{"id":24135,"date":"2026-11-03T11:06:12","date_gmt":"2026-11-03T11:06:12","guid":{"rendered":"https:\/\/any.run\/cybersecurity-blog\/?p=24135"},"modified":"2026-11-03T11:06:53","modified_gmt":"2026-11-03T11:06:53","slug":"release-notes-october-2026","status":"publish","type":"post","link":"https:\/\/any.run\/cybersecurity-blog\/release-notes-october-2026\/","title":{"rendered":"Release Notes: Related Threat Context for Faster Than Ever SOC Triage and 590+ Coverage Updates"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Security investigations often begin with a single suspicious IOC, but deciding what it means requires context. The more relevant intelligence analysts can connect to that finding, the better they can determine what deserves attention and what to do next.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>October\u2019s release introduces a new powerful capability in ANY.RUN\u2019s<\/strong> <a href=\"https:\/\/any.run\/features\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=october-release-notes-2026&amp;utm_term=031126&amp;utm_content=linktosandboxlanding\"><strong>Interactive Sandbox<\/strong><\/a>\u2013 <strong>Related Threat Context. Now SOCs and MSSPs can save more time by uncovering relevant IOC connections and unlocking investigative insight with less effort.<\/strong> By bringing relevant intelligence directly into the workflow, analysts can easily assess their findings and decide how to respond without switching between multiple sources.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The release also expands threat coverage and detection capabilities, improving visibility into emerging threats and malicious activity. Together, these updates help SOC and MSSP teams investigate more efficiently, reduce manual effort, and make better-informed decisions with greater confidence.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Product Updates<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This month\u2019s product updates help analysts connect individual indicators with the context needed to decide what to do next. Related Threat Context surfaces relevant intelligence directly in the <a href=\"https:\/\/any.run\/features\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=october-release-notes-2026&amp;utm_term=031126&amp;utm_content=linktosandboxlanding\">Interactive Sandbox<\/a>, while <a href=\"https:\/\/any.run\/threat-intelligence-lookup\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=october-release-notes-2026&amp;utm_term=031126&amp;utm_content=linktotilookuplanding\">Threat Intelligence Lookup<\/a> helps explore related infrastructure, observables, and threat activity.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Related Threat Context: A Major Upgrade That Makes Every SOC Investigation Faster and Smarter<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">An IOC is only the starting point. To decide what to do next, analysts need to know whether it has appeared in previous investigations, is associated with activity in their industry, or connects to known threats.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>With the introduction of a major new update for SOCs and MSSPs<\/strong> \u2013 <strong>Related Threat Context, ANY.RUN\u2019s<\/strong> <a href=\"https:\/\/any.run\/features\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=october-release-notes-2026&amp;utm_term=031126&amp;utm_content=linktosandboxlanding\"><strong>Interactive Sandbox<\/strong><\/a> <strong>takes threat investigations a step further.<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"492\" src=\"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/image-1024x492.png\" alt=\"\" class=\"wp-image-24144\" srcset=\"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/image-1024x492.png 1024w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/image-300x144.png 300w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/image-767x368.png 767w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/image-1536x737.png 1536w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/image-2048x983.png 2048w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/image-370x178.png 370w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/image-270x130.png 270w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/11\/image-740x355.png 740w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><em>Related Threat Context in ANY.RUN\u2019s Interactive Sandbox<\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">For the first time, analysts can discover relevant connections to an IOC directly within their analysis workflow, bringing previously scattered intelligence closer to the moment decisions need to be made.