<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>isMalicious Blog</title>
    <link>https://ismalicious.com/blog</link>
    <description>Threat intelligence research, security insights, and cybersecurity best practices from the isMalicious team.</description>
    <language>en-us</language>
    <lastBuildDate>Fri, 21 Aug 2026 18:32:53 GMT</lastBuildDate>
    <atom:link href="https://ismalicious.com/feed.xml" rel="self" type="application/rss+xml"/>
    <image>
      <url>https://ismalicious.com/logo.png</url>
      <title>isMalicious Blog</title>
      <link>https://ismalicious.com/blog</link>
    </image>
    
    <item>
      <title><![CDATA[isMalicious vs Spamhaus: DNSBL Blocklists and Threat Enrichment Serve Different Layers]]></title>
      <link>https://ismalicious.com/posts/ismalicious-vs-spamhaus-dnsbl-threat-intelligence</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ismalicious-vs-spamhaus-dnsbl-threat-intelligence</guid>
      <pubDate>Tue, 25 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Spamhaus DROP and SBL are the standard for mail and network DNSBL blocking. isMalicious adds REST enrichment, URL scoring, CVE context, and STIX feeds. Most mature stacks use both at different layers.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ismalicious-vs-spamhaus-dnsbl-threat-intelligence.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[isMalicious vs Censys: Internet Discovery and Reputation Verdicts Are Different Jobs]]></title>
      <link>https://ismalicious.com/posts/ismalicious-vs-censys-attack-surface-reputation</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ismalicious-vs-censys-attack-surface-reputation</guid>
      <pubDate>Mon, 24 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Censys maps what exists on the internet — hosts, certificates, open ports. isMalicious assesses what is malicious. Most teams comparing the two need the second question answered, not the first.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ismalicious-vs-censys-attack-surface-reputation.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[isMalicious vs OpenCTI: Why This Is the Wrong Comparison (and How They Work Together)]]></title>
      <link>https://ismalicious.com/posts/ismalicious-vs-opencti-threat-intelligence-platform</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ismalicious-vs-opencti-threat-intelligence-platform</guid>
      <pubDate>Sun, 23 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[OpenCTI is a threat intelligence platform and knowledge graph. isMalicious is a data provider that feeds it. Teams searching for an OpenCTI alternative usually need a feed, not a replacement TIP.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ismalicious-vs-opencti-threat-intelligence-platform.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[isMalicious vs Recorded Future: When a Threat Data API Makes More Sense Than an Enterprise Intel Program]]></title>
      <link>https://ismalicious.com/posts/ismalicious-vs-recorded-future-threat-intelligence</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ismalicious-vs-recorded-future-threat-intelligence</guid>
      <pubDate>Sat, 22 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Recorded Future delivers finished intelligence and analyst support at enterprise scale. isMalicious delivers self-serve enrichment and feeds without a sales cycle. The right choice depends on whether you need strategic reports or automated verdicts.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ismalicious-vs-recorded-future-threat-intelligence.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Firewall Blocklist Automation: Pulling IP and Domain Feeds Without Outages]]></title>
      <link>https://ismalicious.com/posts/firewall-blocklist-automation-ip-domain-feeds</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/firewall-blocklist-automation-ip-domain-feeds</guid>
      <pubDate>Fri, 21 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[External dynamic lists can block malware and phishing at the edge — or break payroll, CDN traffic, and vendor portals. This guide covers staged rollout, allowlists, fail-open vs fail-closed, and measuring hit rates for IP and domain blocklists.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/firewall-blocklist-automation-ip-domain-feeds.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[STIX/TAXII Threat Feeds: Operational Guide for OpenCTI, MISP, and SIEM Pipelines]]></title>
      <link>https://ismalicious.com/posts/stix-taxii-threat-feeds-opencti-misp-pipelines</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/stix-taxii-threat-feeds-opencti-misp-pipelines</guid>
      <pubDate>Thu, 20 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[How to wire STIX 2.1 and TAXII 2.1 collections into OpenCTI, MISP, or your SIEM — what to poll, how to handle confidence and aging indicators, and where enrichment APIs fit alongside feed ingestion.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/stix-taxii-threat-feeds-opencti-misp-pipelines.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[How to Use an NRD Feed to Catch Phishing Before It Lands in the Inbox]]></title>
      <link>https://ismalicious.com/posts/newly-registered-domains-nrd-feed-phishing-defense</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/newly-registered-domains-nrd-feed-phishing-defense</guid>
      <pubDate>Wed, 19 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Newly registered domains are where most phishing campaigns start. This guide walks through NRD feed workflows for brand monitoring, mail gateway hygiene, and SOC triage — without treating domain age as a blunt block rule.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/newly-registered-domains-nrd-feed-phishing-defense.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[CVE-2026-63077 Puts Unauthenticated RCE on Every TeamCity On-Premises Server]]></title>
      <link>https://ismalicious.com/posts/jetbrains-teamcity-cve-2026-63077-kev-cicd</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/jetbrains-teamcity-cve-2026-63077-kev-cicd</guid>
      <pubDate>Tue, 18 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[A deserialization flaw in the agent polling protocol gives attackers TeamCity server privileges without credentials. JetBrains patched in 2025.11.7 and 2026.1.3 — CISA KEV and a 3-day federal deadline mean hunt now, not after the next release train.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/jetbrains-teamcity-cve-2026-63077-kev-cicd.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[CVE-2026-9198 Gives Unauthenticated RCE in IBM Langflow OSS Agent Control Planes]]></title>
      <link>https://ismalicious.com/posts/ibm-langflow-cve-2026-9198-ai-agent-rce</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ibm-langflow-cve-2026-9198-ai-agent-rce</guid>
      <pubDate>Mon, 17 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[A SUPERUSER token minted through /api/v1/auto_login chains with Python exec() in /api/v1/validate/code. Langflow 1.10.1 fixes the flaw — but internet-exposed instances need hunting now, not after the next sprint.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ibm-langflow-cve-2026-9198-ai-agent-rce.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[INC Ransomware Chains Two SonicWall SMA Zero-Days (CVE-2026-15409, CVE-2026-15410)]]></title>
      <link>https://ismalicious.com/posts/inc-ransomware-sonicwall-sma-zero-day-chain</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/inc-ransomware-sonicwall-sma-zero-day-chain</guid>
      <pubDate>Sun, 16 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[INC affiliates are weaponizing an SSRF and a post-authentication code injection in SonicWall SMA 1000 to reach internal networks. Exploitation started weeks before the July 14 patch — here is how to hunt and triage.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/inc-ransomware-sonicwall-sma-zero-day-chain.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[isMalicious vs SecurityTrails: Discovery Data and Reputation Verdicts Are Not the Same Product]]></title>
      <link>https://ismalicious.com/posts/ismalicious-vs-securitytrails-dns-history-domain-intelligence</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ismalicious-vs-securitytrails-dns-history-domain-intelligence</guid>
      <pubDate>Sat, 15 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[SecurityTrails tells you what exists — every subdomain, every historical DNS record. isMalicious tells you what is dangerous. Most teams searching for a SecurityTrails alternative want the second half.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ismalicious-vs-securitytrails-dns-history-domain-intelligence.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[isMalicious vs IPQualityScore: Fraud Scoring and Threat Intelligence Are Different Jobs]]></title>
      <link>https://ismalicious.com/posts/ismalicious-vs-ipqualityscore-fraud-detection-threat-intelligence</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ismalicious-vs-ipqualityscore-fraud-detection-threat-intelligence</guid>
      <pubDate>Fri, 14 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[IPQS scores whether a signup is fraudulent. isMalicious scores whether infrastructure is malicious. The two get compared constantly because both return a number about an IP address — and they answer different questions.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ismalicious-vs-ipqualityscore-fraud-detection-threat-intelligence.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[isMalicious vs MISP: Why This Is the Wrong Comparison (and What to Compare Instead)]]></title>
      <link>https://ismalicious.com/posts/ismalicious-vs-misp-threat-intelligence-platform</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ismalicious-vs-misp-threat-intelligence-platform</guid>
      <pubDate>Thu, 13 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[MISP is where you store and share indicators. isMalicious is where indicators come from. Teams searching for a MISP alternative are usually looking for a feed, not a replacement platform.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ismalicious-vs-misp-threat-intelligence-platform.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[isMalicious vs Cisco Talos: Reputation Lookups Outside the Cisco Stack]]></title>
      <link>https://ismalicious.com/posts/ismalicious-vs-cisco-talos-ip-domain-reputation</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ismalicious-vs-cisco-talos-ip-domain-reputation</guid>
      <pubDate>Wed, 12 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Talos reputation is excellent and it lives inside Cisco products. If your stack is not Cisco, or you need an API rather than a web form, that is where the comparison starts.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ismalicious-vs-cisco-talos-ip-domain-reputation.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Bulk IP and Domain Lookups: Designing Indicator Enrichment That Survives Real Volume]]></title>
      <link>https://ismalicious.com/posts/bulk-ip-domain-lookup-threat-intelligence-scale</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/bulk-ip-domain-lookup-threat-intelligence-scale</guid>
      <pubDate>Tue, 11 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[One incident produces hundreds of indicators, and per-indicator lookups are where triage stalls. Here is how to build a batch enrichment pipeline that respects quotas, deduplicates properly, and fails gracefully.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/bulk-ip-domain-lookup-threat-intelligence-scale.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Reverse IP Lookup: Pivoting on Infrastructure Without Drowning in Shared Hosting]]></title>
      <link>https://ismalicious.com/posts/reverse-ip-lookup-shared-hosting-infrastructure-pivoting</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/reverse-ip-lookup-shared-hosting-infrastructure-pivoting</guid>
      <pubDate>Mon, 10 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[A reverse IP lookup turns one indicator into a cluster — or into a thousand innocent neighbours. Here is how to tell the difference, and how to pivot on hosting infrastructure without generating false positives.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/reverse-ip-lookup-shared-hosting-infrastructure-pivoting.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[WHOIS Lookup for Security Investigations: Reading a Record After Redaction]]></title>
      <link>https://ismalicious.com/posts/whois-lookup-security-investigations-domain-ownership</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/whois-lookup-security-investigations-domain-ownership</guid>
      <pubDate>Sun, 09 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Privacy services stripped the registrant name out of most WHOIS records, but the fields that matter for triage survived. Here is what a WHOIS record still tells an analyst, and how to read it.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/whois-lookup-security-investigations-domain-ownership.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[The Kratos Phishing Kit Takedown: 200 Servers Gone, 1,800 Copies Still Out There]]></title>
      <link>https://ismalicious.com/posts/kratos-phishing-kit-takedown-aitm-session-theft</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/kratos-phishing-kit-takedown-aitm-session-theft</guid>
      <pubDate>Sat, 08 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[German and US law enforcement dismantled Kratos, the AiTM phishing service behind roughly 15,000 Microsoft 365 campaigns a month. The infrastructure is offline, but the kit is not. Here is what to hunt for now.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/kratos-phishing-kit-takedown-aitm-session-theft.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[CISA KEV Adds Arista VeloCloud and FortiOS Flaws: Why CVSS Is the Wrong Sort Order]]></title>
      <link>https://ismalicious.com/posts/cisa-kev-arista-velocloud-fortios-edge-management-plane</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/cisa-kev-arista-velocloud-fortios-edge-management-plane</guid>
      <pubDate>Fri, 07 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[On 27 July 2026 CISA added a CVSS 10.0 command injection in Arista VeloCloud Orchestrator and a medium-severity FortiOS patch bypass to KEV. The pairing shows why exposure and persistence beat severity when ordering a patch queue.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/cisa-kev-arista-velocloud-fortios-edge-management-plane.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Cl0p Is Exploiting PTC Windchill (CVE-2026-12569) to Steal Engineering Data]]></title>
      <link>https://ismalicious.com/posts/clop-ptc-windchill-cve-2026-12569-extortion-campaign</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/clop-ptc-windchill-cve-2026-12569-extortion-campaign</guid>
      <pubDate>Thu, 06 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[A Cl0p affiliate is chaining a FlexPLM information disclosure with an unauthenticated RCE in PTC Windchill to plant JSP web shells and run double-extortion data theft. Here are the detection signals and the triage workflow.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/clop-ptc-windchill-cve-2026-12569-extortion-campaign.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[GitHub Actions and CI/CD Pipeline Compromise: A Growing Supply Chain Attack Vector]]></title>
      <link>https://ismalicious.com/posts/github-actions-cicd-pipeline-supply-chain-compromise</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/github-actions-cicd-pipeline-supply-chain-compromise</guid>
      <pubDate>Wed, 05 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[CI/CD pipeline compromises keep recurring across GitHub Actions ecosystems. Learn the detection signals, hardening steps, and enrichment workflow security teams need.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/github-actions-cicd-pipeline-supply-chain-compromise.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Infostealer Log Marketplaces: How Stolen Corporate Credentials End Up for Sale]]></title>
      <link>https://ismalicious.com/posts/infostealer-log-marketplaces-corporate-credential-theft</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/infostealer-log-marketplaces-corporate-credential-theft</guid>
      <pubDate>Tue, 04 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Stealer-log marketplaces are booming in 2026, trading stolen corporate cookies, passwords, and SaaS sessions that fuel ransomware access and bypass MFA.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/infostealer-log-marketplaces-corporate-credential-theft.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Subdomain Enumeration for Security Teams: Attack Surface Discovery and DNS Reconnaissance]]></title>
      <link>https://ismalicious.com/posts/subdomain-enumeration-attack-surface-dns-reconnaissance</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/subdomain-enumeration-attack-surface-dns-reconnaissance</guid>
