Agentless Threat Detection: Illuminating Cloud Blind Spots

This report describes how agentless workload detection uncovered active exploitation across virtual appliances and cloud workloads, including critical RCEs in FortiGate (CVE-2026-24858), PAN-OS (CVE-2026-0257 / CVE-2026-0300), BeyondTrust (CVE-2026-1731), memory-leak (MongoBleed CVE-2025-14847), a WordPress wp2shell webshell, Redis abuse, and malicious npm package activity—highlighting large-scale credential stuffing, configuration theft enabling lateral movement, and real-world exploitation patterns detected and alerted to customers.