Latest Blogs

Join SASE Converge — Where the Future of SASE Comes Together
Announcement, Company & Culture, Events

Join SASE Converge — Where the Future of SASE Comes Together

Aug 27, 2024
By 
Incident Response by the Numbers
Announcement, Unit 42

Incident Response by the Numbers

Aug 22, 2024
By 
AI in OT Security — Balancing Industrial Innovation and Cyber Risk
Company & Culture, Points of View

AI in OT Security — Balancing Industrial Innovation and Cyber Risk

Aug 21, 2024
By 
Identity Protection That Spans the Entire Attack Lifecycle
Announcement, Must-Read Articles, News and Events, Partners, Products and Services

Identity Protection That Spans the Entire Attack Lifecycle

Aug 19, 2024
By 
Secure AI Access by Design — Enabling Safe Usage of GenAI Apps
AI Security, Points of View

Secure AI Access by Design — Enabling Safe Usage of GenAI Apps

Aug 15, 2024
By 
White House Post-Quantum Announcement: What It Means for Cybersecurity
Public Sector

White House Post-Quantum Announcement: What It Means for Cybersecurity

Aug 14, 2024
By , and

POPULAR BLOGS

Popular Topics

Black Hat
AI
Cortex XDR
Prisma SASE
AI’s Impact in Cybersecurity
Apology

Corporate Blogs

Crush It, Don’t Get Crushed — Combat SOC Analyst Burnout with AI
Company & Culture, Education, Must-Read Articles, Product Features, Products and Services

Crush It, Don’t Get Crushed — Combat SOC Analyst Burnout with AI

AI is reshaping SOC analyst roles. We address the critical issue of burnout and discuss practical advice for thriving in...
Sep 04, 2024
By 
A Letter From Our CEO
Company & Culture, Points of View

A Letter From Our CEO

Let me begin with a strong and sincere apology for a recent marketing decision at an event hosted by Palo Alto Networks during Black Hat in Las Vegas.
Aug 13, 2024
By 
The Missing Piece of SASE — Prisma Access Browser — Now Available
Announcement, Products and Services

The Missing Piece of SASE — Prisma Access Browser — Now Available

Prisma Access Browser, the latest innovation in SASE – redefining secure work in the browser, blending top-tier security with unparalle...
Aug 12, 2024
By 
Attack Vectors at a Glance
Incident Response, Zero Trust Security

Attack Vectors at a Glance

The 2024 Incident Response Report details the most exploited attack vectors of the past year – avoid these compromising your organization.
Aug 07, 2024
By 
Palo Alto Networks Zero Trust Platform Featured in New NIST Guidance
Public Sector

Palo Alto Networks Zero Trust Platform Featured in New NIST Guidance

Palo Alto Networks worked with NIST and industry peers to build end-to-end Zero Trust architectures in NIST’s labs, leveraging a range of our technologies.
Aug 06, 2024
By 
The Promise and Perils of Building AI Into Your Business Applications
Company & Culture, Points of View

The Promise and Perils of Building AI Into Your Business Applications

A comprehensive security solution will help you confidently build AI-powered apps by securing your journey to AI, from design to build ...
Aug 02, 2024
By 
The Economic and Operational Benefits of a Cybersecurity Platform
Company & Culture

The Economic and Operational Benefits of a Cybersecurity Platform

Consolidating multiple solutions into a unified platform closes security gaps that rise when deploying individual point products to address specific issues.
Jul 31, 2024
By 
Strengthening Cybersecurity in Healthcare
Partners

Strengthening Cybersecurity in Healthcare

To improve patient outcomes and experiences, today’s healthcare organizations are increasingly adopting innovative technologies, such as AI, Cloud, and IoT. While beneficial, these technologies increase risk by expanding the...
Jul 23, 2024
By  and
See all Corporate blogs

Network Security Blogs

Secure AI Applications by Design. AI Runtime Security, Now Available.
AI Security, Precision AI, Threat Prevention

Secure AI Applications by Design. AI Runtime Security, Now Available.