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/app.any.run\/tasks\/390e708f-2dce-4141-a990-2cb4da4977be\/\">See how Related Threat Context works in a live Sandbox analysis<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Connecting IOCs to Three Sources of Intelligence<\/h3>\n\n\n\n<figure class=\"wp-block-video\"><video autoplay loop muted poster=\"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/10\/related_context2.jpeg\" src=\"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/10\/related_context2.mp4\" playsinline width=\"1648\" height=\"864\" style=\"aspect-ratio: 1648 \/ 864;aspect-ratio:1648 \/ 864\"><\/video><figcaption class=\"wp-element-caption\"><em>Related analyses help SOC teams discover additional context about IOCs to better inform response<\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Related analyses bring together three sources of insight, connecting current findings with intelligence that can help shape the next step.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Team Context:<\/strong> Discover previous team investigations involving the same IOC and build on existing findings instead of duplicating work.<\/li>\n\n\n\n<li><strong>Industry Context:<\/strong> See whether the IOC has appeared in analyses associated with your industry. This anonymized information provides an additional signal for prioritization, not proof that your organization is being targeted. Available to eligible internal SOCs, but not MSSPs.<\/li>\n\n\n\n<li><strong>ANY.RUN Threat Intelligence:<\/strong> Explore related analyses, samples, infrastructure, and known threat activity through ANY.RUN <a href=\"https:\/\/any.run\/threat-intelligence-lookup\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=october-release-notes-2026&amp;utm_term=031126&amp;utm_content=linktotilookuplanding\">Threat Intelligence Lookup<\/a>.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">These connections give analysts a more direct way to compare current behavior with previous observations, uncover additional IOCs, and identify promising leads for further investigation.<\/p>\n\n\n\n<!-- Regular Banner START -->\n<div class=\"regular-banner\">\n<!-- Text Content -->\n<p class=\"regular-banner__text\">\nDetect up to 58% more threats <br>with behavioral evidence and deeper insights <span class=\"highlight\">from Interactive Sandbox analysis.<\/span>\n<\/p>\n<!-- CTA Link -->\n<a class=\"regular-banner__link\" id=\"article-banner-regular\" href=\"https:\/\/any.run\/enterprise\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=october-release-notes-2026&amp;utm_term=031126&amp;utm_content=linktoenterprise#contact-sales\" rel=\"noopener\" target=\"_blank\">\nBoost Your Threat Visibility <\/a>\n<\/div>\n<!-- Regular Banner END -->\n<!-- Regular Banner Styles START -->\n\n<style>\n.regular-banner {\ndisplay: flex;\ntext-align: center;\nflex-direction: column;\nalign-items: center;\ngap: 1.5rem;\nwidth: 100%;\npadding: 2rem;\nmargin: 1.5rem 0;\nborder-radius: 0.5rem;\nfont-family: 'Catamaran Bold';\nmargin-inline: auto;\nbackground: rgba(32, 168, 241, 0.1);\nborder: 1px solid rgba(75, 174, 227, 0.32);\n}\n\n.regular-banner__text {\nfont-size: 1.5rem;\nmargin: 0;\n}\n\n.highlight {\ncolor: #ea2526;\n}\n\n.regular-banner__link {\npadding: 0.5rem 1.5rem;\nfont-weight: 500;\ntext-decoration: none;\nborder-radius: 0.5rem;\ncolor: #FFFFFF;\nbackground-color: #1491D4;\ntext-align: center;\ntransition: all 0.2s ease-in;\n}\n\n.regular-banner__link:hover {\nbackground-color: #68CBFF;\ncolor: white;\n}\n<\/style>\n<!-- Regular Banner Styles END -->\n\n\n\n<h3 class=\"wp-block-heading\">From IOC Discovery to Confident SOC Decisions<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Consider a Tier 1 analyst investigating a suspicious URL. The sandbox reveals malicious behavior, but the analyst still needs to decide whether to close the case, investigate further, enrich it with threat intelligence, or escalate it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Related analyses add another layer to that decision.<\/strong> By surfacing previous team findings, relevant industry activity, and broader threat intelligence, they help SOCs and MSSPs assess what they have found without starting separate searches from scratch.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The benefits extend across the entire team. Tier 1 analysts gain more information for triage, incident responders and threat hunters get additional leads for deeper investigation, and team leaders can make better use of existing team knowledge and Tier 2 expertise.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Related Threat Context brings threat intelligence closer to the point of investigation, helping SOCs and MSSPs turn individual IOC findings into more informed decisions and actionable next steps.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/any.run\/cybersecurity-blog\/related-threat-context-release\/\">Explore how Related analyses can strengthen your SOC\u2019s response with deeper threat context.