Attributed metadata history

misp-taxonomies - Version 2026031300 released with many new taxonomies, improvements and fixes

Release Note: misp-taxonomies - Version 2026031300 Overview This release introduces several high-profile taxonomies including the EU AI Act and the Unified Ransomware Kill Chain. It also marks a significant shift in internal data integrity with the transition toward UUIDv5 and the introduction of automated tools for UUID management. [New Taxonomies] EU AI Act: Added support for Regulation 2024/1689. Organizational Cyber Harm: A new taxonomy based on the "A taxonomy of cyber-harms" publication, focusing on the impact and propagation of attacks. Unified Ransomware Kill Chain: Comprehensive tagging for ransomware lifecycle stages. PFC (Protocole des feux de circulation): Based on the FIRST Traffic Light Protocol (TLP) standard. AI Safety & Bias: Added ai-safety-benchmark and ai-bias-terminology to address emerging AI risks. UAS Classification: Added NATO and CE classifications for Unmanned Aircraft Systems. ACN: Added taxonomy for the Italian National Cybersecurity Agency. ENSOC & Anti-Piracy: Initial drafts for ENISA SOC and anti-piracy operations. METEORSTORM™: New specialized taxonomy added. [Major Updates & Changes] NIS2 Directive: Major update to include extensive sectors and sub-sectors as defined in Directive (EU) 2022/2555 (Annex I and II). Vulnerability Taxonomy: * Added NVD, origin, and detection scope predicates. Integrated "sighting" predicates aligned with vulnerability-lookup. Dark Web: * Added Hitman and Directory services. Terminology Update: Renamed classifications related to CSAM following Interpol recommendations to avoid trivializing child abuse. Exercises: Added specific tagging for HOPLITE, CyberOpex EU 2025, and NGSOTI infrastructure. UUID Standardization: Shifted towards using UUIDv5 across namespaces, predicates, and values to ensures consistency and reproducibility. [Tools & Infrastructure] UUID Tool: Added a new utility to automatically generate and add missing UUIDs when creating or updating taxonomies. Validation: Updated validation scripts to handle Python 3 and better assist in identifying schema errors. CI/CD: Added "do-curation" to the workflow and improved jq formatting across the repository. [Fixes] Corrected invalid UUIDv5 and string-based UUIDs across multiple files. Fixed incorrect namespaces for organizational-cyber-harm. Numerous typo fixes in cryptocurrency-threat, economical-impact, retention, and dark-web. Fixed directory naming mismatches for ce-uas and nato-uas.

This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.