Intercepting the ToolShell Zero-Day Before the Headlines
How Unit 42's threat hunters warned customers about Tool Shell before the headlines broke. Discover the power of proactive hunting for zero-day threats.
Security Operations
Security Operations
Must-Read Articles
Product Features
Use-Cases
News and Events
Partner Integrations
Playbook of the Week
What the Alien Franchise Taught Me About Cybersecurity
Ripley's tactics from Alien are your blueprint for SOC transformation to defeat modern threats with AI-driven security, automation and SIEM modernization.
The Detection Nightmare: Years Pass Without a Move
Patient adversaries hide for months using persistence techniques. Learn how Cortex XDR detects dormant backdoors without overwhelming SOC teams with alerts.
The 3CX Supply Chain Attack: When Trusted Software Turns Malicious
Cortex XDR's AI stopped the 3CX supply chain attack days before the security industry knew it existed. See how behavioral detection caught what signat...
Beyond the Cloud Dashboard: Exposure Management Requires Full-Scope Visibil...
Cortex Exposure Management: Unify visibility from Code to Cloud to SOC. Prioritize real risk across your entire attack surface and eliminate cloud-onl...
More Blogs
Displaying 1—16 of
556 results
Sort By:
Cortex AgentiX: A Behind-the-Scenes Perspective
A behind-the-scenes look at how we build and manage agentic AI agents with Cortex AgentiX.
2025: The Year of the Autonomous SOC. The Year of XSIAM.
Explore how Cortex XSIAM made 2025 the year of the autonomous SOC—unifying data, AI, and automation to deliver unmatched security.
From ILOVEYOU to AI Defenders – 25 Years of Email Evolution
Email security evolution: From ILOVEYOU to AI-powered phishing. Advanced Email Security stops threats with cross-domain correlation & automated defens...
Partners Are Fueling Innovation with Cortex XSIAM and Prisma SASE
Solution providers voted us #1 – Cortex XSIAM is CRN’s 2025 Product of the Year and Prisma SASE is a 2025 Tech Innovator.
Prioritizing Impact: A Practical Framework for XDR Success
Learn practical XDR implementation strategies from security experts. Reduce alert fatigue, expand beyond EDR, and measure real security impact with pr...
Introducing the Cortex MCP Server
This blog introduces the new Cortex MCP, bringing real-time intelligence from XSIAM data to your preferred LLM application.
Stop Alert Fatigue: Fine-Tune Cortex XDR Analytics for Zero-Noise Security
Cortex XDR lets you fine-tune analytics rules and customize alert severity for zero-noise security and prioritized threat triage.
Introducing Malicious LDAP Query Protection for Cortex ITDR
Introducing Malicious LDAP Query Protection for Cortex ITDR. Get real-time, autonomous prevention to stop Active Directory reconnaissance attacks and ...
Shai-Hulud 2.0: How Cortex Helps Protect Against the Resurgent npm Worm
Shai-Hulud 2.0 exposes the fragility of software supply chains. Learn how the npm worm spreads through developer ecosyst...
Cortex ITDR: Cyber Threats in Microsoft Teams and Their Detection
A blog that demonstrates how PANW Cortex XSIAM provides detections on attacks within Microsoft Teams
Our CIO on Why Security Must Be Built Into AI from Day One
Palo Alto Networks CIO shares how the company transformed IT and development with AI, emphasizing that security must be integrated from day one.
What’s New in Cortex
The latest release of Cortex delivers autonomous SOC capabilities with Agentic AI, Federated Search, attack surface controls with AI detections, and more.
Reframing Vulnerability Management in an Age of Overload
Overwhelmed by vulnerability alerts? Learn how the Cortex Vulnerability Risk Score (CVRS) cuts through the noise, reducing alerts by up to 99% to find true risks.
Tracking Down Malicious Communication with Advanced XDR Detection Tactics
Learn how Palo Alto Networks uses Precision AI and XDR to detect C2 communications and data exfiltration through advanced classification and diverse d...
