Skip to content
NewA calmer, faster ZeroHour
StoryIndustryinfo

ANY.RUN markets sandbox context and threat feeds, not a new incident

2 sources · 3 articlesFirst reported Updated ()1
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

ANY.RUN is promoting Interactive Sandbox features and threat feeds with its own performance claims; no new incident is reported.

ANY.RUN is marketing Related Threat Context and Automated Interactivity in its Interactive Sandbox for SOC and MSSP work, not a newly disclosed attack. The company says feeds drawn from more than 16,000 SOC teams and 700,000 professionals already held up to 30 percent of unique malicious indicators from studied sessions, and that 99 percent of those IOCs are unique. Delivery is described as STIX/TAXII 2.1, an API and tool integrations. A sample case follows an acrobat.adobe.com PDF link through a CAPTCHA to a Microsoft OAuth phishing flow, then to related analyses including slybee.com. Speed, detection and MTTR figures are ANY.RUN’s own marketing claims.

Key facts
  • Up to 30% of studied unique malicious IOCs were already in ANY.RUN feeds, the company says.
  • Feeds cite more than 16,000 SOC teams and 700,000 professionals, delivered via STIX/TAXII 2.1 and API.
  • ANY.RUN says 99% of the indicators are unique.
  • Demo cites 70-plus related analyses and 40 analyses for slybee.com.
  • Related Threat Context is described as available to Enterprise clients.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

What each outlet adds

beyond the shared facts
  • Cyber Security NewsReports the 30% prior-IOC claim, 99% uniqueness and STIX/TAXII delivery.
  • ANY.RUNDescribes the PDF-to-Microsoft OAuth demo and slybee.com lookups.
  • Cyber Security NewsAdds sub-10-second VMs, about-40-second reports and claimed MTTR gains.
Vendors
ANY.RUN
Products
ANY.RUN Interactive SandboxInteractive SandboxTI Feeds
Organizations
ANY.RUN

Coverage

oldest first · one row per article · UTC
  1. · 3d ago Cyber Security NewsFirst report

    ANY.RUN says a third of sandbox IOCs were already in its feeds

    The vendor says SIEM, SOAR, TIP, EDR and XDR integrations can match those indicators before a manual investigation.

  2. · 2d ago ANY.RUN

    ANY.RUN promotes AI sandbox features for SOC phishing analysis

    A vendor demo follows an Adobe PDF link into a Microsoft OAuth phish and shows 70-plus related analyses.

  3. · 2d ago Cyber Security News

    ANY.RUN pitches related threat context for faster SOC triage

    The vendor says related analyses draw on 16,000-plus SOC teams and a community of more than 700,000 professionals.