diff --git a/MANIFEST.json b/MANIFEST.json
index 00a050f..0dc7ce5 100644
--- a/MANIFEST.json
+++ b/MANIFEST.json
@@ -76,7 +76,7 @@
     {
       "description": "CIRCL Taxonomy - Schemes of Classification in Incident Response and Detection",
       "name": "circl",
-      "version": 4
+      "version": 5
     },
     {
       "description": "Course of action taken within organization to discover, detect, deny, disrupt, degrade, deceive and/or destroy an attack.",
diff --git a/circl/machinetag.json b/circl/machinetag.json
index 9865e5b..9091773 100644
--- a/circl/machinetag.json
+++ b/circl/machinetag.json
@@ -1,7 +1,7 @@
 {
   "namespace": "circl",
   "description": "CIRCL Taxonomy - Schemes of Classification in Incident Response and Detection",
-  "version": 4,
+  "version": 5,
   "predicates": [
     {
       "value": "incident-classification",
@@ -24,6 +24,14 @@
           "value": "system-compromise",
           "expanded": "System compromise"
         },
+        {
+          "value": "sabotage",
+          "expanded": "Sabotage"
+        },
+        {
+          "value": "privacy-violation",
+          "expanded": "Privacy violation"
+        },
         {
           "value": "scan",
           "expanded": "Scan"
@@ -40,6 +48,14 @@
           "value": "phishing",
           "expanded": "Phishing"
         },
+        {
+          "value": "whaling",
+          "expanded": "Whaling"
+        },
+        {
+          "value": "smishing",
+          "expanded": "SMS Phishing"
+        },
         {
           "value": "malware",
           "expanded": "Malware"
@@ -56,6 +72,10 @@
           "value": "fastflux",
           "expanded": "Fastflux"
         },
+        {
+          "value": "domain-fronting",
+          "expanded": "Domain Fronting"
+        },
         {
           "value": "sql-injection",
           "expanded": "SQL Injection"
@@ -84,10 +104,22 @@
           "value": "wiper",
           "expanded": "Wiper"
         },
+        {
+          "value": "ransomware",
+          "expanded": "ransomware"
+        },
         {
           "value": "sextortion",
           "expanded": "sextortion"
         },
+        {
+          "value": "social-engineering",
+          "expanded": "Social Engineering"
+        },
+        {
+          "value": "gdpr-violation",
+          "expanded": "GDPR Violation"
+        },
         {
           "value": "covid-19",
           "expanded": "covid-19"