Abstract: Systems, methods, and apparatus are provided for intelligent cybersecurity processing of a product update. A fetcher application may access an updated version of a software product, a prior version of the product, and a version control system for the product. A malicious software identification engine may process the data using batch or stream processing to identify suspect code and metadata anomalies in the updated version. The engine may decompile executable binary code to obtain source code for the updated version and the prior version. A machine learning engine may receive input from the malicious software identification engine and classify the input using an NER-based machine learning model. Based on output from the machine learning engine, a control dashboard may block installation of a malicious product update.