<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Threat Coverage Updates<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">October also brings an expansion of detection coverage, with <strong>591 new signatures in total<\/strong>:<\/p>\n\n\n\n<div class=\"wp-block-group is-layout-grid wp-container-core-group-is-layout-9d260ee2 wp-block-group-is-layout-grid\">\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/app.any.run\/tasks\/619f63b6-ca1f-4ea1-96ef-230620cddc7c\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">r77 Rootkit<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/f8f5c458-907c-4e0f-a04d-f835767418e6\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Courtney<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/41fa340e-9d13-45a8-9f3d-7bbedca7b224\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Hilda<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/4e6f4987-4576-4fed-ac57-1393e877d7e9\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">ACRStealer<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/90c1826f-db4c-4e59-8432-e00d84632486\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Vjw0rm<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/982abbe2-dbb9-4061-a1a6-07788c318f8a\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Sorry<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/52280b90-4efc-423c-bb71-5b54e0847d6c\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Akira<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/e2678771-372e-4175-a253-5da81fed2cec\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Alcatraz<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/bfa68a5f-fcac-480f-83e5-e6a5a70a1f5d\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">GreenBug<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/7355ab54-81fb-47a3-81d1-59d586727f95\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">SRBMiner<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/7191356a-216c-433c-91f0-3de6435bb6da\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">AsyncRAT<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/bde51992-d3f7-44be-9461-f082557fa79b\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">FromBook<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/3229d4d3-90ae-49c0-adcd-64b16db5c2de\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">SigiLoader<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/5fa92e87-d297-4310-83b9-8ee8f368e39b\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">IkovStealer<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/699e67a7-afaa-4459-9c85-f691fc0965d4\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">RMRLX<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/89b17014-0d10-4ef3-bfb4-e93a36ecd296\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Antino<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/d208a092-dbe7-4b9f-9d74-11c67902524d\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Prometei<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/620a0e53-e7fa-44c4-84f3-2b08d27576d8\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">AMOS<\/a><\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/app.any.run\/tasks\/9869661f-6672-4e6a-9c13-6eb006499a19\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">DotStealer<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/c3844701-5a7f-432a-9705-da41ebc5d3f0\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">CloudHaze<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/03b0f1fb-1494-40b5-a7c1-e74ef082f3eb\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">JSPac<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/2eac6673-6597-464c-becc-da3aa36b3702\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Avis<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/4c2f8100-90d9-4d66-9bd5-0cb1d4189da0\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Kremlin<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/1dd89c59-455b-4ff8-9a60-8de41a7ab781\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">LOLD<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/c2b9cb38-4cc5-46ae-85a4-d7ddb5b3972e\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Casbaneiro<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/59c232ae-728f-4531-bb9c-01ad93d1643a\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">BlackHawk<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/d7565a36-15c3-4e33-8145-0c5ad0ae9df2\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">CatStorm<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/91002e5f-4737-4ba2-83fb-b0a3c4849d62\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Eclipse<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/a3585278-affb-4abc-9a1f-ed9a10bceceb\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">GomoRAT<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/bed0ccf6-c550-4bd6-95a8-bc8d493a2050\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Apexx<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/40921b66-5c45-484b-834a-2c52af521266\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">BridgeAgent<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/6150853d-172f-452d-ad72-a6629e8f8e5e\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">VulcanRAT<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/1acd8afd-5035-4e3c-bfba-d46d56d24845\