Blog
Security Operations

Security Operations

How Behavioral Analytics Stop Linux C2 & Credential Theft

Learn how behavioral analytics detect Linux C2 communication and credential theft — including LOLBin abuse, beaconing malware, and post-exploitation credential access. See how Cortex XDR and Cortex Cloud CDR closes the Linux blind spot.

Product Features

Mar 17, 2026

By Shaked Menachem and Maor Korkos

Security Operations

AI and Cybersecurity, AI Security, Announcement, News and Events, Product Features

The SOC Is Now Agentic — Introducing the Next Evolution of Cortex

Agentic AI security is here. See how AI-powered agents, XDL 2.0 and the new Agentix platform transform the SOC at Cortex Symphony 2026.

Feb 25, 2026

By Gonen Fink

AI and Cybersecurity, AI Security, Must-Read Articles, Product Features

Modernising the SOC: Navigating the Shift to Platformization and Agentic AI

Explore a discussion between IDC analyst Duncan Brown and Palo Alto Networks about agentic AI and platformization strategies to modernise the SOC and ...

Mar 10, 2026

By Matthias Maier

Product Features

The Cartography of Risk: Operational Technology and the Public Internet

Cortex Xpanse OT Security: Map your external attack surface and protect industrial infrastructure. New Siemens research reveals a 332% rise in exposed OT devices.

Feb 24, 2026

By Brendan Powers and Adam Robbie

Announcement, Must-Read Articles, Product Features

Introducing Cortex XDR 5.0: The New Standard for Endpoint Security

Cortex XDR 5.0 redefines endpoint security with agentic AI, unified exposure management, endpoint DLP, and enhanced Linux & macOS protection.

Feb 24, 2026

By Daphna Shemesh and Yang Liang

More Blogs

Displaying 1—16 of

568 results

Sort By:

Announcement, Incident Response, Products and Services, Threat Prevention, Unit 42

Introducing Unit 42 Managed XSIAM 2.0

Unit 42 Managed XSIAM 2.0 delivers a 24/7 managed SOC with continuous detection, investigation, and full-cycle remediation.

Feb 17, 2026

By Sharon Maydar

Announcement, Must-Read Articles, Reports, Threat Advisories - Advisories, Unit 42

2026 Unit 42 Global Incident Response Report — Attacks Now 4x Faster

Attackers are leveraging identity, AI, and supply chain exposure. Unit 42's Global 2026 IR Report reveals faster, broader, harder-to-contain threats.

Feb 17, 2026

By Sam Rubin

AI and Cybersecurity, AI Security, Interview, Must-Read Articles, People of Palo Alto Networks, Points of View

When Security Becomes an Afterthought

As AI deployment races ahead, security scrambles to keep up. Nikesh Arora on why AI's biggest risk is treating security as an afterthought.

Feb 12, 2026

By Dena De Angelo

Must-Read Articles, Product Features

Stop Chasing Ghosts: The Strategic Case for Compensating Controls

Transform theoretical risk into operational outcomes. Cortex Exposure Management’s new Security and Compensating Controls feature reveals your true re...

Feb 11, 2026

By Alexandre Cezar and Brendan Powers

AI and Cybersecurity, Must-Read Articles, Product Features, Uncategorized

Ransomware Attacks: Why Your Endpoint Protection Can't Keep Up

Ransomware attacks are 100x faster, beating legacy EPPs. Learn how Cortex XDR stops 25-minute attacks before exfiltration with machine-speed defense.

Feb 11, 2026

By Dena De Angelo

AI and Cybersecurity, Automation of the Week, Product Features, Uncategorized

A Day in the Life with Your AgentiX Automation Engineer Agent

Stop coding, start conversing. Introducing the Automation Engineer Agent, your new AI partner for instant script generation in Cortex AgentiX

Feb 05, 2026

By Ron Ben Chen

News and Events, Product Features

Boost SOC Efficiency: Data Control with Cortex XSIAM & Chronosphere

Gain fine-grained data control for security. Cortex XSIAM & Chronosphere Telemetry Pipeline optimize data, cut costs, and boost AI-driven threat detec...

