6 repetitive malware analysis tasks an AI agent can take over 30–90
Detection highlights · September 2026FlowerStorm phishing kit, ETW tampering and 70+ new
60% Time saved with automated behavioral detection vs. manual analysis 2–5 min
Introduction 2026 has already been an exciting year for VMRay, with three
This is the story of a hunt: how a pile of 276
2 decision types: message vs. threat 4 foundations of effective phishing
// VMRAY LABS · THREAT RESEARCH What indicators miss: geo-aware malware and
The Labs team at VMRay actively gathers publicly available data to identify
In the first post, we set up VMRay UniqueSignal as a feed
Threat Intelligence Spotlight Executive Summary VMRay Labs has analyzed a family of
Every Agent Needs an Oracle 01 Abstract Detection rules are increasingly drafted
The Labs team at VMRay actively gathers publicly available data to identify
9 malware analysis platforms and services compared 6 layers of trust in
STIX and TAXII solve an important problem: moving cyber threat intelligence between
Security teams do not have an IOC shortage. They have an IOC
Executive Summary VMRay Labs identified a previously unattributed, actively operated cybercriminal campaign
The Labs team at VMRay actively gathers publicly available data to identify
TL;DR / Fast Answer Incident Response (IR) and Detection Engineering (DE) are
TL;DR / Fast Answer Reliance on a single security control is a
TL;DR / Fast Answer Generic threat intelligence feeds often lack the specific
TL;DR / Fast Answer Effective Cyber Threat Intelligence (CTI) is more than
TL;DR / Fast Answer Not all data found during malware analysis is
Introduction Since the release of VMRay Platform 2026.2, we’ve had a busy
2standards working together: STIX and TAXII 4core building blocks that make up
Introduction Most threat intelligence work begins with a feed. Platforms like VMRay
Operationalizing VMRay UniqueSignal in MISP for detection, hunting and blocking In the
Integrating UniqueSignal with OpenCTI Using STIX/TAXII 2.1 OpenCTI is one of the
The Labs team at VMRay actively gathers publicly available data to identify
TL;DR / Fast Answer The cybersecurity landscape is a constant tug-of-war between
TL;DR / Fast Answer Generic threat feeds often fail to provide the
Keep up to date with our weekly digest of articles. Get the latest news, invites to events, and threat alerts!