Secure your AI applications, models and data from new set of AI threats.
Jul 31, 2024
By 
Secure AI Access by Design — Enabling Safe Usage of GenAI Apps
AI Security, Points of View

Secure AI Access by Design — Enabling Safe Usage of GenAI Apps

AI Access Security harnesses the power of GenAI technologies, maintains robust protection for sensitive data, ensures compliance with security policies.
Aug 15, 2024
By 
Risk-based vulnerability prioritization for IoT, OT and MIoT devices
IoT Security

Risk-based vulnerability prioritization for IoT, OT and MIoT devices

CVSS base scores don't consider the threat landscape and your business context. We recommend using a risk-based approach to prioritize CVEs instead.
Jul 25, 2024
By  and
Announcing OpenAI ChatGPT Enterprise Compliance Integration
Announcement, Partners

Announcing OpenAI ChatGPT Enterprise Compliance Integration

Palo Alto Networks has integrated with OpenAI’s ChatGPT Enterprise Compliance API to empower organizations with the transformative potential of AI.
Jul 18, 2024
By  and
See How VM-Series Virtual Firewalls Pay for Themselves
Next-Generation Firewalls

See How VM-Series Virtual Firewalls Pay for Themselves

Read the Forrester Spotlight Report to understand how virtualized NGFWs provide an organization 163% ROI over three years.
Jul 10, 2024
By 
Simplifying Network Security for Enterprises in Public Cloud

Simplifying Network Security for Enterprises in Public Cloud

Facing cloud security challenges and high costs? Discover how PANWs' Cloud NGFW can streamline your operations. Start your free trial today!
Jun 12, 2024
By 
Forrester Names Palo Alto Networks a Leader in OT Security
Announcement, Industrial OT Security, IoT Security, Products and Services

Forrester Names Palo Alto Networks a Leader in OT Security

Palo Alto Networks was named a Leader in the Forrester WaveTM: OT Security Solutions, Q2 2024 report.
Jun 11, 2024
By 
Learn how to protect your AWS AI applications at AWS re:Inforce 2024
Next-Generation Firewalls

Learn how to protect your AWS AI applications at AWS re:Inforce 2024

Learn more about how to secure your AI applications, models and data at AWS re:Inforce 2024.
Jun 03, 2024
By 
See all Network Security blogs

SASE Blogs

Securing GenAI Apps in Your Web Browser
Product Features, Products and Services, Use-Cases

Securing GenAI Apps in Your Web Browser

Find out how Prisma Access Browser helps prevent sensitive information from being shared inadvertently or maliciously in GenAI apps.
Jul 24, 2024
By 
Join SASE Converge — Where the Future of SASE Comes Together
Announcement, Company & Culture, Events

Join SASE Converge — Where the Future of SASE Comes Together

Join us for SASE Converge 2024, a 2-hour immersive virtual experience, featuring thought leaders and technologists from across the globe.
Aug 27, 2024
By 
Secure AI Access by Design — Enabling Safe Usage of GenAI Apps
AI Security, Points of View

Secure AI Access by Design — Enabling Safe Usage of GenAI Apps

AI Access Security harnesses the power of GenAI technologies, maintains robust protection for sensitive data, ensures compliance with security policies.
Aug 15, 2024
By 
The Missing Piece of SASE — Prisma Access Browser — Now Available
Announcement, Products and Services

The Missing Piece of SASE — Prisma Access Browser — Now Available

Prisma Access Browser, the latest innovation in SASE – redefining secure work in the browser, blending top-tier security with unparalle...
Aug 12, 2024
By 
Maximize Zero-Day Protection with Dynamic RBI & Prisma SASE
Product Features, Products and Services, Use-Cases

Maximize Zero-Day Protection with Dynamic RBI & Prisma SASE

Find out how RBI with Prisma SASE enables security teams to balance user experience and security with dynamic, risk-based RBI policies....
Jul 22, 2024
By  and
Announcing OpenAI ChatGPT Enterprise Compliance Integration
Announcement, Partners

Announcing OpenAI ChatGPT Enterprise Compliance Integration

Palo Alto Networks has integrated with OpenAI’s ChatGPT Enterprise Compliance API to empower organizations with the transformative potential of AI.
Jul 18, 2024
By  and
Uncover the Hidden Dangers in Your Identity Infrastructure
Product Features, Products and Services

