Threat Intelligence Blog
Research, insights, and updates from the isMalicious team.
CISA KEV Adds Arista VeloCloud and FortiOS Flaws: Why CVSS Is the Wrong Sort Order
On 27 July 2026 CISA added a CVSS 10.0 command injection in Arista VeloCloud Orchestrator and a medium-severity FortiOS patch bypass to KEV. The pairing shows why exposure and persistence beat severity when ordering a patch queue.
LLMjacking Explained: How Attackers Abuse Cloud Credentials to Steal AI Compute
LLMjacking combines cloud credential theft with expensive AI workloads. Learn how attackers find exposed keys, abuse model APIs, hide compute costs, and how defenders can detect the pattern.
Cloud IP Reputation: What AWS, Azure, and GCP Defenders Should Track in 2026
Cloud IP addresses are shared, recycled, and abused at scale. Learn how to interpret reputation signals, reduce false positives, and align network security with platform-native controls across the three major hyperscalers.
CSPM vs. CWPP: Decoding Cloud Security Acronyms
Cloud security is full of acronyms. We break down the difference between CSPM and CWPP and why you likely need both.
Container and Kubernetes Security: Protecting Cloud-Native Applications
Container environments introduce unique security challenges. Learn how to secure Docker containers, Kubernetes clusters, and cloud-native applications from emerging threats and misconfigurations.
Cloud Security Threats: Protecting Multi-Cloud Infrastructure
Cloud environments face unique security challenges from misconfigurations to cryptomining attacks. Learn how to monitor cloud assets, detect threats, and protect your multi-cloud infrastructure with threat intelligence.
Expert Threat Intelligence Analysis
Our blog features in-depth analysis from our threat research team. Each article is backed by real data from our analysis of millions of malicious domains, IPs, and URLs across the global threat landscape. Topics include ransomware campaigns, phishing techniques, malware distribution networks, and emerging threat trends. We publish specific intelligence that security teams can immediately use to improve their defenses.
Practical Security Guidance
Beyond threat analysis, we share practical guidance for security practitioners. Our tutorials cover API integration, SIEM configuration, threat hunting techniques, and building effective threat intelligence programs. Whether you're a SOC analyst, security engineer, or CISO, you'll find content tailored to your role and experience level.
Stay Ahead of Emerging Threats
The threat landscape evolves constantly. Our blog keeps you informed about the latest attack techniques, newly discovered vulnerabilities, and emerging threat actors. Subscribe to our newsletter for weekly digests of the most important developments in cybersecurity.
Subscribe to Our Newsletter
Weekly threat intelligence insights delivered to your inbox.