      <pubDate>Sun, 02 Aug 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Subdomain enumeration surfaces forgotten dev servers, dangling DNS, and shadow IT before attackers do. Passive and active recon techniques compared.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/subdomain-enumeration-attack-surface-dns-reconnaissance.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Malicious Browser Extensions Are Stealing Session Cookies: Detection Guide]]></title>
      <link>https://ismalicious.com/posts/malicious-browser-extension-malware-detection-session-hijacking</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/malicious-browser-extension-malware-detection-session-hijacking</guid>
      <pubDate>Thu, 30 Jul 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Rebranded browser extensions are harvesting session cookies and OAuth tokens after silent updates. Here is how to detect and respond before EDR ever sees it.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/malicious-browser-extension-malware-detection-session-hijacking.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[isMalicious vs urlscan.io: URL Sandbox Scanning and Phishing Detection Compared]]></title>
      <link>https://ismalicious.com/posts/ismalicious-vs-urlscan-io-url-scanner-sandbox-comparison</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ismalicious-vs-urlscan-io-url-scanner-sandbox-comparison</guid>
      <pubDate>Tue, 28 Jul 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[urlscan.io sandboxes a URL and captures the DOM. isMalicious adds a verdict, an AI-generated assessment, redirect-chain tracking, and a blocklist feed on top. Here is how the two fit together.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ismalicious-vs-urlscan-io-url-scanner-sandbox-comparison.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[isMalicious vs GreyNoise: IP Noise Scoring and Threat Intelligence API Compared]]></title>
      <link>https://ismalicious.com/posts/ismalicious-vs-greynoise-ip-reputation-alternative</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ismalicious-vs-greynoise-ip-reputation-alternative</guid>
      <pubDate>Mon, 27 Jul 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[GreyNoise tags internet background noise; isMalicious adds verdicts, WHOIS, DNS history, and ransomware context. A SOC-focused comparison for triage teams.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ismalicious-vs-greynoise-ip-reputation-alternative.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[SSO Vishing And SaaS Data Theft: Domain Monitoring Before The Helpdesk Call]]></title>
      <link>https://ismalicious.com/posts/sso-vishing-saas-data-theft-domain-monitoring</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/sso-vishing-saas-data-theft-domain-monitoring</guid>
      <pubDate>Mon, 13 Jul 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[ShinyHunters-style SSO vishing shows how fake login domains, MFA enrollment abuse, and SaaS access can become data theft. Domain monitoring gives defenders early warning.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/sso-vishing-saas-data-theft-domain-monitoring.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Mobile Smishing Defense: URL Scanners And Domain Reputation For July 2026]]></title>
      <link>https://ismalicious.com/posts/mobile-smishing-url-scanner-domain-reputation</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/mobile-smishing-url-scanner-domain-reputation</guid>
      <pubDate>Sun, 12 Jul 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Mobile phishing keeps gaining operational relevance. Security teams need URL scanning, domain reputation checks, DNS pivots, and employee reporting workflows built for SMS and chat.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/mobile-smishing-url-scanner-domain-reputation.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[China Edge Device Campaigns: Passive DNS And Certificates For Early Warning]]></title>
      <link>https://ismalicious.com/posts/china-edge-device-campaigns-passive-dns-certificate-monitoring</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/china-edge-device-campaigns-passive-dns-certificate-monitoring</guid>
      <pubDate>Sat, 11 Jul 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Dutch intelligence warnings about Chinese cyber capability reinforce a practical defense priority: monitor edge devices, VPNs, routers, DNS history, and certificate reuse.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/china-edge-device-campaigns-passive-dns-certificate-monitoring.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[When Vulnerability Exploitation Overtakes Credentials: CVE Prioritization In 2026]]></title>
      <link>https://ismalicious.com/posts/vulnerability-exploitation-overtakes-credentials-cve-prioritization</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/vulnerability-exploitation-overtakes-credentials-cve-prioritization</guid>
      <pubDate>Fri, 10 Jul 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Verizon DBIR reporting highlights vulnerability exploitation as a top breach path. CVE Watch, KEV, EPSS, and exposure context help teams patch what attackers actually use.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/vulnerability-exploitation-overtakes-credentials-cve-prioritization.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Shadow AI Data Leak Defense: Monitor Domains, URLs, And Unsanctioned AI Apps]]></title>
      <link>https://ismalicious.com/posts/shadow-ai-data-leak-domain-monitoring-july-2026</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/shadow-ai-data-leak-domain-monitoring-july-2026</guid>
      <pubDate>Thu, 09 Jul 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Shadow AI has become a governance and data leakage issue. Security teams need discovery, DNS visibility, sanctioned app controls, and domain monitoring around AI tool usage.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/shadow-ai-data-leak-domain-monitoring-july-2026.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Agentic AI Threat Mapping: MITRE ATT&CK Needs Evidence-Rich Workflows]]></title>
      <link>https://ismalicious.com/posts/agentic-ai-threat-mapping-mitre-attack-workflows</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/agentic-ai-threat-mapping-mitre-attack-workflows</guid>
      <pubDate>Wed, 08 Jul 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Anthropic mapped AI-enabled cyber activity to MITRE ATT&CK and found gaps around autonomous orchestration. SOC teams need AI summaries tied to evidence, not unsupported verdicts.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/agentic-ai-threat-mapping-mitre-attack-workflows.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[SOC Alert Fatigue In July 2026: Confidence Scoring Beats More Noise]]></title>
      <link>https://ismalicious.com/posts/july-2026-soc-alert-fatigue-confidence-scoring</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/july-2026-soc-alert-fatigue-confidence-scoring</guid>
      <pubDate>Tue, 07 Jul 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Vectra AI research shows alert overload remains a resilience problem. SOC teams need source quality, confidence scoring, enrichment, and SIEM workflows that suppress noise without hiding risk.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/july-2026-soc-alert-fatigue-confidence-scoring.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Ransomware Revenue Is Rising: Initial Access Brokers Make Threat Intelligence Urgent]]></title>
      <link>https://ismalicious.com/posts/ransomware-revenue-initial-access-brokers-intelligence</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ransomware-revenue-initial-access-brokers-intelligence</guid>
      <pubDate>Mon, 06 Jul 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Q1 2026 ransomware revenue reporting points to a mature access market. Defenders need ransomware intelligence, domain monitoring, blocklists, and API enrichment before encryption begins.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ransomware-revenue-initial-access-brokers-intelligence.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[AMOS macOS Infostealer: ClickFix Shows Why Hash Reputation Must Cover Developer Macs]]></title>
      <link>https://ismalicious.com/posts/amos-macos-infostealer-clickfix-hash-reputation</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/amos-macos-infostealer-clickfix-hash-reputation</guid>
      <pubDate>Sun, 05 Jul 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[AMOS and related macOS infostealers are turning social engineering into credential theft. File hash reputation, URL scanning, and domain intelligence help teams respond before stolen tokens spread.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/amos-macos-infostealer-clickfix-hash-reputation.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[BlueHammer Defender Exploitation: July 2026 Patch SLA For Windows Fleets]]></title>
      <link>https://ismalicious.com/posts/bluehammer-defender-active-exploitation-cve-watch</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/bluehammer-defender-active-exploitation-cve-watch</guid>
      <pubDate>Sat, 04 Jul 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[BlueHammer coverage shows why endpoint patching, CISA KEV context, CVE Watch, and IOC enrichment have to work together when local privilege escalation becomes ransomware tradecraft.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/bluehammer-defender-active-exploitation-cve-watch.svg" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Arch AUR Rootkit And Infostealer Campaign: Supply Chain Defense Starts With Hash Intelligence]]></title>
      <link>https://ismalicious.com/posts/arch-aur-rootkit-infostealer-supply-chain</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/arch-aur-rootkit-infostealer-supply-chain</guid>
      <pubDate>Mon, 15 Jun 2026 06:40:00 GMT</pubDate>
      <description><![CDATA[The June 2026 Arch User Repository compromise shows why supply chain security needs package review, file hash reputation, developer credential protection, and fast IOC enrichment.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/arch-aur-rootkit-infostealer-supply-chain.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Microsoft June 2026 Patch Tuesday: Turning 206 Vulnerabilities Into A SOC Priority Queue]]></title>
      <link>https://ismalicious.com/posts/microsoft-june-2026-patch-tuesday-prioritization</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/microsoft-june-2026-patch-tuesday-prioritization</guid>
      <pubDate>Mon, 15 Jun 2026 06:30:00 GMT</pubDate>
      <description><![CDATA[Microsoft patched 206 vulnerabilities in June 2026, including publicly disclosed zero-days. Security teams need CVE Watch, KEV context, exploit evidence, and enrichment to avoid patch fatigue.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/microsoft-june-2026-patch-tuesday-prioritization.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[CISA KEV Adds Cisco, Chrome, And Arista Flaws: How To Prioritize Active Exploitation]]></title>
      <link>https://ismalicious.com/posts/cisa-kev-cisco-chrome-arista-active-exploitation</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/cisa-kev-cisco-chrome-arista-active-exploitation</guid>
      <pubDate>Mon, 15 Jun 2026 06:20:00 GMT</pubDate>
      <description><![CDATA[CISA added Cisco SD-WAN, Google Chromium V8, and Arista EOS vulnerabilities to KEV in June 2026. Here is how SOC and vulnerability teams should turn that signal into action.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/cisa-kev-cisco-chrome-arista-active-exploitation.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Oracle PeopleSoft Zero-Day: CVE-2026-35273 Shows Why CVE Watch Needs IOC Enrichment]]></title>
      <link>https://ismalicious.com/posts/oracle-peoplesoft-zero-day-shinyhunters-data-theft</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/oracle-peoplesoft-zero-day-shinyhunters-data-theft</guid>
      <pubDate>Mon, 15 Jun 2026 06:10:00 GMT</pubDate>
      <description><![CDATA[The PeopleSoft CVE-2026-35273 exploitation reports show how vulnerability response, ransomware intelligence, IP enrichment, and incident response must work together.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/oracle-peoplesoft-zero-day-shinyhunters-data-theft.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Outsider Enterprise Takedown: AI Phishing Infrastructure Is Now A Domain Reputation Problem]]></title>
      <link>https://ismalicious.com/posts/outsider-enterprise-ai-phishing-service-takedown</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/outsider-enterprise-ai-phishing-service-takedown</guid>
      <pubDate>Mon, 15 Jun 2026 06:00:00 GMT</pubDate>
      <description><![CDATA[The FBI, Google, and Black Lotus Labs disruption of Outsider Enterprise shows why AI phishing defense needs URL scanning, domain reputation checks, blocklists, and fast API enrichment.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/outsider-enterprise-ai-phishing-service-takedown.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Shadow AI Governance: How Security Teams Can Detect Risk Without Blocking Innovation]]></title>
      <link>https://ismalicious.com/posts/shadow-ai-governance-security-risk-detection</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/shadow-ai-governance-security-risk-detection</guid>
      <pubDate>Thu, 04 Jun 2026 09:20:00 GMT</pubDate>
      <description><![CDATA[Shadow AI is the new shadow IT: fast adoption, weak visibility, and serious data leakage risk. Security teams need discovery, domain intelligence, policy, training, and monitoring.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/shadow-ai-governance-security-risk-detection.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[AI-Enabled Cyberattacks and MITRE ATT&CK: Turning New Threat Maps Into SOC Action]]></title>
      <link>https://ismalicious.com/posts/ai-enabled-cyberattacks-mitre-attack-threat-intelligence</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ai-enabled-cyberattacks-mitre-attack-threat-intelligence</guid>
      <pubDate>Thu, 04 Jun 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[AI-enabled threats are being mapped into ATT&CK language, but mapping is only useful when it drives enrichment, detection, triage, and response workflows.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ai-enabled-cyberattacks-mitre-attack-threat-intelligence.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Cyber Extortion Now Includes Physical Threats: What Incident Response Teams Must Change]]></title>
      <link>https://ismalicious.com/posts/cyber-extortion-physical-threats-ransomware-response</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/cyber-extortion-physical-threats-ransomware-response</guid>
      <pubDate>Thu, 04 Jun 2026 08:40:00 GMT</pubDate>
      <description><![CDATA[Cyber incidents are no longer always contained to systems and data. As extortion crews add physical threats, responders need ransomware intelligence, safety escalation, IOC enrichment, and executive-ready evidence.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/cyber-extortion-physical-threats-ransomware-response.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[SOC Alert Fatigue: How Threat Intelligence Reduces False Positives Without Hiding Real Attacks]]></title>
      <link>https://ismalicious.com/posts/soc-alert-fatigue-threat-intelligence-false-positives</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/soc-alert-fatigue-threat-intelligence-false-positives</guid>
      <pubDate>Thu, 04 Jun 2026 08:20:00 GMT</pubDate>
      <description><![CDATA[Alert fatigue is not a staffing problem alone. SOC teams need better evidence, source quality, confidence bands, and enrichment workflows that turn noisy alerts into defensible decisions.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/soc-alert-fatigue-threat-intelligence-false-positives.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[YellowKey and BitLocker Bypass: How Security Teams Should Re-Baseline Stolen-Device Risk]]></title>
      <link>https://ismalicious.com/posts/yellowkey-bitlocker-bypass-stolen-device-response</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/yellowkey-bitlocker-bypass-stolen-device-response</guid>
      <pubDate>Thu, 04 Jun 2026 08:00:00 GMT</pubDate>
      <description><![CDATA[YellowKey made a quiet assumption loud again: encrypted endpoints still need vulnerability intelligence, asset context, and incident workflows. Here is how to respond when a last-resort control becomes a live risk.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/yellowkey-bitlocker-bypass-stolen-device-response.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[AI-Enabled Device Code Phishing: How OAuth Tokens Became the New Credential Theft Target]]></title>
      <link>https://ismalicious.com/posts/ai-enabled-device-code-phishing-oauth-token-theft</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ai-enabled-device-code-phishing-oauth-token-theft</guid>
