Trusted Automated Exchange of Intelligence Information
TAXII is the transport protocol that delivers threat intelligence, usually formatted as STIX, between servers and clients. Organizations subscribe to TAXII feeds to automatically pull fresh indicators into their security tools. It matters because automated sharing means defenses update in near real time instead of waiting for someone to email a spreadsheet.