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">MacSync<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/862ae150-1fac-4bb5-83e8-0ac453dae292\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">AGTABackup<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/c67eaf9e-21b9-4cf6-b0b5-0b3891c6a1e1\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">GodDosAgent<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/64e859f8-27f4-49e5-b7fe-7b48b74de067\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">XMRig<\/a><\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/app.any.run\/tasks\/50746a3b-1abc-4bcc-99e3-5803ebdf982d\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Catcrypt<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/825b25f6-828c-4903-b903-d2fdeae8b096\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">PureLogs<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/8b8cb583-2b34-4dc3-894a-70fb45d86a40\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Vidar<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/a17ec1a4-4d5b-4df2-98a8-bf024b3468f4\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">YapStealer<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/490e9695-52ef-45e8-890d-32a53ec50877\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">DonutLoader<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/4e6f4987-4576-4fed-ac57-1393e877d7e9\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Epsilon<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/487551b9-ed22-437c-bdf4-bd86ba3178db\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">KGPower<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/d2b2b7b3-bba0-47a3-8169-28610492d9d9\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Rhysida<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/d7524281-8770-42d8-bc9f-5848784e27ef\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">FormBook<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/c1930e43-b0ab-4a9d-8ac3-80322685a6dc\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">DanaBot<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/b4c685c1-ccbf-4956-8893-8e1184712f66\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">WKLP<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/dcb8918c-7eaa-4474-9d0c-8b0cc2d9a726\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">M0yv<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/0f6812e2-2f42-4741-a3ac-2a3e8c1fa0ca\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">Gh0st<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/app.any.run\/tasks\/8ddaae16-9278-485f-b439-137288b3755e\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-oct-2026&amp;utm_term=03112026&amp;utm_content=linktoservice\">GammaRay<\/a><\/li>\n<\/ul>\n<\/div>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>157 behavioral signatures<\/strong><\/li>\n\n\n\n<li><strong>428 Suricata rules<\/strong><\/li>\n\n\n\n<li><strong>6 YARA rules<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Together, these additions extend visibility across endpoint behavior, file activity, and network communications, helping analysts identify more of the activity uncovered during real-world investigations.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">157 New Behavioral Signatures<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The October behavioral coverage expands ANY.RUN\u2019s ability to recognize malicious activity observed during <a href=\"https:\/\/any.run\/features\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=october-release-notes-2026&amp;utm_term=031126&amp;utm_content=linktosandboxlanding\">sandbox<\/a> analysis.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Behavioral signatures complement static indicators by focusing on what suspicious software actually does during execution. This gives analysts additional signals when investigating malware, delivery chains, and other activity where a single hash or filename may not tell the whole story.<\/p>\n\n\n\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<h3 class=\"wp-block-heading\">428 New Suricata Rules<\/h3>\n<\/div><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Network detection receives the largest expansion this month, with <strong>428 new Suricata rules<\/strong> covering suspicious traffic associated with malware, phishing, command-and-control activity, and emerging attack infrastructure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Three additions stand out:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Exvicy framework HTTP activity \u2014 SID 89004358:<\/strong> detects HTTP activity associated with the emerging Exvicy Clickfix MaaS platform, helping identify network activity tied to social engineering campaigns.<\/li>\n\n\n\n<li><strong>CLOUDHAZE C2 activity \u2014 SIDs 81001806\u201381001809:<\/strong> tracks communication attempts from the Rust-based CLOUDHAZE backdoor to its command-and-control infrastructure.<\/li>\n\n\n\n<li><strong>VlnkSync HTTP activity \u2014 SID 84004770:<\/strong> detects network activity associated with the VlnkSync Telegram credential stealer.