      <pubDate>Sun, 10 May 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Device code phishing turns a legitimate OAuth flow into a token theft path. Learn how AI-assisted lures, Entra ID abuse, and session token replay change phishing detection in 2026.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ai-enabled-device-code-phishing-oauth-token-theft.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[MCP Security Risks: Tool Poisoning, Prompt Injection, and the New AI Agent Attack Surface]]></title>
      <link>https://ismalicious.com/posts/mcp-security-risks-tool-poisoning-ai-agents</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/mcp-security-risks-tool-poisoning-ai-agents</guid>
      <pubDate>Sat, 09 May 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Model Context Protocol integrations give agents access to tools, files, and services. That power creates new risks: tool poisoning, prompt injection, overbroad permissions, and untrusted server abuse.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/mcp-security-risks-tool-poisoning-ai-agents.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[LLMjacking Explained: How Attackers Abuse Cloud Credentials to Steal AI Compute]]></title>
      <link>https://ismalicious.com/posts/llmjacking-cloud-credential-abuse-ai-compute</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/llmjacking-cloud-credential-abuse-ai-compute</guid>
      <pubDate>Fri, 08 May 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[LLMjacking combines cloud credential theft with expensive AI workloads. Learn how attackers find exposed keys, abuse model APIs, hide compute costs, and how defenders can detect the pattern.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/llmjacking-cloud-credential-abuse-ai-compute.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Non-Human Identity Security: API Keys, Service Accounts, and Workload Credentials in 2026]]></title>
      <link>https://ismalicious.com/posts/non-human-identity-security-api-keys-service-accounts</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/non-human-identity-security-api-keys-service-accounts</guid>
      <pubDate>Thu, 07 May 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Non-human identities now outnumber users in most environments. Learn how API keys, service accounts, CI tokens, and workload credentials become attack paths and how to govern them.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/non-human-identity-security-api-keys-service-accounts.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[OAuth Consent Phishing: Detecting Malicious App Grants Before Data Exfiltration]]></title>
      <link>https://ismalicious.com/posts/oauth-consent-phishing-malicious-app-grants</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/oauth-consent-phishing-malicious-app-grants</guid>
      <pubDate>Wed, 06 May 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[OAuth consent phishing tricks users into granting access instead of giving up passwords. Learn how malicious app grants work, which permissions matter, and how to detect abuse early.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/oauth-consent-phishing-malicious-app-grants.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Session Token Theft: Why Infostealers Bypass MFA and How Defenders Respond]]></title>
      <link>https://ismalicious.com/posts/session-token-theft-infostealers-bypass-mfa</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/session-token-theft-infostealers-bypass-mfa</guid>
      <pubDate>Tue, 05 May 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Infostealers increasingly target browser cookies, session tokens, and refresh tokens. Learn why MFA is not enough, what token theft looks like, and how to detect replay.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/session-token-theft-infostealers-bypass-mfa.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Cloud Control Plane Attacks: Why Identity Is the New Kill Chain]]></title>
      <link>https://ismalicious.com/posts/cloud-control-plane-attacks-identity-kill-chain</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/cloud-control-plane-attacks-identity-kill-chain</guid>
      <pubDate>Mon, 04 May 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Cloud breaches increasingly target the control plane: identities, tokens, policies, APIs, and automation. Learn how attackers move from one credential to full cloud control.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/cloud-control-plane-attacks-identity-kill-chain.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Security LLM and Agent Workflows: When (and How) to Check Malicious Domains, IPs, and URLs Before Acting]]></title>
      <link>https://ismalicious.com/posts/security-llm-agents-malicious-url-domain-checks</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/security-llm-agents-malicious-url-domain-checks</guid>
      <pubDate>Mon, 04 May 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[AI assistants in SOAR, IDEs, and browser extensions can exfiltrate data or run malicious code if they fetch the wrong link. This guide gives guardrails: schema for tool calls, policy tiers, and where threat intelligence checks belong in the loop.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/security-llm-agents-malicious-url-domain-checks.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Malicious npm Packages: Detecting Open-Source Supply Chain Compromise]]></title>
      <link>https://ismalicious.com/posts/malicious-npm-packages-open-source-supply-chain</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/malicious-npm-packages-open-source-supply-chain</guid>
      <pubDate>Sun, 03 May 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Malicious npm packages use typosquatting, dependency confusion, install scripts, and maintainer compromise to steal secrets and backdoor builds. Learn practical detection and response.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/malicious-npm-packages-open-source-supply-chain.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Malicious Infrastructure Clustering: How Passive DNS, TLS Certificates, and ASNs Reveal Shared Campaigns]]></title>
      <link>https://ismalicious.com/posts/malicious-infrastructure-clustering-passive-dns-certificates</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/malicious-infrastructure-clustering-passive-dns-certificates</guid>
      <pubDate>Sun, 03 May 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[A single C2 IP is a clue; shared signing patterns and DNS co-occurrence are a map. This guide explains how defenders cluster infrastructure without chasing ghosts—and how to document findings for IR, threat intel, and law enforcement handoffs.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/malicious-infrastructure-clustering-passive-dns-certificates.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Compromised Domains in Phishing: When Trusted Sites Become Attack Infrastructure]]></title>
      <link>https://ismalicious.com/posts/compromised-domains-phishing-reputation-bypass</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/compromised-domains-phishing-reputation-bypass</guid>
      <pubDate>Sat, 02 May 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Attackers increasingly host phishing pages, redirects, and malware on compromised legitimate domains. Learn why reputation bypass works and how to detect hidden malicious paths.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/compromised-domains-phishing-reputation-bypass.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Brand Impersonation and Lookalike Domains: A Practical Monitoring Playbook for Security, Legal, and Fraud Teams]]></title>
      <link>https://ismalicious.com/posts/brand-impersonation-domain-monitoring-guide</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/brand-impersonation-domain-monitoring-guide</guid>
      <pubDate>Sat, 02 May 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Typosquats and homoglyphs are cheap to register and expensive to ignore. Learn how to discover, prioritize, and remove lookalike infrastructure before it harvests credentials or poisons your customers’ trust in search and email.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/brand-impersonation-domain-monitoring-guide.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[DPRK Remote IT Worker Threat: Identity, Insider Risk, and Cloud Access Abuse]]></title>
      <link>https://ismalicious.com/posts/dprk-remote-it-worker-threat-insider-risk</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/dprk-remote-it-worker-threat-insider-risk</guid>
      <pubDate>Fri, 01 May 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[DPRK remote IT worker schemes blend fraud, identity deception, and insider access. Learn how hiring, endpoint, SaaS, and cloud controls can reduce the risk.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/dprk-remote-it-worker-threat-insider-risk.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[SIEM and SOAR Threat Intelligence Enrichment: Workflows, Field Mapping, and the Metrics That Keep Teams Sane]]></title>
      <link>https://ismalicious.com/posts/siem-soar-threat-intelligence-enrichment-workflows</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/siem-soar-threat-intelligence-enrichment-workflows</guid>
      <pubDate>Fri, 01 May 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[A SOAR playbook without enrichment is a ticket printer. A SIEM with unbounded threat feeds is a bill. Here is a practical way to design enrichment for Splunk, Sentinel, or Elastic-style stacks—what to store, when to run playbooks, and what to report upward.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/siem-soar-threat-intelligence-enrichment-workflows.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Threat Intelligence Risk Scoring: How to Calibrate Reputation, Reduce False Positives, and Defend Your Decisions]]></title>
      <link>https://ismalicious.com/posts/threat-intelligence-risk-scoring-false-positives</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/threat-intelligence-risk-scoring-false-positives</guid>
      <pubDate>Thu, 30 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[A noisy score is worse than no score. Learn what makes a reputation model trustworthy, how to combine multi-source evidence, and how to communicate uncertainty to your SOC and your executives.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/threat-intelligence-risk-scoring-false-positives.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Proxy, VPN, Tor, and Datacenter IPs: A Decision Matrix for WAF, Fraud, and SIEM Rules (Without Breaking Real Users)]]></title>
      <link>https://ismalicious.com/posts/proxy-vpn-tor-datacenter-ip-detection</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/proxy-vpn-tor-datacenter-ip-detection</guid>
      <pubDate>Wed, 29 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Not every "datacenter" IP is malicious, and not every Tor exit is a fraudster. This matrix-style guide helps you combine IP type signals with reputation and product context for safer, explainable security decisions.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/proxy-vpn-tor-datacenter-ip-detection.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Cloud IP Reputation: What AWS, Azure, and GCP Defenders Should Track in 2026]]></title>
      <link>https://ismalicious.com/posts/cloud-ip-reputation-aws-azure-gcp-security</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/cloud-ip-reputation-aws-azure-gcp-security</guid>
      <pubDate>Tue, 28 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Cloud IP addresses are shared, recycled, and abused at scale. Learn how to interpret reputation signals, reduce false positives, and align network security with platform-native controls across the three major hyperscalers.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/cloud-ip-reputation-aws-azure-gcp-security.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[ASN Reputation for Threat Intelligence: How Autonomous System Intelligence Improves Prioritization and Hunt Programs]]></title>
      <link>https://ismalicious.com/posts/asn-reputation-threat-intelligence-guide</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/asn-reputation-threat-intelligence-guide</guid>
      <pubDate>Mon, 27 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[An IP address is a snapshot; an autonomous system (ASN) is a neighborhood. Learn how to use ASN context safely for triage, fraud, and security operations—without mistaking a giant cloud for a monolithic "bad host".]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/asn-reputation-threat-intelligence-guide.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Threat Intelligence Platforms: Architecture, Data Quality, and High-Signal Feeds]]></title>
      <link>https://ismalicious.com/posts/threat-intelligence-platforms-data-quality-architecture</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/threat-intelligence-platforms-data-quality-architecture</guid>
      <pubDate>Sun, 26 Apr 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Design TIPs and intel pipelines that scale: normalization, confidence scoring, deduplication, API-first delivery, and how to pair platform investments with analyst workflows.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/threat-intelligence-platforms-data-quality-architecture.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Building IOC Pipelines: From Raw Indicators to Operational Threat Intelligence in 2026]]></title>
      <link>https://ismalicious.com/posts/building-ioc-pipelines-operational-threat-intelligence</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/building-ioc-pipelines-operational-threat-intelligence</guid>
      <pubDate>Sun, 26 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[A practical engineering guide to building indicator of compromise (IOC) pipelines—ingestion, normalization, deduplication, enrichment, scoring, distribution, and feedback—to turn raw threat feeds into operational defense.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/building-ioc-pipelines-operational-threat-intelligence.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[IOC Enrichment APIs: A Security Operations Guide to Faster Triage, Fewer False Positives, and Measurable ROI]]></title>
      <link>https://ismalicious.com/posts/ioc-enrichment-api-security-operations-guide</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ioc-enrichment-api-security-operations-guide</guid>
      <pubDate>Sun, 26 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[An indicator without context is a ticket without an owner. Learn how IOC enrichment APIs work, which fields SOC teams need at each tier, and how to wire them into case management without building a data swamp.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ioc-enrichment-api-security-operations-guide.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Supply Chain CVE Response: SBOMs, Dependency Risk, and Coordinated Vulnerability Disclosure]]></title>
      <link>https://ismalicious.com/posts/supply-chain-cve-sbom-vulnerability-response</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/supply-chain-cve-sbom-vulnerability-response</guid>
      <pubDate>Sat, 25 Apr 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Build a modern supply-chain security program: generate SBOMs, map CVEs to components, integrate EPSS and KEV, and coordinate fixes across vendors and open-source maintainers.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/supply-chain-cve-sbom-vulnerability-response.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Answer-Engine Optimization for Cybersecurity: How to Get Cited by ChatGPT, Perplexity, and Claude in 2026]]></title>
      <link>https://ismalicious.com/posts/answer-engine-optimization-cybersecurity-brands</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/answer-engine-optimization-cybersecurity-brands</guid>
      <pubDate>Sat, 25 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Traditional SEO is not enough when users ask large language models for vendor comparisons and step-by-step security guidance. Learn how to structure threat intelligence and security content so AI systems can parse, trust, and cite your brand without hype or ambiguity.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/answer-engine-optimization-cybersecurity-brands.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[CVE Numbering Authorities and the Vulnerability Disclosure Process: A 2026 Practitioner Guide]]></title>
      <link>https://ismalicious.com/posts/cve-numbering-authorities-vulnerability-disclosure-process</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/cve-numbering-authorities-vulnerability-disclosure-process</guid>
      <pubDate>Sat, 25 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Understand how CVEs are born—from initial vulnerability discovery through CNA assignment, coordinated disclosure, and publication—plus how this pipeline shapes defender priorities and SEO-visible vulnerability data.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/cve-numbering-authorities-vulnerability-disclosure-process.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Initial Access Brokers and Ransomware: Mapping Attack Vectors Across the Cybercrime Supply Chain]]></title>
