=\"_blank\" rel=\"noopener\"><strong>DORA<\/strong><\/a> <strong>and NIS2<\/strong> continue to influence how security teams approach ICT risk, incident handling, supply-chain security, operational resilience, and relationships with technology providers. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As a result, organizations evaluating cybersecurity solutions increasingly look beyond individual technical capabilities. The security controls of the provider, protection of sensitive information, and the ability to support controlled enterprise workflows are also part of the discussion. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ANY.RUN has achieved <strong>SOC 2 Type II attestation and ISO 27001 certification<\/strong>, independently validating the controls and information security management practices behind our malware analysis and threat intelligence services. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For organizations with strict internal security and vendor requirements, these standards provide additional assurance when integrating ANY.RUN into investigation and threat intelligence workflows. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">From Faster Triage and Response to Stronger Security Operations <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A key topic in our conversations at it-sa was how <a href=\"https:\/\/any.run\/enterprise\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=it-sa-2026-recap&amp;utm_term=02112026&amp;utm_content=linktoenterprise\" target=\"_blank\" rel=\"noopener\">SOC<\/a> and <a href=\"https:\/\/any.run\/mssp\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=it-sa-2026-recap&amp;utm_term=02112026&amp;utm_content=linktomssp\" target=\"_blank\" rel=\"noopener\">MSSP<\/a> teams can improve the entire security operations workflow, from detecting suspicious activity to validating threats, investigating incidents, and strengthening future detection. <\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"721\" src=\"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGS0EWIAIoPeX-1024x721.jpeg\" alt=\"\" class=\"wp-image-24128\" srcset=\"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGS0EWIAIoPeX-1024x721.jpeg 1024w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGS0EWIAIoPeX-300x211.jpeg 300w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGS0EWIAIoPeX-767x540.jpeg 767w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGS0EWIAIoPeX-1536x1081.jpeg 1536w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGS0EWIAIoPeX-2048x1441.jpeg 2048w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGS0EWIAIoPeX-370x260.jpeg 370w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGS0EWIAIoPeX-270x190.jpeg 270w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGS0EWIAIoPeX-740x521.jpeg 740w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><em>Join 16K organizations using threat intelligence to investigate suspicious activity<\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Reducing manual work at each stage is essential to keeping investigations moving.<\/strong> When analysts spend too much time validating alerts, collecting indicators, or rebuilding investigation context, response decisions take longer and unnecessary escalations consume senior analysts&#8217; time. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ANY.RUN helps teams address these challenges through connected malware analysis and threat intelligence workflows. <\/p>\n\n\n\n<!-- Regular Banner START -->\n<div class=\"regular-banner\">\n<!-- Text Content -->\n<p class=\"regular-banner__text\">\n<span class=\"highlight\">Cut 21 minutes from MTTR per case<\/span>\nthrough faster, behavior-based analysis.&nbsp; <\/p>\n<!-- CTA Link -->\n<a class=\"regular-banner__link\" id=\"article-banner-regular\" href=\"https:\/\/any.run\/enterprise\/?utm_source=anyrunblog&#038;utm_medium=article&#038;utm_campaign=it-sa-2026-recap&#038;utm_term=02112026&#038;utm_content=linktoenterprise#contact-sales\" rel=\"noopener\" target=\"_blank\">\nOptimize Your SOC Workflow <\/a>\n<\/div>\n<!-- Regular Banner END -->\n<!-- Regular Banner Styles START -->\n\n<style>\n.regular-banner {\ndisplay: flex;\ntext-align: center;\nflex-direction: column;\nalign-items: center;\ngap: 1.5rem;\nwidth: 100%;\npadding: 2rem;\nmargin: 1.5rem 0;\nborder-radius: 0.5rem;\nfont-family: 'Catamaran Bold';\nmargin-inline: auto;\nbackground: rgba(32, 168, 241, 0.1);\nborder: 1px solid rgba(75, 174, 227, 0.32);\n}\n\n.regular-banner__text {\nfont-size: 1.5rem;\nmargin: 0;\n}\n\n.highlight {\ncolor: #ea2526;\n}\n\n.regular-banner__link {\npadding: 0.5rem 1.5rem;\nfont-weight: 500;\ntext-decoration: none;\nborder-radius: 0.5rem;\ncolor: #FFFFFF;\nbackground-color: #1491D4;\ntext-align: center;\ntransition: all 0.2s ease-in;\n}\n\n.regular-banner__link:hover {\nbackground-color: #68CBFF;\ncolor: white;\n}\n<\/style>\n<!