Securing Shadow AI with Cortex Xpanse
Rapid AI adoption creates "Shadow AI" and hidden risks. See how Cortex Xpanse discovers unmanaged AI infrastructure to secure your complete attack surface.
Transform Your SOC with Cortex XSIAM: Lessons From a Zombie Infestation
Like zombies, cyber threats need vulnerable hosts. Learn how Cortex XSIAM unifies your SOC to detect, respond, and prevent attacks before they spread....
More Blogs
Displaying 1—16 of
553 results
Sort By:
The Agentic AI Platform for the Agentic Workforce of the Future
Introducing Cortex AgentiX, the Agentic AI platform for the autonomous enterprise, delivering an AI agent workforce for security and IT.
Shai-Hulud 2.0: How Cortex Helps Protect Against the Resurgent npm Worm
Shai-Hulud 2.0 exposes the fragility of software supply chains. Learn how the npm worm spreads through developer ecosyst...
The Case Files of Detective Aems: A Study in Digital Deduction
Discover how AI-powered email security defeats sophisticated phishing, BEC attacks, and brand impersonation through contextual analysis and unified th...
Forrester Names Palo Alto Networks a Leader in XDR
Palo Alto Networks was named a leader in extended detection and response platforms by Forrester for Cortex XDR.
SE Labs Awards Palo Alto Networks AAA Rating and 100% Prevention Against Ra...
SE Labs awards Palo Alto Networks Cortex XDR a perfect 100% accuracy rating and AAA grade for ransomware protection with zero false positives.
A Deep Dive Into Malicious Direct Syscall Detection
This blog explains how attackers use direct syscalls to overcome most EDR solutions, by first discussing the conventional Windows syscall flow and how most EDR solutions monitor those calls.
A Leader in the 2025 Gartner Magic Quadrant for EPP — 3 Years Running
Redefining endpoint security with Cortex XDR a Leader in the 2025 Gartner® Magic Quadrant™ for Endpoint Protection Platf...
Cortex XDR is the Only Endpoint Security Market Leader to Achieve 99% in Bo...
Palo Alto Networks Cortex XDR achieves 99% in both threat prevention & response in AV-Comparatives 2025 EPR test - the only endpoint security market l...
Palo Alto Networks and MITRE ATT&CK® Evaluations: Enterprise 2025
To further accelerate innovation for our customers, Palo Alto Networks will not participate in the 2025 MITRE ATT&CK® Evaluations after two years of leading results.
Forrester Names Palo Alto Networks a Leader in Attack Surface Management
Palo Alto Networks was named a leader in attack surface management by Forrester for Cortex Xpanse.
Announcement, Application Security, Cloud Security, CNAPP, News and Events, Product Features, Products and Services
Introducing Cortex Cloud — The Future of Real-Time Cloud Security
Cortex Cloud brings the world’s leading CNAPP onto the #1 SecOps platform, delivering real-time protection — for the fir...
Forrester TEI: Unlock 257% ROI with Cortex XSIAM
AI-driven SecOps platform delivered 257% ROI, cut breach risk 60%, and consolidated tools for significant savings. Learn more about Palo Alto Networks Cortex XSIAM.
Detecting Threats with Microsoft Graph Activity Logs
Discover how Microsoft Graph API is used as an attack vector by threat actors through a real-world attack scenario. Find out why monitoring Microsoft Graph activity logs is important and how Cortex delivers tai...
SIEM Replacement Made Easy (Yes, Really!)
Deploy Cortex XSIAM in 3 months or less with AI-powered migration tools. Replace your SIEM faster with automated onboarding and ready-to-use analytics.
Cortex XDR Delivers Unmatched 100% Detection in MITRE Evals 2024
Cortex XDR achieves 100% technique-level detection in the 2024 MITRE ATT&CK evaluation.
A Leader in the 2024 Gartner Magic Quadrant for EPP
Palo Alto Networks was named a leader in endpoint protection platforms by Gartner for Cortex XDR.
Subscribe to Security Operations Blogs!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.
This site is protected by reCAPTCHA and the Google
Privacy Policy and
Terms of Service apply.