Latest release · MISP 2.5.47
MISP 2.5.47 strengthens collaborative analysis with security hardening, PostgreSQL support, AI-assisted workflows and the evolving Overmind interface.
Explore correlations directly in the MISP analyst workspace.
Analyst experience
Interactive dashboards, correlation views and contextual graphs help analysts identify patterns, validate findings and communicate intelligence with confidence.
Open knowledge models
Use community-maintained galaxies and taxonomies—including ATT&CK, TLP and sector-specific models—to describe threats consistently across tools and teams.
Built for trusted communities
Give trusted partners the information they need, when they need it. MISP supports precise distribution, collaborative analysis and open standards without compromising control.
The MISP Threat Sharing project consists of multiple initiatives, from software to facilitate threat analysis and sharing to freely usable structured Cyber Threat Information and Taxonomies.
The MISP is an open source software solution for collecting, storing, distributing and sharing cyber security indicators and threats about cyber security incidents analysis and malware analysis. MISP is designed by and for incident analysts, security and ICT professionals or malware reversers to support their day-to-day operations to share structured information efficiently.
Many MISP galaxy clusters are already available like MITRE ATT&CK, Exploit-Kit, Microsoft Activity Group actor, Preventive Measure, Ransomware, TDS, Threat actor or Tool used by adversaries.
Taxonomies provide a set of already defined classifications modeling estimative language, CSIRTs/CERTs classifications, national classifications or threat model classification.
In a continuous effort since 2016, CIRCL frequently gives practical training sessions about MISP. The purpose is to reach out to security analysts using MISP as a threat intelligence platform along with users using it as an information sharing platform.
All the training materials are open source, include slides and a virtual machine preconfigured with the latest version of MISP. Reach out if you are looking for custom training.
PyMISP is a Python library to access MISP platforms via their REST API.
PyMISP allows you to fetch events, add or update events/attributes, add or update samples or search for attributes programmatically. Discover more
MISP modules are autonomous modules that can be used to extend MISP for new services such as expansion, import and export.
The modules are written in Python 3 following a simple API interface. The objective is to ease the extensions of MISP functionalities without modifying core components.
For more information: Extending MISP with Python modules slides from MISP training.
In addition to the news stories below, check out the press, events, hackathon, MISP Summit pages and full news archive.
MISP 2.5.47 is the outcome of the most intensive security review the project has gone through in a long time, and it ships alongside three larger pieces of work: a ledger-based database migration system that also brings PostgreSQL support, the first release of the AI-assisted analysis integration, and another big batch of Overmind improvements. It also closes a background-job regression introduced in 2.5.45 and a set of CSRF regressions from the 2.5.46 hardening.
MISP 2.5.46 is out, and the project continues to move at a very active development pace.
This release brings together a large security review, significant performance improvements, major updates to the MISP knowledge bases and submodules, many fixes contributed by the community, and another substantial round of work on Overmind, the evolving MISP user interface.
A large six-week cycle (herding kids, pets, bots is tiring in the heat, especially without an HVAC). Three themes dominate: the continued Overmind (Bootstrap 5) UI migration, a full revamp of LDAP authentication, and a concentrated security and correctness hardening pass.
CTI-Transmute is an open-source service for converting threat intelligence between formats - MISP and STIX today, more to come - with a catalogue on top to store, share, comment on and evaluate the results. It wraps the misp-stix library behind a web UI and a public API.
© MISP project. Software released under approved open source licenses and content of this website released as CC BY-SA 3.0.
Template by Bootstrapious. Ported to Hugo by DevCows.