-- Regular Banner Styles END -->\n\n\n\n<h3 class=\"wp-block-heading\">Validate Threats Faster and Improve Escalation Decisions <\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">At the triage stage, <a href=\"https:\/\/any.run\/features\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=it-sa-2026-recap&amp;utm_term=02112026&amp;utm_content=linktosandboxlanding\" target=\"_blank\" rel=\"noopener\">ANY.RUN&#8217;s Interactive Sandbox<\/a> helps analysts quickly examine suspicious files and URLs, observe malicious behavior, and collect evidence for a confident verdict. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This allows Tier 1 analysts to resolve more cases with sufficient evidence and escalate those that genuinely require deeper investigation. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The operational impact is measurable: <strong>94% of ANY.RUN users report faster triage<\/strong>, while SOC workflows using ANY.RUN have demonstrated <strong>30% fewer Tier 1 to Tier 2 escalations<\/strong>. <\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Accelerate Investigations and Response <\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When an alert requires deeper investigation, analysts need to understand the threat, identify related activity, and determine the potential incident scope without repeating earlier research. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/any.run\/threat-intelligence-lookup\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=it-sa-2026-recap&amp;utm_term=02112026&amp;utm_content=linktotilookuplanding\" target=\"_blank\" rel=\"noopener\">ANY.RUN Threat Intelligence Lookup<\/a> helps teams investigate indicators, uncover related infrastructure, and connect behavioral findings with broader threat context. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Together, behavioral analysis and threat intelligence support faster investigation decisions and clearer handoffs between SOC tiers. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Across ANY.RUN-supported workflows, <strong>95% of SOCs report faster threat investigations<\/strong>, with a reported <strong>21-minute improvement in Mean Time to Respond<\/strong>. <\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Turn Investigation Findings into Earlier Detection <\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The value of an investigation extends beyond resolving the immediate incident. Confirmed malicious indicators and newly identified infrastructure can also help security teams improve future monitoring. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/any.run\/threat-intelligence-feeds\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=it-sa-2026-recap&amp;utm_term=02112026&amp;utm_content=linktotifeedslanding\" target=\"_blank\" rel=\"noopener\">ANY.RUN Threat Intelligence Feeds<\/a> help operationalize fresh indicators in existing security systems, supporting earlier detection and reducing the need for repeated manual checks. <\/p>\n\n\n\n<!-- Regular Banner START -->\n<div class=\"regular-banner\">\n<!-- Text Content -->\n<p class=\"regular-banner__text\">\n<span class=\"highlight\">Identify up to 58% more threats<\/span>\nand gain broader visibility into emerging attacks.&nbsp;&nbsp; <\/p>\n<!-- CTA Link -->\n<a class=\"regular-banner__link\" id=\"article-banner-regular\" href=\"https:\/\/any.run\/enterprise\/?utm_source=anyrunblog&#038;utm_medium=article&#038;utm_campaign=it-sa-2026-recap&#038;utm_term=02112026&#038;utm_content=linktoenterprise#contact-sales\" rel=\"noopener\" target=\"_blank\">\nExpand Your Threat Coverage <\/a>\n<\/div>\n<!-- Regular Banner END -->\n<!-- Regular Banner Styles START -->\n\n<style>\n.regular-banner {\ndisplay: flex;\ntext-align: center;\nflex-direction: column;\nalign-items: center;\ngap: 1.5rem;\nwidth: 100%;\npadding: 2rem;\nmargin: 1.5rem 0;\nborder-radius: 0.5rem;\nfont-family: 'Catamaran Bold';\nmargin-inline: auto;\nbackground: rgba(32, 168, 241, 0.1);\nborder: 1px solid rgba(75, 174, 227, 0.32);\n}\n\n.regular-banner__text {\nfont-size: 1.5rem;\nmargin: 0;\n}\n\n.highlight {\ncolor: #ea2526;\n}\n\n.regular-banner__link {\npadding: 0.5rem 1.5rem;\nfont-weight: 500;\ntext-decoration: none;\nborder-radius: 0.5rem;\ncolor: #FFFFFF;\nbackground-color: #1491D4;\ntext-align: center;\ntransition: all 0.2s ease-in;\n}\n\n.regular-banner__link:hover {\nbackground-color: #68CBFF;\ncolor: white;\n}\n<\/style>\n<!