      <link>https://ismalicious.com/posts/initial-access-brokers-ransomware-attack-vectors</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/initial-access-brokers-ransomware-attack-vectors</guid>
      <pubDate>Fri, 24 Apr 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Understand how access brokers monetize footholds, how ransomware affiliates purchase them, and which defensive controls break the supply chain—from phishing to exposed services.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/initial-access-brokers-ransomware-attack-vectors.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Spear Phishing and Social Engineering: The Top Attack Vectors Targeting Enterprises in 2026]]></title>
      <link>https://ismalicious.com/posts/spear-phishing-social-engineering-attack-vectors-enterprise</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/spear-phishing-social-engineering-attack-vectors-enterprise</guid>
      <pubDate>Fri, 24 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[A complete guide to modern spear phishing and social engineering attack vectors—how threat actors plan, lure, and pivot, with detailed defensive controls for email, identity, training, and infrastructure reputation.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/spear-phishing-social-engineering-attack-vectors-enterprise.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Strategic, Tactical, and Operational Threat Intelligence: Frameworks for Modern Security Programs]]></title>
      <link>https://ismalicious.com/posts/strategic-tactical-threat-intelligence-frameworks</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/strategic-tactical-threat-intelligence-frameworks</guid>
      <pubDate>Thu, 23 Apr 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Align CTI outputs with audience needs: executive risk narratives, SOC-ready IOCs, and MITRE-mapped TTPs—plus governance models that keep intelligence timely and measurable.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/strategic-tactical-threat-intelligence-frameworks.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[OSINT for SOC Analysts: Turning Open Source Intelligence Into Threat intelligence analysts can use]]></title>
      <link>https://ismalicious.com/posts/osint-soc-analysts-actionable-threat-intelligence</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/osint-soc-analysts-actionable-threat-intelligence</guid>
      <pubDate>Thu, 23 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[A complete guide to open source intelligence (OSINT) for security operations—tools, techniques, workflows, and legal considerations for collecting, analyzing, and operationalizing open threat data in a modern SOC.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/osint-soc-analysts-specific-threat-intelligence.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Hash Reputation at Scale: Building Detection Rules That Survive Real Networks]]></title>
      <link>https://ismalicious.com/posts/file-hash-reputation-detection-rules-scale</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/file-hash-reputation-detection-rules-scale</guid>
      <pubDate>Wed, 22 Apr 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Move beyond one-off hash blocks: design reputation pipelines, reduce false positives, and integrate file intelligence with IP and domain context for production-ready detection engineering.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/file-hash-reputation-detection-rules-scale.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[File Hash Reputation Lookups: Accelerating Incident Response With IOC Enrichment]]></title>
      <link>https://ismalicious.com/posts/file-hash-reputation-lookup-ioc-enrichment-incident-response</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/file-hash-reputation-lookup-ioc-enrichment-incident-response</guid>
      <pubDate>Wed, 22 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[A practitioner's guide to file hash reputation lookups—how they work, which data sources power them, how to build automated IOC enrichment pipelines, and how to integrate hash intelligence into SOC, SOAR, and incident response workflows.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/file-hash-reputation-lookup-ioc-enrichment-incident-response.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[EPSS vs CVSS vs KEV: How to Prioritize CVEs When Everything Looks Critical]]></title>
      <link>https://ismalicious.com/posts/epss-cvss-kev-cve-prioritization-security-teams</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/epss-cvss-kev-cve-prioritization-security-teams</guid>
      <pubDate>Tue, 21 Apr 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Cut through scoring confusion: compare CVSS severity, EPSS exploit probability, and CISA KEV active exploitation—and learn a practical model for patch and compensating-control decisions.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/epss-cvss-kev-cve-prioritization-security-teams.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[EPSS Explained: Using the Exploit Prediction Scoring System to Prioritize Patches in 2026]]></title>
      <link>https://ismalicious.com/posts/epss-exploit-prediction-scoring-system-patch-prioritization</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/epss-exploit-prediction-scoring-system-patch-prioritization</guid>
      <pubDate>Tue, 21 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[A practical guide to the Exploit Prediction Scoring System (EPSS)—how it works, how it complements CVSS and KEV, and how security teams can use EPSS probabilities to prioritize vulnerability management at scale.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/epss-exploit-prediction-scoring-system-patch-prioritization.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Threat Actor Attack Vectors in 2026: Mapping TTPs to Real-World Defenses]]></title>
      <link>https://ismalicious.com/posts/threat-actor-attack-vectors-mitre-ttps-2026</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/threat-actor-attack-vectors-mitre-ttps-2026</guid>
      <pubDate>Mon, 20 Apr 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Explore how adversaries gain initial access, move laterally, and exfiltrate data—and how security teams map attack vectors to MITRE ATT&CK, detection engineering, and threat-informed defense.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/threat-actor-attack-vectors-mitre-ttps-2026.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Initial Access Brokers: How Threat Actors Breach Enterprise Perimeters in 2026]]></title>
      <link>https://ismalicious.com/posts/initial-access-brokers-attack-vectors-2026</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/initial-access-brokers-attack-vectors-2026</guid>
      <pubDate>Mon, 20 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[A deep dive into initial access brokers (IABs)—the cybercrime specialists who sell footholds into corporate networks—covering their techniques, pricing, detection signals, and how to defend against the top attack vectors they exploit.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/initial-access-brokers-attack-vectors-2026.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Operational Threat Intelligence: Turning IOCs into Prioritized Security Actions]]></title>
      <link>https://ismalicious.com/posts/operational-threat-intelligence-ioc-prioritization-guide</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/operational-threat-intelligence-ioc-prioritization-guide</guid>
      <pubDate>Sun, 19 Apr 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Define operational CTI that SOC teams can use daily: IOC lifecycle, confidence scoring, feed hygiene, and how to align indicators with detection engineering and incident response.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/operational-threat-intelligence-ioc-prioritization-guide.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Strategic, Operational, and Tactical Threat Intelligence: A Practitioner's Framework for 2026]]></title>
      <link>https://ismalicious.com/posts/strategic-operational-tactical-threat-intelligence-framework</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/strategic-operational-tactical-threat-intelligence-framework</guid>
      <pubDate>Sun, 19 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[A complete guide to the three levels of threat intelligence—strategic, operational, and tactical—with practical examples of consumers, outputs, feeds, and how to connect them into a coherent CTI program.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/strategic-operational-tactical-threat-intelligence-framework.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[File Hash Analysis for Malware Detection: SHA-256, Reputation, and Threat Intel Workflows]]></title>
      <link>https://ismalicious.com/posts/file-hash-malware-detection-sha256-threat-intelligence</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/file-hash-malware-detection-sha256-threat-intelligence</guid>
      <pubDate>Sat, 18 Apr 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Learn how cryptographic file hashes power malware identification, why SHA-256 dominates security tooling, and how to combine hash lookups with broader threat intelligence for fewer false positives.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/file-hash-malware-detection-sha256-threat-intelligence.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[File Hash Analysis: MD5, SHA-1, and SHA-256 for Malware Detection and Threat Hunting]]></title>
      <link>https://ismalicious.com/posts/file-hash-analysis-md5-sha1-sha256-malware-detection</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/file-hash-analysis-md5-sha1-sha256-malware-detection</guid>
      <pubDate>Sat, 18 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[A practical guide to file hashes in cybersecurity—how MD5, SHA-1, and SHA-256 work, why they matter for malware detection, incident response, and threat hunting, and how to use hash lookups to enrich indicators of compromise.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/file-hash-analysis-md5-sha1-sha256-malware-detection.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[CVE & Vulnerability Management in 2026: From Disclosure to Patch at Scale]]></title>
      <link>https://ismalicious.com/posts/cve-vulnerability-lifecycle-patch-management-2026</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/cve-vulnerability-lifecycle-patch-management-2026</guid>
      <pubDate>Fri, 17 Apr 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[A practical guide to the CVE ecosystem, CVSS scoring, exploitability signals, and how security teams prioritize vulnerabilities without drowning in scanner noise.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/cve-vulnerability-lifecycle-patch-management-2026.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[CVSS 4.0 Explained: A Complete Guide to Vulnerability Severity Scoring in 2026]]></title>
      <link>https://ismalicious.com/posts/cvss-4-vulnerability-scoring-explained-2026</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/cvss-4-vulnerability-scoring-explained-2026</guid>
      <pubDate>Fri, 17 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Master the Common Vulnerability Scoring System v4.0 with a practical breakdown of base, threat, environmental, and supplemental metrics—and learn how to translate CVSS into real-world risk decisions.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/cvss-4-vulnerability-scoring-explained-2026.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[IP and Domain Intelligence: Building a Proactive Cyber Threat Defense]]></title>
      <link>https://ismalicious.com/posts/ip-domain-intelligence-proactive-cyber-defense</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ip-domain-intelligence-proactive-cyber-defense</guid>
      <pubDate>Sat, 11 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Reactive security leaves organizations perpetually one step behind attackers. Learn how combining IP and domain intelligence transforms your security posture from reactive incident response to proactive threat prevention that stops attacks before they start.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ip-domain-intelligence-proactive-cyber-defense.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Domain Lookup for Phishing and C2 Infrastructure Detection]]></title>
      <link>https://ismalicious.com/posts/domain-lookup-phishing-c2-infrastructure-detection</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/domain-lookup-phishing-c2-infrastructure-detection</guid>
      <pubDate>Fri, 10 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Phishing campaigns and malware operations depend on domain infrastructure that leaves detectable traces. Learn how advanced domain lookup techniques help security teams uncover phishing sites and command-and-control servers before they compromise your organization.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/domain-lookup-phishing-c2-infrastructure-detection.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Real-Time IP Reputation Check: Stop Cyber Threats at the Network Edge]]></title>
      <link>https://ismalicious.com/posts/real-time-ip-reputation-check-stop-threats</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/real-time-ip-reputation-check-stop-threats</guid>
      <pubDate>Thu, 09 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Real-time IP reputation checks give you the power to identify and block malicious actors the moment they connect to your systems. Discover how to implement automated threat detection that works at machine speed, not analyst speed.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/real-time-ip-reputation-check-stop-threats.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Domain Lookup: How to Identify Malicious Websites Before They Strike]]></title>
      <link>https://ismalicious.com/posts/domain-lookup-identify-malicious-websites</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/domain-lookup-identify-malicious-websites</guid>
      <pubDate>Wed, 08 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Malicious websites are the launchpad for phishing, malware distribution, and credential theft. Learn how domain lookup tools use reputation data, WHOIS analysis, and threat feeds to identify dangerous domains before your users click.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/domain-lookup-identify-malicious-websites.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[IP Lookup for Cyber Threat Detection: A Complete Security Guide]]></title>
      <link>https://ismalicious.com/posts/ip-lookup-cyber-threat-detection-guide</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ip-lookup-cyber-threat-detection-guide</guid>
      <pubDate>Tue, 07 Apr 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Learn how IP lookup works as a frontline defense against cyber threats. Discover how to use IP reputation data, threat intelligence feeds, and automated checks to block malicious actors before they reach your systems.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ip-lookup-cyber-threat-detection-guide.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Watering Hole Attacks: Compromising the Sites Your Victims Already Trust]]></title>
      <link>https://ismalicious.com/posts/watering-hole-attacks-targeted-threats</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/watering-hole-attacks-targeted-threats</guid>
      <pubDate>Sun, 05 Apr 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Instead of spear-phishing individuals, APTs infect websites their targets routinely visit. Learn how watering hole campaigns work and how to harden web supply chains and detection.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/watering-hole-attacks.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Cognitive Hacking: The Battle for Your Mind]]></title>
      <link>https://ismalicious.com/posts/cognitive-hacking-battle-for-mind</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/cognitive-hacking-battle-for-mind</guid>
      <pubDate>Sun, 05 Apr 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Cognitive hacking targets the user, not the machine. It manipulates perception and decision-making through disinformation and psychological triggers.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/cognitive-hacking-battle-for-mind.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[SIM Swapping and Telecom Fraud: When Your Phone Number Is the Weakest Factor]]></title>
      <link>https://ismalicious.com/posts/sim-swapping-telecom-fraud-prevention</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/sim-swapping-telecom-fraud-prevention</guid>
      <pubDate>Sat, 04 Apr 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Attackers who control your mobile number can bypass SMS-based 2FA and reset passwords. Learn how SIM swap fraud works and how to reduce reliance on SMS one-time codes.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/sim-swapping-telecom-security.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Malvertising and Search Poisoning: Threats Hiding in Plain Sight]]></title>
      <link>https://ismalicious.com/posts/malvertising-search-poisoning-threats</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/malvertising-search-poisoning-threats</guid>
      <pubDate>Fri, 03 Apr 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Malicious ads and manipulated search results push users toward malware and phishing without email. Learn how malvertising and SEO poisoning work and how teams can reduce risk.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/malvertising-search-poisoning.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Living Off the Land (LOTL): Why “No Malware File” Still Means Breach]]></title>
      <link>https://ismalicious.com/posts/living-off-the-land-lotl-attacks</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/living-off-the-land-lotl-attacks</guid>
      <pubDate>Thu, 02 Apr 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Attackers increasingly abuse built-in OS binaries and scripts to avoid dropping traditional malware. Understand LOTL tradecraft and what to log, detect, and hunt for.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/lotl-living-off-the-land.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[The Splinternet: Navigating a Fragmented World Wide Web]]></title>
      <link>https://ismalicious.com/posts/splinternet-fragmented-world-wide-web</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/splinternet-fragmented-world-wide-web</guid>
      <pubDate>Thu, 02 Apr 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[The global internet is fracturing into regional, regulated intranets. We explore the rise of the "Splinternet" and its impact on cybersecurity and global business.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/splinternet-fragmented-world-wide-web.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[IDN and Homograph Phishing: When the Domain Looks Right But Is Wrong]]></title>
      <link>https://ismalicious.com/posts/idn-homograph-phishing-attacks</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/idn-homograph-phishing-attacks</guid>
      <pubDate>Wed, 01 Apr 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Internationalized domain names and look-alike characters let attackers spoof trusted brands in the address bar. Learn how homograph attacks work and how to defend users and SOC teams.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/idn-homograph-phishing.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[DNS Security: Poisoning, Hijacking, and Hardening That Actually Sticks]]></title>
      <link>https://ismalicious.com/posts/dns-security-hardening-guide</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/dns-security-hardening-guide</guid>
      <pubDate>Tue, 31 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[DNS is easy to ignore until it routes your users to malware. Learn how cache poisoning, hijacking, and secure DNS practices fit together.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/dns-security-hardening.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Incident Response Playbooks: Less PDF, More Rehearsal]]></title>
      <link>https://ismalicious.com/posts/incident-response-playbook-essentials</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/incident-response-playbook-essentials</guid>
      <pubDate>Mon, 30 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[A playbook nobody has run is fiction. Learn how to build IR phases, roles, and communications that work under pressure—and how to test them.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/incident-response-playbook-card.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Steganography: Hiding Secrets in Plain Sight]]></title>
      <link>https://ismalicious.com/posts/steganography-hiding-secrets-plain-sight</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/steganography-hiding-secrets-plain-sight</guid>
      <pubDate>Mon, 30 Mar 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Steganography hides data within innocent-looking files like images or audio. Learn how hackers use digital steganography to smuggle malware and steal data.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/steganography-hiding-secrets-plain-sight.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Identity Security in 2026: Passkeys, MFA, and Session Hijacking]]></title>
      <link>https://ismalicious.com/posts/identity-security-passkeys-mfa</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/identity-security-passkeys-mfa</guid>
      <pubDate>Sun, 29 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Passwords are still everywhere, but phishing-resistant credentials and tight session controls are the real front line. Here is a practical identity roadmap.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/identity-security-passkeys-mfa.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[SBOM and Supply Chain Security: What Security Teams Actually Need]]></title>
      <link>https://ismalicious.com/posts/sbom-supply-chain-security-basics</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/sbom-supply-chain-security-basics</guid>
      <pubDate>Sat, 28 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Software bills of materials are not paperwork for compliance alone. Learn how SBOMs reduce third-party risk and speed response when a dependency blows up.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/sbom-supply-chain-security.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Ransomware Resilience: Why Immutable Backups Still Matter in 2026]]></title>
      <link>https://ismalicious.com/posts/ransomware-resilience-immutable-backups</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ransomware-resilience-immutable-backups</guid>
      <pubDate>Fri, 27 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Attackers target backups first. Learn how immutable storage, the 3-2-1 rule, and recovery drills turn ransomware from a business-ending event into a manageable incident.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ransomware-resilience-backups.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Polymorphic Malware: The Shapeshifting Code]]></title>
      <link>https://ismalicious.com/posts/polymorphic-malware-shapeshifting-code</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/polymorphic-malware-shapeshifting-code</guid>
      <pubDate>Fri, 27 Mar 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Traditional antivirus relies on signatures, but polymorphic malware changes its code every time it replicates. Discover how this shapeshifting threat evades detection.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/polymorphic-malware-shapeshifting-code.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Synthetic Identity Fraud: The Ghost in the Machine]]></title>
      <link>https://ismalicious.com/posts/synthetic-identity-fraud-ghost-machine</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/synthetic-identity-fraud-ghost-machine</guid>
      <pubDate>Tue, 24 Mar 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Synthetic identity fraud is the fastest-growing financial crime. Learn how criminals combine real and fake data to create "ghost" identities and how to detect them.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/synthetic-identity-fraud-ghost-machine.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Preparing for Q-Day: Post-Quantum Cryptography Explained]]></title>
      <link>https://ismalicious.com/posts/post-quantum-cryptography-explained</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/post-quantum-cryptography-explained</guid>
      <pubDate>Mon, 23 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Quantum computers threaten to break the encryption that secures the internet. Discover what Post-Quantum Cryptography (PQC) is and how to prepare for the quantum future.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/post-quantum-cryptography.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Detecting the Enemy Within: Behavioral Analytics for Insider Threats]]></title>
      <link>https://ismalicious.com/posts/detecting-insider-threats-ueba</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/detecting-insider-threats-ueba</guid>
      <pubDate>Sun, 22 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Insider threats are notoriously difficult to detect because the actor already has legitimate access. Learn how UEBA can help spot the subtle signs of malicious intent.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/insider-threat-detection.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Botnets Explained: Is Your Computer Part of a Zombie Army?]]></title>
      <link>https://ismalicious.com/posts/botnets-explained-zombie-computer-army</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/botnets-explained-zombie-computer-army</guid>
      <pubDate>Sat, 21 Mar 2026 14:00:00 GMT</pubDate>
      <description><![CDATA[Botnets are networks of infected devices controlled by cybercriminals. Find out how they work, what they do, and how to check if your IP is involved.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/botnets-explained-zombie-computer-army.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[CSPM vs. CWPP: Decoding Cloud Security Acronyms]]></title>
      <link>https://ismalicious.com/posts/cspm-vs-cwpp-cloud-security</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/cspm-vs-cwpp-cloud-security</guid>
      <pubDate>Sat, 21 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Cloud security is full of acronyms. We break down the difference between CSPM and CWPP and why you likely need both.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/cloud-security-posture-dashboard.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[The Rise of API Attacks: Protecting the Modern Attack Surface]]></title>
      <link>https://ismalicious.com/posts/rise-of-api-attacks</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/rise-of-api-attacks</guid>
      <pubDate>Fri, 20 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[APIs are the connective tissue of the modern web, and they are under attack. Explore the unique vulnerabilities of APIs and how to secure them.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/api-security-gateway.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Implementing Zero Trust: Beyond the Buzzword]]></title>
      <link>https://ismalicious.com/posts/implementing-zero-trust</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/implementing-zero-trust</guid>
      <pubDate>Thu, 19 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Zero Trust is not a product; it is a philosophy. Learn how to move beyond the marketing hype and implement a true "Verify Explicitly" architecture.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/zero-trust-architecture-card.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[How Hackers Use "Typosquatting" to Trick You (and How to Spot It)]]></title>
      <link>https://ismalicious.com/posts/typosquatting-domain-spoofing-explained</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/typosquatting-domain-spoofing-explained</guid>
      <pubDate>Wed, 18 Mar 2026 13:00:00 GMT</pubDate>
      <description><![CDATA[Typosquatting relies on your fingers slipping. Learn how attackers register look-alike domains to steal your data and how to check URLs before you click.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/typosquatting-domain-spoofing-explained.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Automated Threat Classification using Machine Learning]]></title>
      <link>https://ismalicious.com/posts/automated-threat-classification-ml</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/automated-threat-classification-ml</guid>
      <pubDate>Wed, 18 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Machine Learning is transforming how we classify threats. Discover how AI models can analyze vast amounts of data to categorize attacks instantly.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ai-classifier-card.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Integrating MITRE ATT&CK with Real-Time Threat Feeds]]></title>
      <link>https://ismalicious.com/posts/integrating-mitre-attack-threat-feeds</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/integrating-mitre-attack-threat-feeds</guid>
      <pubDate>Tue, 17 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Bridge the gap between strategic frameworks and tactical defense. Learn how to map real-time threat feeds directly to the MITRE ATT&CK matrix.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/threat-feed-connector.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[The Evolution of Threat Intelligence in 2026]]></title>
      <link>https://ismalicious.com/posts/evolution-threat-intelligence-2026</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/evolution-threat-intelligence-2026</guid>
      <pubDate>Mon, 16 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Threat intelligence has moved beyond simple blocklists. Explore how AI, context, and real-time integration are shaping the future of cyber defense.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/global-threat-intel-card.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[The Dark Web vs. Deep Web: Where Do Cyber Threats Hide?]]></title>
      <link>https://ismalicious.com/posts/dark-web-vs-deep-web-cyber-threats</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/dark-web-vs-deep-web-cyber-threats</guid>
      <pubDate>Sun, 15 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Confused by the Dark Web and Deep Web? We explain the difference and where cyber threats like stolen credentials and malware actually live.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/dark-web-vs-deep-web-cyber-threats.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Mapping Your Defenses with MITRE ATT&CK]]></title>
      <link>https://ismalicious.com/posts/mapping-defenses-mitre-attack</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/mapping-defenses-mitre-attack</guid>
      <pubDate>Sun, 15 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[The MITRE ATT&CK framework is the gold standard for understanding adversary behavior. Discover how to map your defenses to specific techniques.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/mitre-attack-matrix.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Understanding Threat Classification: A Guide for Modern SOCs]]></title>
      <link>https://ismalicious.com/posts/understanding-threat-classification</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/understanding-threat-classification</guid>
      <pubDate>Sat, 14 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Effective threat classification is the cornerstone of a modern SOC. Learn how to categorize threats to reduce steps in incident response and reduce alert fatigue.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/threat-classification-card.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Is Your Email Leaking Data? How to Check Email Reputation]]></title>
      <link>https://ismalicious.com/posts/email-reputation-check-security-guide</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/email-reputation-check-security-guide</guid>
      <pubDate>Thu, 12 Mar 2026 11:00:00 GMT</pubDate>
      <description><![CDATA[Learn why email reputation matters for security and deliverability, and how to check if an email address is compromised or malicious.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/email-reputation-check-security-guide.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[What is a C2 Server? The Invisible Puppet Masters of the Internet]]></title>
      <link>https://ismalicious.com/posts/what-is-c2-command-and-control-server</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/what-is-c2-command-and-control-server</guid>
      <pubDate>Mon, 09 Mar 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Discover how hackers control infected devices using Command and Control (C2) servers and how to detect these hidden threats.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/what-is-c2-command-and-control-server.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Space Systems Cyber Threats: Securing the Final Frontier]]></title>
      <link>https://ismalicious.com/posts/space-systems-cyber-threats</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/space-systems-cyber-threats</guid>
      <pubDate>Fri, 06 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[As space becomes accessible, it becomes a target. From satellite hijacking to ground station jamming, we analyze the unique threats to orbital assets and how threat intelligence secures the new space race.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/space-systems-cyber-threats.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Command & Control Infrastructure: Detecting C2 Traffic Before It Is Too Late]]></title>
      <link>https://ismalicious.com/posts/malware-command-control-c2-detection</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/malware-command-control-c2-detection</guid>
      <pubDate>Wed, 04 Mar 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Once malware establishes a C2 channel, attackers have a persistent foothold in your environment. Understand how C2 infrastructure is built, how beacons evade detection, and how to identify malicious outbound connections using threat intelligence.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/malware-command-control-c2-detection.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Metaverse Security: Privacy and Identity in Virtual Worlds]]></title>
      <link>https://ismalicious.com/posts/metaverse-security-privacy-concerns</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/metaverse-security-privacy-concerns</guid>
      <pubDate>Tue, 03 Mar 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[As the enterprise Metaverse expands, so does the attack surface. From avatar impersonation to spatial data theft, we explore the new frontier of virtual threats and how IP reputation protects digital assets.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/metaverse-security-privacy-concerns.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Threat Intelligence Sharing: How Organizations Fight Back Together]]></title>
      <link>https://ismalicious.com/posts/threat-intelligence-sharing-isac-stix-taxii</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/threat-intelligence-sharing-isac-stix-taxii</guid>
      <pubDate>Tue, 03 Mar 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[No single organization can monitor every threat alone. Learn how information sharing communities (ISACs), standard protocols like STIX/TAXII, and commercial threat feeds form a collaborative shield against adversaries.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/threat-intelligence-sharing-isac-stix-taxii.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Detecting VPNs, Proxies & Tor: The Hidden Threat in Anonymized Traffic]]></title>
      <link>https://ismalicious.com/posts/vpn-proxy-tor-detection-fraud-prevention</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/vpn-proxy-tor-detection-fraud-prevention</guid>
      <pubDate>Mon, 02 Mar 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Legitimate users rarely hide behind Tor or anonymous proxies. Discover how attackers exploit anonymization layers to bypass defenses, and how IP intelligence helps you unmask high-risk traffic in real-time.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/vpn-proxy-tor-detection-fraud-prevention.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Credential Stuffing Attacks: Why Stolen Password Lists Keep Working]]></title>
      <link>https://ismalicious.com/posts/credential-stuffing-attacks-detection-prevention</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/credential-stuffing-attacks-detection-prevention</guid>
      <pubDate>Sun, 01 Mar 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Billions of breached username/password pairs are actively weaponized every day. Learn how credential stuffing differs from brute force, why it succeeds at scale, and how to stop it using IP reputation and anomaly detection.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/credential-stuffing-attacks-detection-prevention.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Drone Defense Security: Mitigating Unauthorized UAV Threats]]></title>
      <link>https://ismalicious.com/posts/drone-security-anti-drone-defense</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/drone-security-anti-drone-defense</guid>
      <pubDate>Sat, 28 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Unauthorized drones pose a threat to critical infrastructure, stadiums, and prisons. This post explores Counter-Unmanned Aircraft Systems (C-UAS), detection methods, and how strict "no-fly" zones are enforced electronically.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/drone-security-anti-drone-defense.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Building a Custom SOC Dashboard: Integrating Real-Time Threat Feeds]]></title>
      <link>https://ismalicious.com/posts/building-a-custom-soc-dashboard-with-threat-feeds</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/building-a-custom-soc-dashboard-with-threat-feeds</guid>
      <pubDate>Sat, 28 Feb 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Enhance your Security Operations Center visibility. A step-by-step guide to aggregating threat data, enriching logs, and building custom security dashboards using modern Threat Intelligence APIs.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/soc_dashboard_threat_feeds.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Why Your SaaS Needs to Block Disposable Email Addresses Immediately]]></title>
      <link>https://ismalicious.com/posts/why-you-need-to-block-disposable-email-addresses</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/why-you-need-to-block-disposable-email-addresses</guid>
      <pubDate>Fri, 27 Feb 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Disposable and temporary email addresses can enable fraud, spam, and abuse. Learn how disposable-domain detection supports account controls and sender reputation.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/block_disposable_email_addresses.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[How to Automate Malicious IP Blocking with Threat Intelligence APIs]]></title>
      <link>https://ismalicious.com/posts/how-to-automate-malicious-ip-blocking-with-threat-apis</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/how-to-automate-malicious-ip-blocking-with-threat-apis</guid>
      <pubDate>Thu, 26 Feb 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Stop relying on static blocklists. Learn how to integrate real-time threat intelligence APIs into your firewalls and application logic to automatically detect and block malicious IP addresses before they strike.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/how_to_automate_malicious_ip_blocking.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Smart City Security: Protecting Critical Infrastructure from Cyber Attack]]></title>
      <link>https://ismalicious.com/posts/smart-city-infrastructure-security-gaps</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/smart-city-infrastructure-security-gaps</guid>
      <pubDate>Wed, 25 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Connected traffic lights, sensors, and water systems create a vast attack surface in modern cities. We examine the vulnerabilities of smart city infrastructure and the cascading failures a cyberattack could cause.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/smart-city-infrastructure-security-gaps.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Domain Reputation Scoring: The First Line of Defense Against Phishing]]></title>
      <link>https://ismalicious.com/posts/domain-reputation-scoring-preventing-phishing-attacks</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/domain-reputation-scoring-preventing-phishing-attacks</guid>
      <pubDate>Wed, 25 Feb 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Not all domains are created equal. Discover how real-time domain reputation scoring helps organizations proactively identify and block phishing infrastructure, fake websites, and parked domains used by cybercriminals.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/domain_reputation_scoring_phishing.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Biometric Spoofing: Defeating Authentication in an AI World]]></title>
      <link>https://ismalicious.com/posts/biometric-authentication-spoofing-attacks</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/biometric-authentication-spoofing-attacks</guid>
      <pubDate>Sun, 22 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Are fingerprints and facial recognition truly secure? We explore the techniques attackers use to spoof biometric sensors, from 3D-printed faces to synthetic voice cloning.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/biometric-authentication-spoofing-attacks.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Industrial Control Systems (ICS) Malware Trends: The OT/IT Convergence Risk]]></title>
      <link>https://ismalicious.com/posts/industrial-control-systems-malware-trends</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/industrial-control-systems-malware-trends</guid>
      <pubDate>Thu, 19 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Operational Technology (OT) environments are under siege. We analyze the latest ICS-specific malware strains targeting PLCs and SCADA systems, and offer defense strategies for critical infrastructure.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/industrial-control-systems-malware-trends.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Satellite Internet Security: Vulnerabilities in Low Earth Orbit (LEO)]]></title>
      <link>https://ismalicious.com/posts/satellite-internet-security-vulnerabilities</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/satellite-internet-security-vulnerabilities</guid>
      <pubDate>Mon, 16 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Attack surfaces expand vertically as LEO constellations integrate with enterprise networks. This post details orbital jamming, ground station spoofing, and the lack of encryption standards in commercial satellite systems for security engineers.]]></description>
      <author>contact@ismalicious.com (IsMalicious Research Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/satellite-internet-security-vulnerabilities.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Quantum Computing Threats to Encryption: A 2026 Perspective]]></title>
      <link>https://ismalicious.com/posts/quantum-computing-encryption-threats</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/quantum-computing-encryption-threats</guid>
      <pubDate>Sun, 15 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[As quantum supremacy nears, the threat to RSA and ECC encryption becomes existential. This analysis explores Post-Quantum Cryptography (PQC) migration strategies for security teams and the immediate risks of Harvest Now, Decrypt Later (HNDL) attacks.]]></description>
      <author>contact@ismalicious.com (IsMalicious Research Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/quantum-computing-encryption-threats.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Penetration Testing vs. Vulnerability Scanning: What's the Difference?]]></title>
      <link>https://ismalicious.com/posts/penetration-testing-vulnerability-scanning-differences</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/penetration-testing-vulnerability-scanning-differences</guid>
      <pubDate>Sat, 14 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Often confused, these two security practices serve very different purposes. Discover when to use automated scanning and when to invest in a manual penetration test.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/penetration-testing-vulnerability-scanning-differences.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[VirusTotal Alternative for IP and Domain Reputation APIs]]></title>
      <link>https://ismalicious.com/posts/ismalicious-vs-virustotal-threat-intelligence-alternative</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ismalicious-vs-virustotal-threat-intelligence-alternative</guid>
      <pubDate>Sat, 14 Feb 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Compare VirusTotal and isMalicious for IP, domain, URL, and file-hash reputation workflows. See when VirusTotal is better for malware analysis and when an API-first alternative fits SOC automation.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ismalicious-vs-virustotal-threat-intelligence-alternative.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Building an Effective Incident Response Plan: A Step-by-Step Guide]]></title>
      <link>https://ismalicious.com/posts/incident-response-plan-cybersecurity-steps</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/incident-response-plan-cybersecurity-steps</guid>
      <pubDate>Fri, 13 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[When a cyberattack strikes, panic is your enemy. Learn how to create and test an incident response plan to ensure your team knows exactly what to do.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/incident-response-plan-cybersecurity-steps.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[AbuseIPDB Alternative: IP Reputation, Domain, and URL Coverage]]></title>
      <link>https://ismalicious.com/posts/ismalicious-vs-abuseipdb-ip-domain-reputation</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ismalicious-vs-abuseipdb-ip-domain-reputation</guid>
      <pubDate>Fri, 13 Feb 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[AbuseIPDB is strong for IP reputation, but it does not cover domains and URLs. Compare AbuseIPDB and isMalicious across coverage, API features, pricing, enrichment, and monitoring.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ismalicious-vs-abuseipdb-ip-domain-reputation.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Cyber Threats 101: Understanding Online Dangers]]></title>
      <link>https://ismalicious.com/posts/cyber-threats-101-understanding-online-dangers</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/cyber-threats-101-understanding-online-dangers</guid>
      <pubDate>Thu, 12 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[A beginner's guide to common cyber threats. Understand malware, viruses, and hackers, and learn how to protect yourself online.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/cyber-threats-101-understanding-online-dangers.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[IP Reputation Check: How to Tell If an IP Address Is Malicious]]></title>
      <link>https://ismalicious.com/posts/how-to-check-ip-reputation-safe</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/how-to-check-ip-reputation-safe</guid>
      <pubDate>Thu, 12 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Learn how to check IP reputation safely: what signals matter, how SOC teams triage malicious IPs, and when to use reputation APIs, blocklists, ASN data, and geolocation.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/how-to-check-ip-reputation-safe.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[IAM Best Practices: Securing Identity and Access]]></title>
      <link>https://ismalicious.com/posts/iam-identity-access-management-best-practices</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/iam-identity-access-management-best-practices</guid>
      <pubDate>Thu, 12 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Identity is the new perimeter. Discover specific best practices for Identity and Access Management (IAM) to prevent unauthorized access and privilege escalation.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/iam-identity-access-management-best-practices.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Malicious Domains vs. Safe Sites: How to Tell the Difference]]></title>
      <link>https://ismalicious.com/posts/malicious-domains-vs-safe-sites-difference</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/malicious-domains-vs-safe-sites-difference</guid>
      <pubDate>Thu, 12 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Can you tell a malicious domain from a safe one? Learn the key differences and tools to verify website safety instantly.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/malicious-domains-vs-safe-sites-difference.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Phishing Explained: How to Check a Domain for Threats]]></title>
      <link>https://ismalicious.com/posts/phishing-explained-check-domain-threats</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/phishing-explained-check-domain-threats</guid>
      <pubDate>Thu, 12 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[What is phishing? Learn how to spot fake websites and check domains for threats before you enter your personal information.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/phishing-explained-check-domain-threats.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Safe Browsing Guide: How to Check URLs for Hidden Threats]]></title>
      <link>https://ismalicious.com/posts/safe-browsing-guide-check-urls-hidden-threats</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/safe-browsing-guide-check-urls-hidden-threats</guid>
      <pubDate>Thu, 12 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Don't click that link yet! Learn how to check URLs for hidden threats and ensure safe browsing on any device.]]></description>
      <author>contact@ismalicious.com (IsMalicious Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/safe-browsing-guide-check-urls-hidden-threats.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[AlienVault OTX Alternative: API-First Threat Intelligence Without Vendor Lock-In]]></title>
      <link>https://ismalicious.com/posts/ismalicious-vs-alienvault-otx-threat-intelligence</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ismalicious-vs-alienvault-otx-threat-intelligence</guid>