Uncover the Hidden Dangers in Your Identity Infrastructure

Learn about Palo Alto Networks Identity Posture Security, the new identity security posture management solution available with SSPM.
Jul 15, 2024
By 
VDI Reduction: Enterprise Browsers Redefine Workspaces
Product Features, Products and Services, Use-Cases

VDI Reduction: Enterprise Browsers Redefine Workspaces

Find out how Prisma Access Browser provides a streamlined, cost-effective alternative to address the challenges of wide VDI deployments.
Jul 11, 2024
By 
See all SASE blogs

Cloud Native Security Blogs

DSPM-Driven Data Context to Improve Attack Path Analysis and Prioritization
Data Security, Data Security Posture Management

DSPM-Driven Data Context to Improve Attack Path Analysis and Prioritization

Attack path analysis plays a vital role in risk prioritization. But without DSPM capabilities, orgs can’t see if specific attack paths put sensitive d...
Sep 05, 2024
By  and
Precision AI and Scale: Recapping Prisma Cloud Innovations from August
AI Security Posture Management, Announcement, CNAPP

Precision AI and Scale: Recapping Prisma Cloud Innovations from August

Learn about AI-SPM and other Prisma Cloud product updates designed to enhance security of your cloud-native infrastructure and applications and your e...
Sep 03, 2024
By 
Analyze Vulnerabilities (CVEs) with Confidence
Cloud Security, Cloud Workload Protection Platform, CNAPP, Vulnerability Management

Analyze Vulnerabilities (CVEs) with Confidence

Vulnerability management powered by Prisma Cloud’s Intelligence Stream offers precise detection to accurately identify and remediate cloud security risks.
Aug 28, 2024
By  and
4 Best Practices for Using Prisma Cloud with Alibaba Cloud
Cloud Security, CNAPP, Compliance

4 Best Practices for Using Prisma Cloud with Alibaba Cloud

Leverage best practices and industry-leading cloud-native security for Alibaba Cloud and gain full cloud visibility and compliance support on Alibaba ...
Aug 27, 2024
By 
Meet the New Prisma Cloud MSSP Console for Flexible Security Services

Meet the New Prisma Cloud MSSP Console for Flexible Security Services

MSSPs users can overcome challenges like slow time-to-market, security blind spots, and limited service customization using Prisma Cloud’s new MSSP Console.
Aug 21, 2024
By 
Security Theater: Your AppSec Success Metrics Are Misleading
AppSec, Cloud Security

Security Theater: Your AppSec Success Metrics Are Misleading

Shift from security theater to effective application security by replacing metrics that incentivizes poor development habits with those that optimize AppSec.
Aug 20, 2024
By 
From Risk to Reality with Advanced Cloud Protection
Cloud Native Application Protection Platform, Code to Cloud

From Risk to Reality with Advanced Cloud Protection

CNAPPs detect and mitigate threat vectors, including network attacks, malware across workloads, data threats, and vulnerabilities in web applications and APIs.
Aug 15, 2024
By 
5 Best Practices for Using Prisma Cloud with Oracle Cloud Infrastructure
Cloud Security, CNAPP, Compliance, Partners

5 Best Practices for Using Prisma Cloud with Oracle Cloud Infrastructure

Leverage best practices and industry-leading cloud-native security for OCI and gain full cloud visibility and compliance support on all OCI resource i...
Aug 14, 2024
By 
See all Cloud Native Security blogs

Security Operations Blogs

Crush It, Don’t Get Crushed — Combat SOC Analyst Burnout with AI
Company & Culture, Education, Must-Read Articles, Product Features, Products and Services

Crush It, Don’t Get Crushed — Combat SOC Analyst Burnout with AI

AI is reshaping SOC analyst roles. We address the critical issue of burnout and discuss practical advice for thriving in...
Sep 04, 2024
By 
AI in OT Security — Balancing Industrial Innovation and Cyber Risk
Company & Culture, Points of View

AI in OT Security — Balancing Industrial Innovation and Cyber Risk

Interview with Del Rodillas, who navigates the landscape of the OT-IT convergence and cybersecurity challenges in the manufacturing and...
Aug 21, 2024
By 
Identity Protection That Spans the Entire Attack Lifecycle
Announcement, Must-Read Articles, News and Events, Partners, Products and Services

