MISP/misp-warninglists
Warning lists to inform users of MISP about potential false-positives or other information in indicators
3 Releases
Latest: 2mo ago
2026040500 - MISP Warning Lists Updated2026040500Latest
📋 What's Changed
- add by @karenyousefi in https://github.com/MISP/misp-warninglists/pull/291
- Update security-provider-blogpost list.json by @cudeso in https://github.com/MISP/misp-warninglists/pull/292
- update by @karenyousefi in https://github.com/MISP/misp-warninglists/pull/293
- Add s.ee by @Showfom in https://github.com/MISP/misp-warninglists/pull/294
- Update public-ipfs-gateways by @curbengh in https://github.com/MISP/misp-warninglists/pull/295
- new: [github ip lists] IPv4 and IPv6 addresses by @jberkers42 in https://github.com/MISP/misp-warninglists/pull/297
- Add google drive domain to google domain list by @Wachizungu in https://github.com/MISP/misp-warninglists/pull/301
- Update list.json by @HiS3 in https://github.com/MISP/misp-warninglists/pull/302
- + 20 more
✨ New Contributors
- @curbengh made their first contribution in https://github.com/MISP/misp-warninglists/pull/295
- @HiS3 made their first contribution in https://github.com/MISP/misp-warninglists/pull/302
- @isec-easm made their first contribution in https://github.com/MISP/misp-warninglists/pull/306
- @fabienmorelpro-cpu made their first contribution in https://github.com/MISP/misp-warninglists/pull/312
- @JanoutV made their first contribution in https://github.com/MISP/misp-warninglists/pull/311
- @darses made their first contribution in https://github.com/MISP/misp-warninglists/pull/328
- @rectifyq made their first contribution in https://github.com/MISP/misp-warninglists/pull/324
- @akshayjain-1 made their first contribution in https://github.com/MISP/misp-warninglists/pull/323
- + 1 more
MISP Warning Lists version 2024110800 released2024110800
📦 November 2024 Update
- Zscaler Source Update:
- Added the missing script for Zscaler source generation, enhancing the capability to maintain updated and comprehensive warning lists. [Commit: 192534d]
- Apple IP Ranges Update:
- Updated the Apple IP ranges based on the latest ARIN allocation, ensuring the lists reflect the current state of Apple’s network allocations. Contributed by Xiufeng Guo. [Commits: 94fdbfd, 934175c]
- Living Off Trusted Sites (LOTS) Project:
- Integrated domains from the “Living Off Trusted Sites” project, expanding the warning lists to cover domains that could potentially be leveraged for trusted-based attacks. Initial work contributed by Goodlandsecurity. [Commits: 3f38437, ae6ad98, fc55112]
- General Updates:
- Multiple updates and improvements to various warning lists were made to ensure the data remains relevant and effective. [Commits: 018f958, bfbb9a8]
- + 8 more
MISP warning-lists v2.4.142 released (first release to be inline with MISP core software)v2.4.142
✨ New
- GH workflow. [Raphaël Vinot]
- Added covid generators / lists. [iglocska]
- Added covid warninglist. [iglocska]
- Added common warninglists. [iglocska]
- [list] The Moz Top 500 Domains and Pages (#104) [Steve Clement]
- new: [list] The Moz Top 500 Domains and Pages
- [list] Added Mozilla Top 500 domains. [Steve Clement]
- [tool] Generate The Moz top 500 Domain list from https://moz.com/top500. [Steve Clement]
- + 6 more
📋 Changes
- [warning-lists] updated. [Alexandre Dulaunoy]
- [lists] updated. [Alexandre Dulaunoy]
- [stackpath] host IPv6 addresses are without subnet. [Alexandre Dulaunoy]
- [warning-lists] updated. [Alexandre Dulaunoy]
- [update] run on all. [Alexandre Dulaunoy]
- [public-resolver] revert to previous one as the source is dropping many known public resolver such as quad9. [Alexandre Dulaunoy]
- [updates] updated warning-lists. [Alexandre Dulaunoy]
- [warning-lists] updated. [Alexandre Dulaunoy]
- + 89 more
🐛 Fix
- Python 3.9 compat, take 2. [Raphaël Vinot]
- Python 3.9 compat. [Raphaël Vinot]
- Changed parsing algorithm to string, see #7c1de70. [Andras Iklody]
- Sort entries. [Raphaël Vinot]
- [schema] regexp added as supported type. [Alexandre Dulaunoy]
- [alex] The generator wants to decode things ;) [Steve Clement]
- [moz500] Fix the confusion about Moz.com and Mozilla.com (#107) [Steve Clement]
- fix: [moz500] Fix the confusion about Moz.com and Mozilla.com
- + 16 more
📦 Other
- Merge pull request #178 from Wiscy-Security/main. [Alexandre Dulaunoy]
- Added new warninglist for Stackpath CDN
- Add stackpath to generate_all.sh script. [Kevin Holvoet]
- Gave execute permissions to generate_phone_numbers.py. [Kevin Holvoet]
- Created new Stackpath CDN IP list. [Kevin Holvoet]
- Merge branch 'main' of github.com:MISP/misp-warninglists into main. [Alexandre Dulaunoy]
- Merge pull request #176 from przemekzny/patch-1. [Alexandre Dulaunoy]
- Update list.json
- + 584 more