Jan 29, 2026

By Kasey Cross

Must-Read Articles

Intercepting the ToolShell Zero-Day Before the Headlines

How Unit 42's threat hunters warned customers about Tool Shell before the headlines broke. Discover the power of proactive hunting for zero-day threats.

Jan 28, 2026

By Dena De Angelo

Must-Read Articles, Product Features

The Detection Nightmare: Years Pass Without a Move

Patient adversaries hide for months using persistence techniques. Learn how Cortex XDR detects dormant backdoors without overwhelming SOC teams with alerts.

Jan 22, 2026

By Dena De Angelo

AI and Cybersecurity, AI Security, Must-Read Articles, Points of View

What the Alien Franchise Taught Me About Cybersecurity

Ripley's tactics from Alien are your blueprint for SOC transformation to defeat modern threats with AI-driven security, automation and SIEM modernization.

Jan 22, 2026

By Dena De Angelo

AI and Cybersecurity, Must-Read Articles, Product Features

The 3CX Supply Chain Attack: When Trusted Software Turns Malicious

Cortex XDR's AI stopped the 3CX supply chain attack days before the security industry knew it existed. See how behavioral detection caught what signat...

Jan 15, 2026

By Dena De Angelo

Product Features, Uncategorized

Beyond the Cloud Dashboard: Exposure Management Requires Full-Scope Visibil...

Cortex Exposure Management: Unify visibility from Code to Cloud to SOC. Prioritize real risk across your entire attack surface and eliminate cloud-onl...

Jan 13, 2026

By Elad Koren and Brendan Powers

AI and Cybersecurity, Automation of the Week, Must-Read Articles, Product Features

Cortex AgentiX: A Behind-the-Scenes Perspective

A behind-the-scenes look at how we build and manage agentic AI agents with Cortex AgentiX.

Jan 08, 2026

By Ariel Blaier and Jane Goh

AI and Cybersecurity, Must-Read Articles, News and Events

2025: The Year of the Autonomous SOC. The Year of XSIAM.

Explore how Cortex XSIAM made 2025 the year of the autonomous SOC—unifying data, AI, and automation to deliver unmatched security.

Dec 18, 2025

By Kasey Cross

Must-Read Articles, Product Features, Uncategorized

From ILOVEYOU to AI Defenders – 25 Years of Email Evolution

Email security evolution: From ILOVEYOU to AI-powered phishing. Advanced Email Security stops threats with cross-domain correlation & automated defens...

Dec 11, 2025

By Yitzy Tannenbaum and Guy Mazaltrim

Announcement

Partners Are Fueling Innovation with Cortex XSIAM and Prisma SASE

Solution providers voted us #1 – Cortex XSIAM is CRN’s 2025 Product of the Year and Prisma SASE is a 2025 Tech Innovator.

Dec 09, 2025

By Greg Smith and Kritika Singhal

Load more blogs

More Blogs

Displaying 1—16 of

553 results

Sort By:

AI Security, Must-Read Articles, Product Features, Products and Services

The Agentic AI Platform for the Agentic Workforce of the Future

Introducing Cortex AgentiX, the Agentic AI platform for the autonomous enterprise, delivering an AI agent workforce for security and IT.

Oct 28, 2025

By Gonen Fink

AppSec, Cloud Detection and Response, Cloud Runtime Security, Cloud Security, Supply Chain Security

Shai-Hulud 2.0: How Cortex Helps Protect Against the Resurgent npm Worm

Shai-Hulud 2.0 exposes the fragility of software supply chains. Learn how the npm worm spreads through developer ecosyst...

