In brief

MISP 2.5.43 introduces two-way synchronization of collections between instances, with separate push and pull controls, compatibility negotiation for older peers, pagination to reduce memory use, and safeguards preventing unintended modification of synchronized content. The release also significantly expands the Bootstrap 5-based Overmind interface across user management, logs, galaxies, proposals, event views and object forms. Its initial Pivotick integration offers an early replacement for the legacy event graph, while environment variables can now serve as a configuration source for containerized and infrastructure-as-code deployments.

Security improvements address cross-site scripting through malicious API keys, tighten galaxy and sharing-group permissions, enforce modification rights for import operations, and strengthen restrictions on organization-specific modules and command-line-only settings. Additional changes include bearer-token authentication and safer token display for TAXII servers, improved synchronization and server behavior, fixes for imports, exports, dashboards and STIX handling, new HoneyLabs threat-intelligence feeds, and updates to MISP’s warning lists, objects, taxonomies, galaxies and STIX libraries.

Source: MISP Project

‍

‍