STIG Spider was synchronized with DISA's 2023 Q4 SRG-STIG Library Compilation and Control Correlation Identifier data as of 2023-07-26.

STIG Spider was synchronized with DISA's 2023 Q3 SRG-STIG Library Compilation. The following upstream vulnerabilities were also addressed:

• CVE-2023-33127 A vulnerability exists in .NET applications where the diagnostic server can be exploited to achieve cross-session/cross-user elevation of privilege (EoP) and code execution.
• CVE-2023-33170 A vulnerability exists in ASP.NET Core applications where account lockout maximum failed attempts may not be immediately updated, allowing an attacker to try more passwords.

STIG Spider is now five years old. Thank you to all for your support this past half-decade! To celebrate this milestone all macOS STIGs are now part of the Free subscription tier.

The filter and search interface was also refined to provide added clarity for which filters are active.

STIG Spider was synchronized with DISA's 2023 Q2 SRG-STIG Library Compilation.

STIG Spider was synchronized with DISA's 2023 Q1 SRG-STIG Library Compilation.