YARA-X 1.22.1 bugfix released alongside YARA 4.6.0
YARA 4.6.0 does not add the YARA-X 64-bit integer readers int64, int64be, uint64, and uint64be.
Stories per day · 30 days
3 RSS
Relateddetection2malware-analysis2threat-intelligence2yara-x2autocad1bugfix1dwg1malware-detection1rule-engine1sandbox1sigma1threat-detection1vba1virustotal1
9 stories, newest first · one card per story
Stories tagged #yara
Paper proposes LLM 'adversary brains' as logical threat signatures
The design turns threat reports into testable hypotheses that can match campaigns and suggest new indicators such as C2 domains.
YARA-X 1.22.0 adds built-in 64-bit integer read functions
The release ships 11 improvements and 9 bugfixes, including int64, int64be, uint64, and uint64be.
Buyer’s guide ranks 12 malware analysis tools for 2026
The guide scores sandboxes and reputation services on depth, privacy and pricing, without new vulnerability findings.
2
YARA rule detects orphaned VBA projects inside DWG files
A VirusTotal retrohunt with the rule returned only two matching samples.
From Telemetry to Defense: How SOC and MSSP Leaders Can Build Intelligence-Led Threat Monitoring
ANY.RUN promotes intelligence-led SOC monitoring using sandbox feeds, behavioral lookup, and YARA rule testing.
2
YARA-X 1.21.0 Release, (Sat, Oct 3rd)
YARA-X 1.21.0 adds five improvements and four bugfixes, including stdin support for --scan-list.
Threat Coverage Digest: New Malware Reports and 1,100+ Detection Rules
ANY.RUN's September digest adds 76 behavior signatures, 16 YARA rules, and 1,098 Suricata rules plus TI reports on IronToll and CSuite phishing.
1
Release Notes: Faster TI Investigations, Fresh Threat Research, and 650+ Threat Coverage Updates
ANY.RUN August release adds TI Lookup connections view, 81 behavior signatures, 16 YARA rules, 559 Suricata rules, and three new threat intelligence reports.