YARA-X 1.21.0 Release Packs Five New Features and Fixes Four Bugs
A new version of YARA-X, a popular open-source tool for malware detection and analysis, has been released with five significant improvements and four bug fixes. The update is the result of ongoing efforts by the development team to refine the software’s capabilities and squash lingering issues.
The most notable improvement in this release allows users to pass a list of folders to scan directly from standard input (stdin) when using the command-line interface (CLI). This feature, activated with the –scan-list option, enables the creation of dynamic folder lists. For instance, on Windows systems, one can use the dir command to generate a list of directories containing “sample” in their names and pipe it into YARA-X for scanning.
The addition of this stdin support streamlines workflows and enhances flexibility, making it easier for analysts and researchers to integrate YARA-X with other tools and scripts. The example provided by Didier Stevens, the Senior Handler responsible for the release, demonstrates how to combine the dir command with YARA-X to scan all folders named “samples” on a Windows system.
The new version also includes several bug fixes that address known issues affecting performance and stability. These improvements are crucial in ensuring seamless operation of the software, particularly when working with large datasets or complex rule sets.
YARA-X 1.21.0 is now available for download from various sources, including the official GitHub repository. Users are encouraged to review the release notes carefully before upgrading, as this will help them understand the changes and potential implications on their workflows.
The release of YARA-X 1.21.0 underscores the ongoing commitment of its development team to providing a robust and reliable tool for malware detection and analysis. With each new version, the software continues to evolve, incorporating user feedback and industry requirements to meet the needs of cybersecurity professionals worldwide.
For those who use YARA-X in their daily work, this update offers an opportunity to refresh their skills and explore the enhanced capabilities of the latest release. To get started with updating your installation or exploring the new features, be sure to review the official documentation and seek guidance from online forums or support channels as needed.
Source: SANS ISC — 2026-10-03