-- Regular Banner Styles END -->\n\n\n\n<p class=\"wp-block-paragraph\">For <a href=\"https:\/\/any.run\/enterprise\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=it-sa-2026-recap&amp;utm_term=02112026&amp;utm_content=linktoenterprise\" target=\"_blank\" rel=\"noopener\">SOCs<\/a>, this creates a continuous process where investigation findings contribute to stronger detection. For <a href=\"https:\/\/any.run\/mssp\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=it-sa-2026-recap&amp;utm_term=02112026&amp;utm_content=linktomssp\" target=\"_blank\" rel=\"noopener\">MSSPs<\/a>, it supports consistent investigation practices, better escalation quality, and more efficient security operations across customer environments. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Thank You for Meeting Us at it-sa 2026 <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">it-sa 2026 was another great opportunity to meet the people behind the security teams we work with every day. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Thank you to everyone who stopped by our booths, shared their experience, asked questions, discussed their security challenges, or simply came to say hello. We also want to thank <strong>ALLNET GmbH<\/strong> for joining us at the event. <\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"721\" src=\"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGSgLW4AAeGHG-1024x721.jpeg\" alt=\"\" class=\"wp-image-24129\" srcset=\"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGSgLW4AAeGHG-1024x721.jpeg 1024w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGSgLW4AAeGHG-300x211.jpeg 300w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGSgLW4AAeGHG-767x540.jpeg 767w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGSgLW4AAeGHG-370x260.jpeg 370w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGSgLW4AAeGHG-270x190.jpeg 270w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGSgLW4AAeGHG-1536x1081.jpeg 1536w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGSgLW4AAeGHG-2048x1441.jpeg 2048w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/HVtGSgLW4AAeGHG-740x521.jpeg 740w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><em>ANY.RUN exchanging insights and strengthening cybersecurity collaborations at it-sa 2026<\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Conversations like these help us stay close to the real operational needs of SOCs, MSSPs, threat hunters, and incident response teams. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We look forward to meeting the cybersecurity community again at the next event. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">About ANY.RUN <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/any.run\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=it-sa-2026-recap&amp;utm_term=02112026&amp;utm_content=linktolanding\" target=\"_blank\" rel=\"noopener\">ANY.RUN<\/a> helps security teams improve malware and phishing analysis across triage, investigation, incident response, threat hunting, and detection engineering. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Its Interactive Sandbox and Threat Intelligence solutions are used by more than <strong>700,000 security professionals and 16,000 organizations<\/strong> worldwide. ANY.RUN has achieved SOC 2 Type II attestation and ISO 27001 certification, supporting enterprise requirements for information security and data protection. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Want to discuss how ANY.RUN can fit into your security operations? <a href=\"https:\/\/any.run\/enterprise\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=it-sa-2026-recap&amp;utm_term=02112026&amp;utm_content=linktoenterprise#contact-sales\" target=\"_blank\" rel=\"noopener\">Contact our team<\/a>. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>From October 27 to 29, the ANY.RUN team joined it-sa 2026 in Nuremberg, meeting customers, partners, SOC and MSSP teams, and cybersecurity professionals from across Europe. Three days of conversations gave us a valuable opportunity to hear what security teams are focused on today, exchange ideas about evolving security operations, and discuss how malware analysis [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":24133,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[60],"tags":[57,69,10],"class_list":["post-24126","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-anyrun","tag-conference","tag-cybersecurity"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>ANY.RUN at it-sa Expo&amp;Congress 2026<\/title>\n<meta name=\"description\" content=\"ANY.RUN recaps it-sa 2026, connecting with cybersecurity professionals and sharing threat analysis insights.