Release Notes 3.8.9 (Early Access)
July 4, 2025
We are excited to introduce you to the latest version of Collaborate v3.8.9. This release includes new features and several enhancements.
Analyst Portal
Intel Operations (Cyware Orchestrate) New
Intel Operations is now natively available in Collaborate through integration with Cyware Orchestrate, bringing automation to your threat workflows. After enabling it from Configuration, this feature helps you collect threat data from multiple sources, build dynamic response playbooks, and integrate across security tools to reduce response time and manual effort.
Note
Access to Intel Operations is license-based. To enable this feature, contact Cyware Support.
As an analyst, you can perform the following actions:
Operationalize Threat Intelligence: Create playbooks to automate common threat response tasks, reducing manual effort and response time.
Set Up Event-Driven Automation: Attach labels to events and playbooks, and set up triggers to run playbooks automatically when matching events occur.
Review Execution History: Use run logs to view detailed records of playbook executions, monitor outcomes, and troubleshoot issues.
This feature is part of an Early Access release. For assistance, contact Cyware support.
Doc Library Enhanced
If the Analyst Groups feature is enabled, you can now select relevant groups during file upload or folder creation. This ensures the right groups have access to the content, helping streamline access control and organization.
 |
For more information, see Create a Doc Library Folder.
Other Enhancements
Add References Across Alert Fields: You can now insert hyperlinked references in all configured text box fields while creating alerts. This allows for more comprehensive citation across the entire alert content. For more information, see System Fields.
View Tags in Doc Library Listing: A new Tags column is now available in the Doc Library, allowing you to quickly access associated tags for each file. For more information, see Manage Doc Library Files and Folders.
Set Default Page Limit in Profile: You can now control how many records appear on each page of the Analyst Portal using the new Default Page Limit setting in your profile, making it easier to navigate large listings. For more information, see Analyst Profile.
Cyware Advisory Placement: Choose where Cyware advisory alerts appear in the Member Portal using the Show Cyware Advisories in setting in Configuration. This gives you better control over where advisory content is displayed. For more information, see Configure Mobile App or Web Portal Preferences.
Improved MITRE ID Display: Tactic, technique, and sub-technique values now show both ID and name in a consistent ID: Name format for better clarity across filters, emails, and exports. You can also search using either ID or name for quicker results.
Expanded Field Order Support: The field order you set in Field Management Settings now applies across more areas in both the Analyst and Member portals. This ensures prioritized fields always appear in the order you choose. For more information, see Field Order.
Member Portal
Intel Operations (Cyware Orchestrate) New
Intel Operations is now natively available in Collaborate through integration with Cyware Orchestrate, bringing automation to your threat workflows. When enabled by your Collaborate administrator, this feature helps you collect threat data from multiple sources, build dynamic response playbooks, and integrate across security tools to reduce response time and manual effort.
As a member, you can perform the following actions:
Operationalize Threat Intelligence: Create playbooks to automate common threat response tasks, reducing manual effort and response time.
Set Up Event-Driven Automation: Attach labels to events and playbooks, and set up triggers to run playbooks automatically when matching events occur.
Review Execution History: Use run logs to view detailed records of playbook executions, monitor outcomes, and troubleshoot issues.
This feature is part of an Early Access release. For assistance, contact Cyware support.
Other Enhancements
View Tags in Doc Library Listing: A new Tags column is now available in the Doc Library, allowing you to quickly access associated tags for each file. For more information, see Manage Doc Library Files and Folders.
Alert ID in RFI Details: While viewing the details of a Request for Information (RFI), you can now view the associated alert ID, helping you easily track alerts created from your requests. For more information, see Add RFI Comments and Responses in the Member Portal.
Improved MITRE ID Display: Tactic, technique, and sub-technique values now show both ID and name in a consistent ID: Name format for better clarity across filters, emails, and exports.
Open API Enhancements
The following APIs are enhanced:
Add Member API (
{{server}}csap/v1/create_end_user/): Enhanced to support the optionalfeaturesparameter, allowing analysts to enable Intel Lake for the member during creation. For more information, see Add Member.Update Member API (
{{server}}csap/v1/update_member/): Enhanced to support the optionalfeaturesparameter, enabling analysts to update Intel Lake access for existing members. For more information, see Update Member.Get Member Details API (
{{server}}csap/v1/member/:user_id/): Enhanced to return thefeaturesresponse parameter, allowing you to view feature access (such as Intel Lake) enabled for a member. For more information, see Get Member Details.Get Alert Details API (
{{server}}csap/v1/get_alert_detail/:short_id): Enhanced to return thesource_urlsresponse parameter, which returns the names and URLs of references associated with the alert. For more information, see Get Alert Details.