Skip to main content

Cyware Situational Awareness Platform

Release Notes 3.8.9

July 4, 2025

We are excited to introduce you to the latest version of Collaborate v3.8.9. This release includes new features and several enhancements.

Analyst Portal

Intel Operations (Cyware Orchestrate) New

Intel Operations is now natively available in Collaborate through integration with Cyware Orchestrate, bringing automation to your threat workflows. After enabling it from Configuration, this feature helps you collect threat data from multiple sources, build dynamic response playbooks, and integrate across security tools to reduce response time and manual effort.

Note

Access to Intel Operations is license-based. To enable this feature, contact Cyware Support.

As an analyst, you can perform the following actions:

  • Operationalize Threat Intelligence: Create playbooks to automate common threat response tasks, reducing manual effort and response time.

  • Review Execution History: Use run logs to view detailed records of playbook executions, monitor outcomes, and troubleshoot issues.

For more information, see Intel Operations (Cyware Orchestrate).

Doc Library Enhanced

If the Analyst Groups feature is enabled, you can now select relevant groups during file upload or folder creation. This ensures the right groups have access to the content, helping streamline access control and organization.

DocLibraryAG.png

For more information, see Create a Doc Library Folder.

Other Enhancements

  • Add References Across Alert Fields: You can now insert hyperlinked references in all configured text box fields while creating alerts. This allows for more comprehensive citation across the entire alert content. For more information, see System Fields.

  • View Tags in Doc Library Listing: A new Tags column is now available in the Doc Library, allowing you to quickly access associated tags for each file. For more information, see Manage Doc Library Files and Folders.

  • Set Default Page Limit in Profile: You can now control how many records appear on each page of the Analyst Portal using the new Default Page Limit setting in your profile, making it easier to navigate large listings. For more information, see Analyst Profile.

  • Cyware Advisory Placement: Choose where Cyware advisory alerts appear in the Member Portal using the Show Cyware Advisories in setting in Configuration. This gives you better control over where advisory content is displayed. For more information, see Configure Mobile App or Web Portal Preferences.

  • Improved MITRE ID Display: Tactic, technique, and sub-technique values now show both ID and name in a consistent ID: Name format for better clarity across filters, emails, and exports. You can also search using either ID or name for quicker results.

  • Expanded Field Order Support: The field order you set in Field Management Settings now applies across more areas in both the Analyst and Member portals. This ensures prioritized fields always appear in the order you choose. For more information, see Field Order.

Member Portal

Intel Operations (Cyware Orchestrate) New

Intel Operations is now natively available in Collaborate through integration with Cyware Orchestrate, bringing automation to your threat workflows. When enabled by your Collaborate administrator, this feature helps you collect threat data from multiple sources, build dynamic response playbooks, and integrate across security tools to reduce response time and manual effort.

As a member, you can perform the following actions:

  • Operationalize Threat Intelligence: Create playbooks to automate common threat response tasks, reducing manual effort and response time.

  • Review Execution History: Use run logs to view detailed records of playbook executions, monitor outcomes, and troubleshoot issues.

For more information, see Intel Operations (Cyware Orchestrate).

Other Enhancements

  • View Tags in Doc Library Listing: A new Tags column is now available in the Doc Library, allowing you to quickly access associated tags for each file. For more information, see Manage Doc Library Files and Folders.

  • Alert ID in RFI Details: While viewing the details of a Request for Information (RFI), you can now view the associated alert ID, helping you easily track alerts created from your requests. For more information, see Add RFI Comments and Responses in the Member Portal.

  • Improved MITRE ID Display: Tactic, technique, and sub-technique values now show both ID and name in a consistent ID: Name format for better clarity across filters, emails, and exports.

Open API Enhancements

The following APIs are enhanced:

  • Add Member API ({{server}}csap/v1/create_end_user/): Enhanced to support the optional features parameter, allowing analysts to enable Intel Lake for the member during creation. For more information, see Add Member.

  • Update Member API ({{server}}csap/v1/update_member/): Enhanced to support the optional features parameter, enabling analysts to update Intel Lake access for existing members. For more information, see Update Member.

  • Get Member Details API ({{server}}csap/v1/member/:user_id/): Enhanced to return the features response parameter, allowing you to view feature access (such as Intel Lake) enabled for a member. For more information, see Get Member Details.

  • Get Alert Details API ({{server}}csap/v1/get_alert_detail/:short_id): Enhanced to return the source_urls response parameter, which returns the names and URLs of references associated with the alert. For more information, see Get Alert Details.