Nov 26, 2025

By Cameron Hyde and Yitzy Tannenbaum

AI and Cybersecurity, Must-Read Articles, Product Features, Use-Cases

The Case Files of Detective Aems: A Study in Digital Deduction

Discover how AI-powered email security defeats sophisticated phishing, BEC attacks, and brand impersonation through contextual analysis and unified th...

Oct 08, 2025

By Michael Heller and Yitzy Tannenbaum

Announcement, Must-Read Articles, News and Events, Product Features, Products and Services

Forrester Names Palo Alto Networks a Leader in XDR

Palo Alto Networks was named a leader in extended detection and response platforms by Forrester for Cortex XDR.

Jun 03, 2024

By Gonen Fink

AI and Cybersecurity, Must-Read Articles, News and Events, Product Features, Use-Cases

SE Labs Awards Palo Alto Networks AAA Rating and 100% Prevention Against Ra...

SE Labs awards Palo Alto Networks Cortex XDR a perfect 100% accuracy rating and AAA grade for ransomware protection with zero false positives.

Aug 05, 2025

By Emran Mazumder

Must-Read Articles, Non classifié(e), Product Features

A Deep Dive Into Malicious Direct Syscall Detection

This blog explains how attackers use direct syscalls to overcome most EDR solutions, by first discussing the conventional Windows syscall flow and how most EDR solutions monitor those calls.

Feb 13, 2024

By Or Chechik and Ofir Ozer

Announcement, Must-Read Articles, News and Events, Product Features, Products and Services, Reports

A Leader in the 2025 Gartner Magic Quadrant for EPP — 3 Years Running

Redefining endpoint security with Cortex XDR a Leader in the 2025 Gartner® Magic Quadrant™ for Endpoint Protection Platf...

Jul 17, 2025

By Gonen Fink

AI and Cybersecurity, Must-Read Articles, News and Events

Cortex XDR is the Only Endpoint Security Market Leader to Achieve 99% in Bo...

Palo Alto Networks Cortex XDR achieves 99% in both threat prevention & response in AV-Comparatives 2025 EPR test - the only endpoint security market l...

Sep 23, 2025

By Emran Mazumder

News and Events, Uncategorized

Palo Alto Networks and MITRE ATT&CK® Evaluations: Enterprise 2025

To further accelerate innovation for our customers, Palo Alto Networks will not participate in the 2025 MITRE ATT&CK® Evaluations after two years of leading results.

Sep 12, 2025

By Palo Alto Networks

Announcement, News and Events, Products and Services

Forrester Names Palo Alto Networks a Leader in Attack Surface Management

Palo Alto Networks was named a leader in attack surface management by Forrester for Cortex Xpanse.

Sep 24, 2024

By Greg Heon

Announcement, Application Security, Cloud Security, CNAPP, News and Events, Product Features, Products and Services

Introducing Cortex Cloud — The Future of Real-Time Cloud Security

Cortex Cloud brings the world’s leading CNAPP onto the #1 SecOps platform, delivering real-time protection — for the fir...

Feb 13, 2025

By Elad Koren

AI and Cybersecurity, Product Features, Use-Cases

Forrester TEI: Unlock 257% ROI with Cortex XSIAM

AI-driven SecOps platform delivered 257% ROI, cut breach risk 60%, and consolidated tools for significant savings. Learn more about Palo Alto Networks Cortex XSIAM.

Oct 16, 2025

By Greg Smith

Must-Read Articles, Product Features, Uncategorized

Detecting Threats with Microsoft Graph Activity Logs

Discover how Microsoft Graph API is used as an attack vector by threat actors through a real-world attack scenario. Find out why monitoring Microsoft Graph activity logs is important and how Cortex delivers tai...

Feb 02, 2025

By Eden Elazar

Must-Read Articles, Product Features, Uncategorized

SIEM Replacement Made Easy (Yes, Really!)

Deploy Cortex XSIAM in 3 months or less with AI-powered migration tools. Replace your SIEM faster with automated onboarding and ready-to-use analytics.

Oct 15, 2025

By Brendan Powers