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">These rules add network-level visibility into threats that can otherwise be difficult to distinguish from legitimate traffic, giving analysts another source of evidence during investigation.<\/p>\n\n\n\n<!-- Regular Banner START -->\n<div class=\"regular-banner\">\n<!-- Text Content -->\n<p class=\"regular-banner__text\">\nCut MTTR by 21 minutes with context-enriched threat intelligence <span class=\"highlight\">for faster incident response.<\/span>\n<\/p>\n<!-- CTA Link -->\n<a class=\"regular-banner__link\" id=\"article-banner-regular\" href=\"https:\/\/any.run\/enterprise\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=october-release-notes-2026&amp;utm_term=031126&amp;utm_content=linktoenterprise#contact-sales\" rel=\"noopener\" target=\"_blank\">\nUpgrade Your SOC<\/a>\n<\/div>\n<!-- Regular Banner END -->\n<!-- Regular Banner Styles START -->\n\n<style>\n.regular-banner {\ndisplay: flex;\ntext-align: center;\nflex-direction: column;\nalign-items: center;\ngap: 1.5rem;\nwidth: 100%;\npadding: 2rem;\nmargin: 1.5rem 0;\nborder-radius: 0.5rem;\nfont-family: 'Catamaran Bold';\nmargin-inline: auto;\nbackground: rgba(32, 168, 241, 0.1);\nborder: 1px solid rgba(75, 174, 227, 0.32);\n}\n\n.regular-banner__text {\nfont-size: 1.5rem;\nmargin: 0;\n}\n\n.highlight {\ncolor: #ea2526;\n}\n\n.regular-banner__link {\npadding: 0.5rem 1.5rem;\nfont-weight: 500;\ntext-decoration: none;\nborder-radius: 0.5rem;\ncolor: #FFFFFF;\nbackground-color: #1491D4;\ntext-align: center;\ntransition: all 0.2s ease-in;\n}\n\n.regular-banner__link:hover {\nbackground-color: #68CBFF;\ncolor: white;\n}\n<\/style>\n<!-- Regular Banner Styles END -->\n\n\n\n<h2 class=\"wp-block-heading\">New in Threat Intelligence Reports: KernelReaper<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In October, ANY.RUN published a new Threat Intelligence Report on <strong>KernelReaper<\/strong>, a destructive Windows malware that can disrupt boot processes, storage, recovery mechanisms, and security controls.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The report details its behavior before and during execution, traces six additional payloads connected to the same server, and examines the infrastructure linking the samples without assuming they belong to a single malware family or threat actor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It also provides IOCs, YARA and Sigma rules, and detection insights to help security teams identify KernelReaper and investigate related activity.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">About ANY.RUN<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/any.run\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=october-release-notes-2026&amp;utm_term=031126&amp;utm_content=linktolanding\" target=\"_blank\" rel=\"noreferrer noopener\">ANY.RUN<\/a> provides interactive malware analysis and threat intelligence solutions used by more than 16,000 organizations and 700,000 security professionals worldwide.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The company\u2019s <a href=\"https:\/\/any.run\/features\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=october-release-notes-2026&amp;utm_term=031126&amp;utm_content=linktosandboxlanding\">Interactive Sandbox<\/a> enables SOC teams, MSSPs, and enterprise security teams to safely analyze suspicious files, URLs, phishing pages, and malware while observing attack activity in real time. Analysts can examine processes, browser activity, network traffic, persistence, credential access, and other behaviors to understand what a threat is doing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ANY.RUN <a href=\"https:\/\/any.run\/threat-intelligence-lookup\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=october-release-notes-2026&amp;utm_term=031126&amp;utm_content=linktotilookuplanding\" target=\"_blank\" rel=\"noreferrer noopener\">Threat Intelligence<\/a> extends that investigation by helping teams connect indicators with related infrastructure, samples, campaigns, and observed activity.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ANY.RUN\u2019s <a href=\"https:\/\/any.run\/compliance\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release-notes-october-2026&amp;utm_term=102726&amp;utm_content=linktocompliance\">SOC 2 Type II attestation<\/a> demonstrates the focus on maintaining robust security controls and protecting customer data. By bringing behavioral analysis and up-to-date threat intelligence together, the company equips security teams to investigate suspicious activity, strengthen threat detection, and respond to threats before they escalate.