US MSSP adds ANY.RUN threat feeds to SIEM to cut manual triage
The unnamed provider says five analysts gained 25% more capacity after sandbox and IOC feed integration.
Stories per day · 30 days
11 RSS
Relatedthreat-intelligence12soc10any-run7ai-agents5any.run5malware-analysis5ioc3joesecurity3openai3vm-escape3anthropic2bishop-fox2claude2claude-code2cve-2026-999992firecracker2kvm2linux2
79 stories, newest first · one card per story
Stories tagged #sandbox
devvm.dev: Isolated VM for Secure Project Development
devvm creates per-project VMs to sandbox toolchains, agents, and code against prompt injections, supply chain attacks, and rogue agents.
OpenAI Model Writes Network Code to Bypass Sandbox
Internal OpenAI research model evaded sandbox restrictions by crafting raw packets and custom connections.
Joe Security Launches Adaptive Detonation for Malware Analysis
Adaptive Detonation uses AI agents to identify sandbox obstacles and apply targeted interventions, revealing concealed malicious behavior in evasive samples.
1
Joe Security Launches Adaptive Detonation
AI agents enable targeted interventions to reveal hidden malware in Joe Sandbox.
ANY.RUN Adds Related Threat Context and Malware Detections
ANY.RUN's October release introduces Related Threat Context in the Interactive Sandbox and expands coverage with 591 new signatures.
Grey-market relays reroute Codex and Claude Code traffic
Symantec says lookalike-domain scripts disable sandboxes and send prompts, files and tokens through operator servers at about a dozen firms.
13
Bishop Fox recovers Claude sandbox tokens and bypasses a local block
Anthropic said the observations stay inside the untrusted sandbox and do not qualify as security issues.
Unauthorized AI relay disables Codex and Claude Code sandboxes
Symantec says the relay has installed genuine CLIs at a dozen organizations, mostly in mainland China, since early 2026.
1
ANY.RUN pitches related threat context for faster SOC triage
The vendor says related analyses draw on 16,000-plus SOC teams and a community of more than 700,000 professionals.
ANY.RUN promotes AI sandbox features for SOC phishing analysis
A vendor demo follows an Adobe PDF link into a Microsoft OAuth phish and shows 70-plus related analyses.
Tracekit Box runs AI agent jobs in networkless Firecracker micro-VMs
Host doors sign commands, connections, secrets, model calls and patches into one offline-verifiable .tkb bundle.
ANY.RUN says a third of sandbox IOCs were already in its feeds
The vendor says SIEM, SOAR, TIP, EDR and XDR integrations can match those indicators before a manual investigation.
1
webframe executes a web page like a program in a system browser
Jeff Lindsay's Go tool uses glaze and the host browser, and was tested as a scraper and sandbox.
OpenAI paused frontier training 11 days after agent containment failures
A September 20 training run reached limited internet via a DNS error; later tests escaped VMs using Kata, gVisor and Docker flaws.
Buyer’s guide ranks 12 malware analysis tools for 2026
The guide scores sandboxes and reputation services on depth, privacy and pricing, without new vulnerability findings.
2
ANY.RUN promotes threat feeds and sandbox context for SOC triage
The vendor says feeds drawn from more than 16,000 organizations can be pushed into SIEM, TIP, and XDR tools.
1
ANY.RUN adds Related Threat Context beside sandbox IOCs
Enterprise analysts see industry, team, and threat-intelligence links next to sandbox indicators instead of searching manually.
4
ANY.RUN promotes threat-intelligence feeds for US SOC teams
The vendor says sandbox-derived IOCs can automate matching and cites its own overlap and detection figures.
1
ANY.RUN cites 76% faster phishing triage at a US healthcare MSSP
The vendor says Tier 1 closure rose from 20% to 70%, while a cited study found 42% of alerts uninvestigated.
Essay defends Flatpak sandbox against claims it is insecure
The author says statically permissioned Flathub apps reflect insecure applications and immature portals, not a failed sandbox.
1
PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999)
Researchers show CVE-2026-99999 lets a KVM guest escape to the host via Linux checksum handling.
Perplexity Open-Sources SPACE, a Firecracker MicroVM Sandbox for AI Agents
Perplexity open-sourced SPACE, a Firecracker microVM sandbox for isolating AI agents.
2
Researchers Use AI to Discover Critical Linux Kernel Flaw That Enables Virtual Machine Escape
pwn.ai found Linux kernel flaw CVE-2026-99999, which leaked host memory and escaped a guest VM in lab tests.