August 27, 2025

MISP v2.5.18 released with new on-demand correlation engine, a new improved task scheduling system and many more updates

MISP version 2.5.18, released on August 20, 2025, introduces a dynamic on-demand correlation engine that enables live fetching of correlating values without persistent storage. This approach reduces disk usage, speeds up data insertion, and allows correlation rules to be applied both immediately and retroactively—without the need to rerun jobs or rely on worker uptime. The new system does come with some trade-offs: it does not respect access control lists (ACLs), is currently incompatible with advanced correlations, operates about 10–15% slower than the No-ACL correlation mode, and requires additional indexing for optimal performance.

In addition to the correlation improvements, the release includes an overhauled task scheduling system built around a new scheduled_tasks table, offering administrators greater flexibility in automating feeds, server syncs, workflows, and periodic summaries. Features include execution logs, the ability to manually trigger tasks, and per-user task execution—all manageable through a central UI designed for site-admins. Other enhancements include Forgejo CI integration, high-performance indexing for No-ACL correlations, numerous bug fixes and UI refinements, and a patched security vulnerability affecting homepage customization in user settings.

Source: https://www.misp-project.org/2025/08/20/misp.2.5.18.released.html/

Explore More Insightful Articles: