STIX/TAXII security intelligence sharing
Companies normally use a variety of security products in their infrastructure wether on premise or in the cloud. Now I see a lot of security companies performing integration with STIX/TAXII using API to share their intelligence feeds (with active subscriptions). I cannot find anyhing other then the following discussion with TAG Cyber. https://www.f5.com/company/blog/sdn-enablement-of-isp-threat-sharing Personally I strongly believe this is the way to move forward to have multiple security intel sources and share these with different products leading to a alligned security posture. Is there any update on this development?