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/any.run\/cybersecurity-blog\/it-sa-2026-recap\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"ANY.RUN\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/it-sa-2026-recap\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/it-sa-2026-recap\\\/\"},\"author\":{\"name\":\"ANY.RUN\",\"@id\":\"https:\\\/\\\/any.run\\\/\"},\"headline\":\"it-sa 2026 Recap: Key Trends Shaping Security Operations\",\"datePublished\":\"2026-11-02T12:12:32+00:00\",\"dateModified\":\"2026-11-02T12:33:54+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/it-sa-2026-recap\\\/\"},\"wordCount\":958,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/any.run\\\/\"},\"image\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/it-sa-2026-recap\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/ANYRUNs_itsa_2026_Experience-scaled.png\",\"keywords\":[\"ANYRUN\",\"conference\",\"cybersecurity\"],\"articleSection\":[\"News\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/it-sa-2026-recap\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/it-sa-2026-recap\\\/\",\"url\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/it-sa-2026-recap\\\/\",\"name\":\"ANY.RUN at it-sa Expo&Congress 2026\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/any.run\\\/\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/it-sa-2026-recap\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/it-sa-2026-recap\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/ANYRUNs_itsa_2026_Experience-scaled.png\",\"datePublished\":\"2026-11-02T12:12:32+00:00\",\"dateModified\":\"2026-11-02T12:33:54+00:00\",\"description\":\"ANY.RUN recaps it-sa 2026, connecting with cybersecurity professionals and sharing threat analysis insights.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/it-sa-2026-recap\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/it-sa-2026-recap\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/it-sa-2026-recap\\\/#primaryimage\",\"url\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/ANYRUNs_itsa_2026_Experience-scaled.png\",\"contentUrl\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/ANYRUNs_itsa_2026_Experience-scaled.png\",\"width\":2560,\"height\":1243,\"caption\":\"ANY.RUN at it-sa Expo&Congress 2026\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/it-sa-2026-recap\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"News\",\"item\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/category\\\/news\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"it-sa 2026 Recap: Key Trends Shaping Security Operations\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/any.run\\\/\",\"url\":\"https:\\\/\\\/any.run\\\/\",\"name\":\"ANY.RUN&#039;s Cybersecurity Blog\",\"description\":\"Cybersecurity Blog covers topics for experienced professionals as well as for those new to it.\",\"publisher\":{\"@id\":\"https:\\\/\\\/any.run\\\/\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/any.run\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/any.run\\\/\",\"name\":\"ANY.RUN\",\"url\":\"https:\\\/\\\/any.run\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/any.run\\\/\",\"url\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/ANYRUN-Icon.svg\",\"contentUrl\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/ANYRUN-Icon.svg\",\"width\":1,\"height\":1,\"caption\":\"ANY.RUN\"},\"image\":{\"@id\":\"https:\\\/\\\/any.run\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/www.any.run\\\/\",\"https:\\\/\\\/x.com\\\/anyrun_app\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/30692044\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCOgCPho7lzmH7m6fPNlukrQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/any.run\\\/\",\"name\":\"ANY.RUN\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g\",\"caption\":\"ANY.RUN\"},\"url\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/author\\\/a-bespalova\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"ANY.RUN at it-sa Expo&Congress 2026","description":"ANY.RUN recaps it-sa 2026, connecting with cybersecurity professionals and sharing threat analysis insights.