I tried enabling ThreatFox and URLHaus from abuse.ch but they show as "not downloaded" in the Last Updated column in the Surricata administration page. OTOH, Feodo Tracker and SSL Fingerprint Blacklist show current updates. I think this related to messages that these now require API keys to download:
https://threatfox.abuse.ch/export/
https://urlhaus.abuse.ch/api/
Unfortunately, it seems like there is no way to add a key after obtaining one.