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Security investigations often begin with a single suspicious IOC, but deciding what it means requires context. The more relevant intelligence analysts can connect to that finding, the better they can determine what deserves attention and what to do next. October\u2019s release introduces a new powerful capability in ANY.RUN\u2019s Interactive Sandbox\u2013 Related Threat Context. Now SOCs [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":21861,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[111],"tags":[57,54,55,56],"class_list":["post-24135","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-release-notes","tag-anyrun","tag-features","tag-release","tag-update"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Release Notes: Related Threat Context and 590+ Detection Rules<\/title>\n<meta name=\"description\" content=\"Discover October\u2019s ANY.RUN release: Related Threat Context for faster SOC triage, plus 591 new detection signatures and expanded coverage.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/any.run\/cybersecurity-blog\/release-notes-october-2026\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"ANY.RUN\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/release-notes-october-2026\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/release-notes-october-2026\\\/\"},\"author\":{\"name\":\"ANY.RUN\",\"@id\":\"https:\\\/\\\/any.run\\\/\"},\"headline\":\"Release Notes: Related Threat Context for Faster Than Ever SOC Triage and 590+ Coverage Updates\",\"datePublished\":\"2026-11-03T11:06:12+00:00\",\"dateModified\":\"2026-11-03T11:06:53+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/release-notes-october-2026\\\/\"},\"wordCount\":1162,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/any.run\\\/\"},\"image\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/release-notes-october-2026\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Release-notes-scaled.png\",\"keywords\":[\"ANYRUN\",\"features\",\"release\",\"update\"],\"articleSection\":[\"Release Notes\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/release-notes-october-2026\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/release-notes-october-2026\\\/\",\"url\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/release-notes-october-2026\\\/\",\"name\":\"Release Notes: Related Threat Context and 590+ Detection Rules\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/any.run\\\/\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/release-notes-october-2026\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/release-notes-october-2026\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Release-notes-scaled.png\",\"datePublished\":\"2026-11-03T11:06:12+00:00\",\"dateModified\":\"2026-11-03T11:06:53+00:00\",\"description\":\"Discover October\u2019s ANY.RUN release: Related Threat Context for faster SOC triage, plus 591 new detection signatures and expanded coverage.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/release-notes-october-2026\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/release-notes-october-2026\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/release-notes-october-2026\\\/#primaryimage\",\"url\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Release-notes-scaled.png\",\"contentUrl\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Release-notes-scaled.png\",\"width\":2560,\"height\":1243,\"caption\":\"Release Notes August 2026\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/release-notes-october-2026\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Release Notes\",\"item\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/category\\\/release-notes\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Release Notes: Related Threat Context for Faster Than Ever SOC Triage and 590+ Coverage Updates\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/any.run\\\/\",\"url\":\"https:\\\/\\\/any.run\\\/\",\"name\":\"ANY.RUN&#039;s Cybersecurity Blog\",\"description\":\"Cybersecurity Blog covers topics for experienced professionals as well as for those new to it.\",\"publisher\":{\"@id\":\"https:\\\/\\\/any.run\\\/\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/any.run\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/any.run\\\/\",\"name\":\"ANY.RUN\",\"url\":\"https:\\\/\\\/any.run\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/any.run\\\/\",\"url\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/ANYRUN-Icon.svg\",\"contentUrl\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/ANYRUN-Icon.svg\",\"width\":1,\"height\":1,\"caption\":\"ANY.RUN\"},\"image\":{\"@id\":\"https:\\\/\\\/any.run\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/www.any.run\\\/\",\"https:\\\/\\\/x.com\\\/anyrun_app\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/30692044\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCOgCPho7lzmH7m6fPNlukrQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/any.run\\\/\",\"name\":\"ANY.RUN\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g\",\"caption\":\"ANY.RUN\"},\"url\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/author\\\/a-bespalova\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Release Notes: Related Threat Context and 590+ Detection Rules","description":"Discover October\u2019s ANY.RUN release: Related Threat Context for faster SOC triage, plus 591 new detection signatures and expanded coverage.