      <pubDate>Thu, 12 Feb 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[AlienVault OTX is a useful community threat intelligence platform. Compare OTX and isMalicious for API access, IOC enrichment, integrations, monitoring, and vendor independence.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ismalicious-vs-alienvault-otx-threat-intelligence.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Healthcare IoT Security: The Critical Risk to Patient Safety]]></title>
      <link>https://ismalicious.com/posts/healthcare-iot-security-critical-risks</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/healthcare-iot-security-critical-risks</guid>
      <pubDate>Wed, 11 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Connected medical devices (IoMT) introduce life-critical vulnerabilities into hospital networks. From MRI machines to insulin pumps, this guide analyzes the unique challenges of securing legacy firmware and unpatched operating systems.]]></description>
      <author>contact@ismalicious.com (IsMalicious Research Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/healthcare-iot-security-critical-risks.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[isMalicious vs Shodan: Threat Reputation vs Attack Surface Discovery]]></title>
      <link>https://ismalicious.com/posts/ismalicious-vs-shodan-threat-reputation-check</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ismalicious-vs-shodan-threat-reputation-check</guid>
      <pubDate>Wed, 11 Feb 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Shodan maps internet-connected devices. isMalicious checks if IPs and domains are malicious. Compare these complementary threat intelligence tools across features, use cases, and pricing to choose the right one.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ismalicious-vs-shodan-threat-reputation-check.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[The Deepfake Threat: Protecting Enterprise Security in the Era of AI]]></title>
      <link>https://ismalicious.com/posts/deepfake-threats-enterprise-security</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/deepfake-threats-enterprise-security</guid>
      <pubDate>Tue, 10 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[AI-generated video and audio are becoming indistinguishable from reality. Explore the rising threat of deepfakes to enterprise security and how to defend against synthetic media attacks.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/deepfake-threats-enterprise-security.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Anatomy of Phishing Infrastructure: How Attackers Build Their Trap]]></title>
      <link>https://ismalicious.com/posts/anatomy-phishing-infrastructure</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/anatomy-phishing-infrastructure</guid>
      <pubDate>Tue, 10 Feb 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Peel back the layers of a modern phishing attack. From spoofed domains to SSL certificates, understand the infrastructure attackers use and how to detect it.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/anatomy-phishing-infrastructure.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Automating Threat Intelligence: Speed is Your Best Defense]]></title>
      <link>https://ismalicious.com/posts/automating-threat-intelligence</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/automating-threat-intelligence</guid>
      <pubDate>Tue, 10 Feb 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Manual analysis cannot keep up with machine-speed attacks. Learn how to automate threat data ingestion and response to block threats in milliseconds, not minutes.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/automating-threat-intelligence.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Contextual Threat Intelligence: Moving Beyond Static Blacklists]]></title>
      <link>https://ismalicious.com/posts/contextual-threat-intelligence</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/contextual-threat-intelligence</guid>
      <pubDate>Tue, 10 Feb 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Static IP blacklists are no longer enough. Discover the power of contextual threat intelligence—connecting IPs, domains, and behavior to see the full attack picture.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/contextual-threat-intelligence.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Domain Age as a Risk Indicator: Why "New" Often Means "Danger"]]></title>
      <link>https://ismalicious.com/posts/domain-age-risk-indicator</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/domain-age-risk-indicator</guid>
      <pubDate>Tue, 10 Feb 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Newly registered domains (NRDs) are a favorite tool for threat actors. Learn why domain age is a critical signal in your threat intelligence stack and how to use it effectively.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/domain-age-risk-indicator.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[The Hidden Cost of Bad IP Reputation: Why Ignoring It Drains Your Budget]]></title>
      <link>https://ismalicious.com/posts/hidden-cost-bad-ip-reputation</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/hidden-cost-bad-ip-reputation</guid>
      <pubDate>Tue, 10 Feb 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Discover how poor IP reputation impacts more than just security—it affects email deliverability, ad spend, and customer trust. Learn why proactive monitoring is a financial necessity.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/hidden-cost-bad-ip-reputation.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Best Threat Intelligence API Comparison (2026): Pricing, Limits, and Use Cases]]></title>
      <link>https://ismalicious.com/posts/best-threat-intelligence-api-comparison-2026</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/best-threat-intelligence-api-comparison-2026</guid>
      <pubDate>Tue, 10 Feb 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Compare the best threat intelligence APIs in 2026 — isMalicious, VirusTotal, AbuseIPDB, AlienVault OTX, Shodan, and URLhaus. See pricing, free tiers, rate limits, API coverage, and best-fit use cases.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/best-threat-intelligence-api-comparison-2026.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Navigating Data Privacy: GDPR, CCPA, and Cybersecurity Compliance]]></title>
      <link>https://ismalicious.com/posts/data-privacy-regulations-cybersecurity-compliance</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/data-privacy-regulations-cybersecurity-compliance</guid>
      <pubDate>Mon, 09 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[Privacy regulations are reshaping cybersecurity strategies. Understand the key requirements of GDPR and CCPA and how to align your security program with privacy compliance.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/data-privacy-regulations-cybersecurity-compliance.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Automotive Cybersecurity: Hacking Connected Cars in 2026]]></title>
      <link>https://ismalicious.com/posts/automotive-cybersecurity-connected-cars</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/automotive-cybersecurity-connected-cars</guid>
      <pubDate>Sun, 08 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[With cars becoming data centers on wheels, the attack surface expands into the powertrain, infotainment, and OTA update systems. We analyze CAN bus injection vulnerabilities and the security risks of V2X communication protocols.]]></description>
      <author>contact@ismalicious.com (IsMalicious Research Team)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/automotive-cybersecurity-connected-cars.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[API Security Best Practices: Defending Against the OWASP Top 10]]></title>
      <link>https://ismalicious.com/posts/api-security-best-practices-owasp</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/api-security-best-practices-owasp</guid>
      <pubDate>Sat, 07 Feb 2026 12:00:00 GMT</pubDate>
      <description><![CDATA[APIs are the backbone of modern applications but are often left vulnerable. Learn how to secure your APIs against common attacks like broken object level authorization and injection.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/api-security-best-practices-owasp.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Threat Hunting: Proactive Security Detection Beyond Automated Alerts]]></title>
      <link>https://ismalicious.com/posts/threat-hunting-proactive-security-detection</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/threat-hunting-proactive-security-detection</guid>
      <pubDate>Fri, 06 Feb 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Waiting for alerts means waiting for attacks to succeed. Learn how proactive threat hunting helps security teams discover hidden threats, improve defenses, and stay ahead of sophisticated adversaries.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/threat-hunting-proactive-security-detection.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Shadow IT Risk Management: Securing Unauthorized Applications and Services]]></title>
      <link>https://ismalicious.com/posts/shadow-it-risk-management-unauthorized-apps</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/shadow-it-risk-management-unauthorized-apps</guid>
      <pubDate>Thu, 05 Feb 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Employees use unauthorized apps and services that IT cannot see. Learn how to discover shadow IT, assess risks from unsanctioned tools, and implement governance without stifling innovation.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/shadow-it-risk-management-unauthorized-apps.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[DevSecOps: Integrating Security into the CI/CD Pipeline]]></title>
      <link>https://ismalicious.com/posts/devsecops-pipeline-security-integration</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/devsecops-pipeline-security-integration</guid>
      <pubDate>Thu, 05 Feb 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Security should not be an afterthought. Learn how to implement DevSecOps to automate security testing and vulnerability scanning within your development workflow.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/devsecops-pipeline-security-integration.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Lateral Movement Detection: Stopping Attackers from Spreading Through Your Network]]></title>
      <link>https://ismalicious.com/posts/lateral-movement-detection-network-security</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/lateral-movement-detection-network-security</guid>
      <pubDate>Wed, 04 Feb 2026 11:00:00 GMT</pubDate>
      <description><![CDATA[After initial compromise, attackers move laterally to reach valuable targets. Learn how to detect lateral movement techniques, implement segmentation, and stop attackers before they reach critical assets.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/lateral-movement-detection-network-security.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[IoT Security Threats: Protecting Your Smart Devices from Cyberattacks]]></title>
      <link>https://ismalicious.com/posts/iot-security-threats-smart-device-protection</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/iot-security-threats-smart-device-protection</guid>
      <pubDate>Tue, 03 Feb 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Internet of Things devices are increasingly targeted by cybercriminals. Learn how to identify IoT vulnerabilities, secure smart devices, and protect your network from IoT-based attacks.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/iot-security-threats-smart-device-protection.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Insider Threat Detection: Identifying and Managing Employee Security Risks]]></title>
      <link>https://ismalicious.com/posts/insider-threat-detection-employee-risk-management</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/insider-threat-detection-employee-risk-management</guid>
      <pubDate>Mon, 02 Feb 2026 14:00:00 GMT</pubDate>
      <description><![CDATA[Insider threats pose unique challenges to organizational security. Learn how to detect malicious insiders, prevent data leakage, and build an effective insider threat program.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/insider-threat-detection-employee-risk-management.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Email Authentication: Implementing DMARC, SPF, and DKIM for Email Security]]></title>
      <link>https://ismalicious.com/posts/email-authentication-dmarc-spf-dkim-security</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/email-authentication-dmarc-spf-dkim-security</guid>
      <pubDate>Sun, 01 Feb 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Email spoofing enables phishing and business email compromise attacks. Learn how DMARC, SPF, and DKIM authentication protocols protect your domain from being impersonated in cyberattacks.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/email-authentication-dmarc-spf-dkim-security.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[What is EDR? A Guide to Endpoint Detection and Response]]></title>
      <link>https://ismalicious.com/posts/edr-endpoint-detection-response-guide</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/edr-endpoint-detection-response-guide</guid>
      <pubDate>Sun, 01 Feb 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Traditional antivirus is no longer enough. Explore why Endpoint Detection and Response (EDR) is essential for modern cybersecurity and how it differs from legacy solutions.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/edr-endpoint-detection-response-guide.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[DDoS Attack Prevention: Strategies to Protect Your Online Services]]></title>
      <link>https://ismalicious.com/posts/ddos-attack-prevention-mitigation-strategies</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ddos-attack-prevention-mitigation-strategies</guid>
      <pubDate>Sat, 31 Jan 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Distributed Denial of Service attacks can cripple your online presence. Learn how to identify DDoS threats, implement effective mitigation strategies, and maintain service availability during attacks.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ddos-attack-prevention-mitigation-strategies.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Data Exfiltration Prevention: DLP Strategies to Protect Sensitive Information]]></title>
      <link>https://ismalicious.com/posts/data-exfiltration-prevention-dlp-strategies</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/data-exfiltration-prevention-dlp-strategies</guid>
      <pubDate>Fri, 30 Jan 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Data theft can occur through countless channels. Learn how to detect and prevent data exfiltration, implement effective DLP strategies, and protect your organization most valuable assets from leaving your control.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/data-exfiltration-prevention-dlp-strategies.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Dark Web Monitoring: Protecting Your Brand and Detecting Leaked Data]]></title>
      <link>https://ismalicious.com/posts/dark-web-monitoring-brand-protection-leaked-data</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/dark-web-monitoring-brand-protection-leaked-data</guid>
      <pubDate>Thu, 29 Jan 2026 11:00:00 GMT</pubDate>
      <description><![CDATA[Stolen credentials and sensitive data often surface on the dark web before being exploited. Learn how dark web monitoring helps detect breaches early and protect your organization from cybercriminal activities.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/dark-web-monitoring-brand-protection-leaked-data.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Container and Kubernetes Security: Protecting Cloud-Native Applications]]></title>
      <link>https://ismalicious.com/posts/container-kubernetes-security-cloud-native-threats</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/container-kubernetes-security-cloud-native-threats</guid>
      <pubDate>Fri, 23 Jan 2026 11:00:00 GMT</pubDate>
      <description><![CDATA[Container environments introduce unique security challenges. Learn how to secure Docker containers, Kubernetes clusters, and cloud-native applications from emerging threats and misconfigurations.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/container-kubernetes-security-cloud-native-threats.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Beyond Phishing: Modern Social Engineering Tactics]]></title>
      <link>https://ismalicious.com/posts/social-engineering-tactics-prevention</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/social-engineering-tactics-prevention</guid>