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/any.run\/cybersecurity-blog\/it-sa-2026-recap\/","twitter_misc":{"Written by":"ANY.RUN","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/any.run\/cybersecurity-blog\/it-sa-2026-recap\/#article","isPartOf":{"@id":"https:\/\/any.run\/cybersecurity-blog\/it-sa-2026-recap\/"},"author":{"name":"ANY.RUN","@id":"https:\/\/any.run\/"},"headline":"it-sa 2026 Recap: Key Trends Shaping Security Operations","datePublished":"2026-11-02T12:12:32+00:00","dateModified":"2026-11-02T12:33:54+00:00","mainEntityOfPage":{"@id":"https:\/\/any.run\/cybersecurity-blog\/it-sa-2026-recap\/"},"wordCount":958,"commentCount":0,"publisher":{"@id":"https:\/\/any.run\/"},"image":{"@id":"https:\/\/any.run\/cybersecurity-blog\/it-sa-2026-recap\/#primaryimage"},"thumbnailUrl":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/ANYRUNs_itsa_2026_Experience-scaled.png","keywords":["ANYRUN","conference","cybersecurity"],"articleSection":["News"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/any.run\/cybersecurity-blog\/it-sa-2026-recap\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/any.run\/cybersecurity-blog\/it-sa-2026-recap\/","url":"https:\/\/any.run\/cybersecurity-blog\/it-sa-2026-recap\/","name":"ANY.RUN at it-sa Expo&Congress 2026","isPartOf":{"@id":"https:\/\/any.run\/"},"primaryImageOfPage":{"@id":"https:\/\/any.run\/cybersecurity-blog\/it-sa-2026-recap\/#primaryimage"},"image":{"@id":"https:\/\/any.run\/cybersecurity-blog\/it-sa-2026-recap\/#primaryimage"},"thumbnailUrl":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/ANYRUNs_itsa_2026_Experience-scaled.png","datePublished":"2026-11-02T12:12:32+00:00","dateModified":"2026-11-02T12:33:54+00:00","description":"ANY.RUN recaps it-sa 2026, connecting with cybersecurity professionals and sharing threat analysis insights.","breadcrumb":{"@id":"https:\/\/any.run\/cybersecurity-blog\/it-sa-2026-recap\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/any.run\/cybersecurity-blog\/it-sa-2026-recap\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/any.run\/cybersecurity-blog\/it-sa-2026-recap\/#primaryimage","url":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/ANYRUNs_itsa_2026_Experience-scaled.png","contentUrl":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/ANYRUNs_itsa_2026_Experience-scaled.png","width":2560,"height":1243,"caption":"ANY.RUN at it-sa Expo&Congress 2026"},{"@type":"BreadcrumbList","@id":"https:\/\/any.run\/cybersecurity-blog\/it-sa-2026-recap\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/any.run\/cybersecurity-blog\/"},{"@type":"ListItem","position":2,"name":"News","item":"https:\/\/any.run\/cybersecurity-blog\/category\/news\/"},{"@type":"ListItem","position":3,"name":"it-sa 2026 Recap: Key Trends Shaping Security Operations"}]},{"@type":"WebSite","@id":"https:\/\/any.run\/","url":"https:\/\/any.run\/","name":"ANY.RUN&#039;s Cybersecurity Blog","description":"Cybersecurity Blog covers topics for experienced professionals as well as for those new to it.","publisher":{"@id":"https:\/\/any.run\/"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/any.run\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/any.run\/","name":"ANY.RUN","url":"https:\/\/any.run\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/any.run\/","url":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2020\/08\/ANYRUN-Icon.svg","contentUrl":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2020\/08\/ANYRUN-Icon.svg","width":1,"height":1,"caption":"ANY.RUN"},"image":{"@id":"https:\/\/any.run\/"},"sameAs":["https:\/\/www.facebook.com\/www.any.run\/","https:\/\/x.com\/anyrun_app","https:\/\/www.linkedin.com\/company\/30692044","https:\/\/www.youtube.com\/channel\/UCOgCPho7lzmH7m6fPNlukrQ"]},{"@type":"Person","@id":"https:\/\/any.run\/","name":"ANY.RUN","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g","caption":"ANY.RUN"},"url":"https:\/\/any.run\/cybersecurity-blog\/author\/a-bespalova\/"}]}},"_links":{"self":[{"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/posts\/24126","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/comments?post=24126"}],"version-history":[{"count":2,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/posts\/24126\/revisions"}],"predecessor-version":[{"id":24134,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/posts\/24126\/revisions\/24134"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/media\/24133"}],"wp:attachment":[{"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/media?parent=24126"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/categories?post=24126"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/tags?post=24126"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}