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/any.run\/cybersecurity-blog\/release-notes-october-2026\/","twitter_misc":{"Written by":"ANY.RUN","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/any.run\/cybersecurity-blog\/release-notes-october-2026\/#article","isPartOf":{"@id":"https:\/\/any.run\/cybersecurity-blog\/release-notes-october-2026\/"},"author":{"name":"ANY.RUN","@id":"https:\/\/any.run\/"},"headline":"Release Notes: Related Threat Context for Faster Than Ever SOC Triage and 590+ Coverage Updates","datePublished":"2026-11-03T11:06:12+00:00","dateModified":"2026-11-03T11:06:53+00:00","mainEntityOfPage":{"@id":"https:\/\/any.run\/cybersecurity-blog\/release-notes-october-2026\/"},"wordCount":1162,"commentCount":0,"publisher":{"@id":"https:\/\/any.run\/"},"image":{"@id":"https:\/\/any.run\/cybersecurity-blog\/release-notes-october-2026\/#primaryimage"},"thumbnailUrl":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/07\/Release-notes-scaled.png","keywords":["ANYRUN","features","release","update"],"articleSection":["Release Notes"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/any.run\/cybersecurity-blog\/release-notes-october-2026\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/any.run\/cybersecurity-blog\/release-notes-october-2026\/","url":"https:\/\/any.run\/cybersecurity-blog\/release-notes-october-2026\/","name":"Release Notes: Related Threat Context and 590+ Detection Rules","isPartOf":{"@id":"https:\/\/any.run\/"},"primaryImageOfPage":{"@id":"https:\/\/any.run\/cybersecurity-blog\/release-notes-october-2026\/#primaryimage"},"image":{"@id":"https:\/\/any.run\/cybersecurity-blog\/release-notes-october-2026\/#primaryimage"},"thumbnailUrl":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/07\/Release-notes-scaled.png","datePublished":"2026-11-03T11:06:12+00:00","dateModified":"2026-11-03T11:06:53+00:00","description":"Discover October\u2019s ANY.RUN release: Related Threat Context for faster SOC triage, plus 591 new detection signatures and expanded coverage.","breadcrumb":{"@id":"https:\/\/any.run\/cybersecurity-blog\/release-notes-october-2026\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/any.run\/cybersecurity-blog\/release-notes-october-2026\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/any.run\/cybersecurity-blog\/release-notes-october-2026\/#primaryimage","url":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/07\/Release-notes-scaled.png","contentUrl":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/07\/Release-notes-scaled.png","width":2560,"height":1243,"caption":"Release Notes August 2026"},{"@type":"BreadcrumbList","@id":"https:\/\/any.run\/cybersecurity-blog\/release-notes-october-2026\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/any.run\/cybersecurity-blog\/"},{"@type":"ListItem","position":2,"name":"Release Notes","item":"https:\/\/any.run\/cybersecurity-blog\/category\/release-notes\/"},{"@type":"ListItem","position":3,"name":"Release Notes: Related Threat Context for Faster Than Ever SOC Triage and 590+ Coverage Updates"}]},{"@type":"WebSite","@id":"https:\/\/any.run\/","url":"https:\/\/any.run\/","name":"ANY.RUN&#039;s Cybersecurity Blog","description":"Cybersecurity Blog covers topics for experienced professionals as well as for those new to it.","publisher":{"@id":"https:\/\/any.run\/"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/any.run\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/any.run\/","name":"ANY.RUN","url":"https:\/\/any.run\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/any.run\/","url":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2020\/08\/ANYRUN-Icon.svg","contentUrl":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2020\/08\/ANYRUN-Icon.svg","width":1,"height":1,"caption":"ANY.RUN"},"image":{"@id":"https:\/\/any.run\/"},"sameAs":["https:\/\/www.facebook.com\/www.any.run\/","https:\/\/x.com\/anyrun_app","https:\/\/www.linkedin.com\/company\/30692044","https:\/\/www.youtube.com\/channel\/UCOgCPho7lzmH7m6fPNlukrQ"]},{"@type":"Person","@id":"https:\/\/any.run\/","name":"ANY.RUN","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g","caption":"ANY.RUN"},"url":"https:\/\/any.run\/cybersecurity-blog\/author\/a-bespalova\/"}]}},"_links":{"self":[{"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/posts\/24135","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/comments?post=24135"}],"version-history":[{"count":14,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/posts\/24135\/revisions"}],"predecessor-version":[{"id":24151,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/posts\/24135\/revisions\/24151"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/media\/21861"}],"wp:attachment":[{"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/media?parent=24135"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/categories?post=24135"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/tags?post=24135"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}