      <pubDate>Tue, 20 Jan 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Social engineering has evolved beyond simple phishing emails. Discover the latest tactics used by attackers, including vishing, smishing, and pigmenting, and how to spot them.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/social-engineering-tactics-prevention.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Mobile App Security: Protecting iOS and Android Applications]]></title>
      <link>https://ismalicious.com/posts/mobile-app-security-threats-protection</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/mobile-app-security-threats-protection</guid>
      <pubDate>Thu, 15 Jan 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Mobile applications are prime targets for cybercriminals. Learn about common mobile security threats and how to protect your iOS and Android apps from reverse engineering and malware.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/mobile-app-security-threats-protection.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Infostealer Malware: How Credentials End Up on the Dark Web]]></title>
      <link>https://ismalicious.com/posts/infostealer-malware-credential-theft-dark-web</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/infostealer-malware-credential-theft-dark-web</guid>
      <pubDate>Sun, 11 Jan 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Infostealers harvest credentials and sensitive data from infected systems, fueling a massive underground economy. Learn how these threats operate, how to detect them, and how to protect your organization from credential theft.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/infostealer-malware-credential-theft-dark-web.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[CTF and Bug Bounty Toolbox: Essential OSINT for Security Research]]></title>
      <link>https://ismalicious.com/posts/ctf-bug-bounty-osint-toolbox-security-research</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ctf-bug-bounty-osint-toolbox-security-research</guid>
      <pubDate>Sat, 10 Jan 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Master the reconnaissance phase of CTFs and bug bounties with these essential OSINT tools. From IP investigation to domain intelligence, build the toolbox that helps you find what others miss.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ctf-bug-bounty-osint-toolbox-security-research.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Threat Intelligence for Small Business: Enterprise Security on a Budget]]></title>
      <link>https://ismalicious.com/posts/small-business-threat-intelligence-affordable-security</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/small-business-threat-intelligence-affordable-security</guid>
      <pubDate>Fri, 09 Jan 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Small businesses face the same cyber threats as enterprises but with a fraction of the resources. Learn how affordable threat intelligence and smart security strategies can level the playing field.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/small-business-threat-intelligence-affordable-security.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Cryptocurrency and Web3 Security Threats]]></title>
      <link>https://ismalicious.com/posts/cryptocurrency-web3-security-threats-scam-detection</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/cryptocurrency-web3-security-threats-scam-detection</guid>
      <pubDate>Thu, 08 Jan 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[The Web3 ecosystem faces unique threats from wallet drainers to rug pulls. Learn how to identify malicious crypto domains, detect scams, and protect yourself and your users from blockchain-based fraud.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/cryptocurrency-web3-security-threats-scam-detection.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Cloud Security Threats: Protecting Multi-Cloud Infrastructure]]></title>
      <link>https://ismalicious.com/posts/cloud-security-threats-multi-cloud-protection</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/cloud-security-threats-multi-cloud-protection</guid>
      <pubDate>Wed, 07 Jan 2026 11:00:00 GMT</pubDate>
      <description><![CDATA[Cloud environments face unique security challenges from misconfigurations to cryptomining attacks. Learn how to monitor cloud assets, detect threats, and protect your multi-cloud infrastructure with threat intelligence.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/cloud-security-threats-multi-cloud-protection.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Bot Detection and Account Takeover Prevention]]></title>
      <link>https://ismalicious.com/posts/bot-detection-account-takeover-prevention</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/bot-detection-account-takeover-prevention</guid>
      <pubDate>Tue, 06 Jan 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Automated bots drive credential stuffing, account takeover, and fraud at massive scale. Learn how IP reputation and threat intelligence can identify and block malicious automation before it compromises your users.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/bot-detection-account-takeover-prevention.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[DNS Security and Threat Intelligence: Blocking Malware at the Resolver]]></title>
      <link>https://ismalicious.com/posts/dns-security-threat-intelligence-blocklist</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/dns-security-threat-intelligence-blocklist</guid>
      <pubDate>Mon, 05 Jan 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[DNS is the first line of defense against malware and phishing. Learn how protective DNS and threat intelligence blocklists can stop threats before they reach your network, with integration guides for Pi-hole, AdGuard, and enterprise DNS.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/dns-security-threat-intelligence-blocklist.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Business Email Compromise: The Multi-Billion Dollar Threat]]></title>
      <link>https://ismalicious.com/posts/business-email-compromise-bec-detection-prevention</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/business-email-compromise-bec-detection-prevention</guid>
      <pubDate>Sun, 04 Jan 2026 11:00:00 GMT</pubDate>
      <description><![CDATA[BEC attacks cost organizations billions annually through sophisticated impersonation and social engineering. Learn how domain spoofing detection and threat intelligence can protect your organization from CEO fraud and invoice scams.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/business-email-compromise-bec-detection-prevention.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Supply Chain Attack Detection: Lessons from SolarWinds to MOVEit]]></title>
      <link>https://ismalicious.com/posts/supply-chain-attack-detection-third-party-risk</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/supply-chain-attack-detection-third-party-risk</guid>
      <pubDate>Sat, 03 Jan 2026 10:00:00 GMT</pubDate>
      <description><![CDATA[Supply chain attacks have become the weapon of choice for sophisticated threat actors. Learn how to detect compromised vendors, monitor third-party risk, and protect your organization before your suppliers become your vulnerability.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/supply-chain-attack-detection-third-party-risk.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[AI-enabled Cyberattacks: How Threat Actors Use Machine Learning]]></title>
      <link>https://ismalicious.com/posts/ai-powered-cyberattacks-machine-learning-threats</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ai-powered-cyberattacks-machine-learning-threats</guid>
      <pubDate>Fri, 02 Jan 2026 09:00:00 GMT</pubDate>
      <description><![CDATA[Cybercriminals are weaponizing artificial intelligence to launch sophisticated attacks at unprecedented scale. Learn how AI-enabled threats work and how threat intelligence can help you defend against them.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/AI-enabled-cyberattacks-machine-learning-threats.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Enhancing Zero Trust with Malicious IP and Domain Reputation Analysis]]></title>
      <link>https://ismalicious.com/posts/enhancing-zero-trust-malicious-ip-domain-reputation</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/enhancing-zero-trust-malicious-ip-domain-reputation</guid>
      <pubDate>Sun, 07 Dec 2025 09:00:00 GMT</pubDate>
      <description><![CDATA[Zero Trust security demands constant verification. Discover how integrating malicious IP and domain reputation checks strengthens your threat intelligence and prevents phishing.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/enhancing-zero-trust-malicious-ip-domain-reputation.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[How to Detect Malicious Domains and IPs: A Reputation Guide]]></title>
      <link>https://ismalicious.com/posts/how-to-detect-malicious-domains-ips-reputation-guide</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/how-to-detect-malicious-domains-ips-reputation-guide</guid>
      <pubDate>Sat, 06 Dec 2025 09:00:00 GMT</pubDate>
      <description><![CDATA[A practical guide on detecting malicious domains and IPs using reputation data. Learn to spot phishing threats and secure your applications with real-time threat intelligence.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/how-to-detect-malicious-domains-ips-reputation-guide.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Proactive Threat Defense: Monitoring Malicious IP and Domain Reputation]]></title>
      <link>https://ismalicious.com/posts/proactive-threat-defense-malicious-ip-domain</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/proactive-threat-defense-malicious-ip-domain</guid>
      <pubDate>Fri, 05 Dec 2025 09:00:00 GMT</pubDate>
      <description><![CDATA[Shift from reactive to proactive cybersecurity. Learn how monitoring malicious IP and domain reputation helps identifying threats early and stopping phishing attacks before they succeed.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/proactive-threat-defense-malicious-ip-domain.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Why Checking Malicious Domain and IP Reputation is Critical for Threat Prevention]]></title>
      <link>https://ismalicious.com/posts/malicious-domain-ip-reputation-threat-phishing</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/malicious-domain-ip-reputation-threat-phishing</guid>
      <pubDate>Thu, 04 Dec 2025 09:00:00 GMT</pubDate>
      <description><![CDATA[Learn why monitoring domain and IP reputation is essential for cybersecurity. Discover how to detect malicious threats, prevent phishing attacks, and use threat intelligence to protect your infrastructure.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/malicious-domain-ip-reputation-threat-phishing.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Ransomware Detection and Prevention: A Comprehensive Defense Strategy]]></title>
      <link>https://ismalicious.com/posts/ransomware-detection-prevention-guide</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ransomware-detection-prevention-guide</guid>
      <pubDate>Fri, 03 Oct 2025 11:00:00 GMT</pubDate>
      <description><![CDATA[Learn how to detect ransomware threats before they encrypt your data. Explore proven prevention techniques, early warning signs, and how threat intelligence can protect your organization from costly ransomware attacks.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ransomware-detection-prevention-guide.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[SSL Certificate Security: Identifying Vulnerabilities and Misconfigurations]]></title>
      <link>https://ismalicious.com/posts/ssl-certificate-security-vulnerabilities</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ssl-certificate-security-vulnerabilities</guid>
      <pubDate>Thu, 02 Oct 2025 13:00:00 GMT</pubDate>
      <description><![CDATA[SSL certificates are crucial for secure web communications, but misconfigurations and vulnerabilities can expose your users to serious risks. Learn how to identify, assess, and fix SSL certificate security issues before attackers exploit them.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ssl-certificate-security-vulnerabilities.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Zero-Day Vulnerabilities: Detection, Response, and Threat Intelligence]]></title>
      <link>https://ismalicious.com/posts/zero-day-vulnerability-threat-response</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/zero-day-vulnerability-threat-response</guid>
      <pubDate>Wed, 01 Oct 2025 17:00:00 GMT</pubDate>
      <description><![CDATA[Zero-day vulnerabilities pose one of the greatest cybersecurity challenges. Learn how to detect exploitation attempts, respond effectively, and use threat intelligence to protect your organization from unknown threats.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/zero-day-vulnerability-threat-response.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Building a Modern SOC with Threat Intelligence: A Practical Guide]]></title>
      <link>https://ismalicious.com/posts/building-soc-threat-intelligence</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/building-soc-threat-intelligence</guid>
      <pubDate>Mon, 15 Sep 2025 15:00:00 GMT</pubDate>
      <description><![CDATA[Learn how to build an effective Security Operations Center (SOC) powered by threat intelligence. Discover essential tools, processes, and best practices for detecting, analyzing, and responding to cyber threats in real-time.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/building-soc-threat-intelligence.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[API Integration for Threat Intelligence: Automate Your Security]]></title>
      <link>https://ismalicious.com/posts/api-integration-threat-intelligence</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/api-integration-threat-intelligence</guid>
      <pubDate>Sat, 13 Sep 2025 09:00:00 GMT</pubDate>
      <description><![CDATA[Discover how integrating threat intelligence APIs can transform your security infrastructure. Learn best practices for automated threat detection, continuous monitoring, and documented integration with your existing systems.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/api-integration-threat-intelligence.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Harnessing Public Sources for IP and Domain Maliciousness Detection]]></title>
      <link>https://ismalicious.com/posts/public-ip-domain-threat-intelligence</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/public-ip-domain-threat-intelligence</guid>
      <pubDate>Thu, 12 Dec 2024 15:00:00 GMT</pubDate>
      <description><![CDATA[Learn how public sources like IP sets and blocklists can enhance your cybersecurity defenses by providing specific findings into IP and domain maliciousness. Discover how to integrate these resources into WAF solutions like Fortinet and Imperva.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/public-ip-domain-threat-intelligence.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Detecting malicious domain names: a guide to safer browsing]]></title>
      <link>https://ismalicious.com/posts/domain-maliciousness-threat-protection</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/domain-maliciousness-threat-protection</guid>
      <pubDate>Thu, 12 Dec 2024 12:00:00 GMT</pubDate>
      <description><![CDATA[Explore the world of domain name maliciousness and learn how to identify, assess, and protect against harmful domains. Discover tools and techniques to safeguard your online presence.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/domain-maliciousness-threat-protection.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Understanding IP Maliciousness: A new way to protect your network.]]></title>
      <link>https://ismalicious.com/posts/ip-maliciousness-cybersecurity-protection</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/ip-maliciousness-cybersecurity-protection</guid>
      <pubDate>Wed, 11 Dec 2024 10:00:00 GMT</pubDate>
      <description><![CDATA[Discover how assessing the potential maliciousness of an IP can safeguard your systems against cyber threats. Learn about the indicators, methods, and tools that help identify malicious IPs and take proactive measures.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/ip-maliciousness-cybersecurity-protection.png" type="image/png" />
    </item>
    <item>
      <title><![CDATA[Understanding phishing and how to stay protected]]></title>
      <link>https://ismalicious.com/posts/phishing-domain-fake-threat</link>
      <guid isPermaLink="true">https://ismalicious.com/posts/phishing-domain-fake-threat</guid>
      <pubDate>Tue, 10 Dec 2024 14:00:00 GMT</pubDate>
      <description><![CDATA[Phishing is a growing cybersecurity threat that tricks individuals into providing sensitive information. Learn how to identify phishing attempts and implement strategies to stay safe online.]]></description>
      <author>contact@ismalicious.com (Jean-Vincent QUILICHINI)</author>
      <enclosure url="https://ismalicious.com/medias/blog/posts/phishing-domain-fake-threat.png" type="image/png" />
    </item>
  </channel>
</rss>