Identity Protection That Spans the Entire Attack Lifecycle

Palo Alto Networks Identity Threat Detection and Response (ITDR) offering emerges as a critical pillar of modern cybersecurity strategy...
Aug 19, 2024
By 
An Automated Response to Malicious Pod Activity
Playbook of the Week

An Automated Response to Malicious Pod Activity

Automated playbook for effectively tackling malicious activity within Kubernetes clusters.
Aug 15, 2024
By 
Black Hat NOC: Protecting One of the World's Most Dangerous Networks
Must-Read Articles, News and Events, Use-Cases

Black Hat NOC: Protecting One of the World's Most Dangerous Networks

Palo Alto Networks and partners defend Black Hat's network, detecting and stopping nearly a billion threats, ensuring a seamless experi...
Aug 09, 2024
By 
Rapid Response for Fighting Ursa Phishing Campaign
Playbook of the Week

Rapid Response for Fighting Ursa Phishing Campaign

Automated playbook to speed response to Russian threat actor, Fighting Ursa, APT phishing campaign offering diplomatic cars for sale.
Aug 08, 2024
By 
Threat Hunting with Mark of The Web Using Cortex XDR
Must-Read Articles, Product Features

Threat Hunting with Mark of The Web Using Cortex XDR

Leveraging Mark of The Web (MOTW) data using Cortex XDR to hunt for suspicious files and malware downloaded from the internet
Aug 07, 2024
By 
Automate Insecure OpenSSH vulnerability patching in Ubuntu AWS EC2 with Cortex Xpanse
Announcement, Product Features, Use-Cases

Automate Insecure OpenSSH vulnerability patching in Ubuntu AWS EC2 with Cor...

Learn how to automate patching of vulnerable OpenSSH software on AWS EC2 instances using Cortex Xpanse Active Response. Enhance securit...
Jul 25, 2024
By 
See all Security Operations blogs

Unit 42 Threat Research

company article
Cybercrime Malware Nation-State Cyberattacks Threat Actor Groups

Threat Assessment: North Korean Threat Groups

Explore Unit 42's review of North Korean APT groups and their impact, detailing the top 10 malware and tools we've seen from these threat actors....
September 9, 2024
By  Unit 42
company article
Malware Threat Actor Groups

Chinese APT Abuses VSCode to Target Government in Asia

A first in our telemetry: Chinese APT Stately Taurus uses Visual Studio Code to maintain a reverse shell in victims' environments for Southeast Asian espionage....
September 6, 2024
By  Tom Fakterman
company article
Malware Threat Research

Spoofed GlobalProtect Used to Deliver Unique WikiLoader Variant

Unit 42 discusses WikiLoader malware spoofing GlobalProtect VPN, detailing evasion techniques, malicious URLs, and mitigation strategies....
September 2, 2024
By  Mark Lim , Tom Marsden
company article
DNS Threat Research

TLD Tracker: Exploring Newly Released Top-Level Domains

Unit 42 researchers use a novel graph-based pipeline to detect misuse of 19 new TLDs for phishing, chatbots and more in several case studies....
August 30, 2024
By  Reethika Ramesh , Zhanhao Chen , Wanjin Li , Daiping Liu
company article
DNS Threat Research

The Emerging Dynamics of Deepfake Scam Campaigns on the Web

A technical analysis of deepfake technology uncovers how cybercriminals utilize AI-generated videos of public figures to execute sophisticated scams....
August 29, 2024
By  Lucas Hu , Nabeel Mohamed , Billy Melicher , Alex Starov , Howard Tong , Kyle Wilhoit , Shehroze Farooqi
company article
Cloud Cybersecurity Research Ransomware Threat Actor Groups

Bling Libra’s Tactical Evolution: The Threat Actor Group Behind S...

We analyze a recent incident by Bling Libra, the group behind ShinyHunters ransomware as they shift from data theft to extortion, exploiting AWS credentials....
August 23, 2024
By  Margaret Zimmermann , Chandni Vaya
company article
DNS Threat Research

Autoencoder Is All You Need: Profiling and Detecting Malicious DN...

Unit 42 researchers use deep learning to detect cyber threats by analyzing DNS traffic, employing autoencoders and machine learning algorithms....
August 21, 2024
By  Zhanhao Chen , Reethika Ramesh , Daiping Liu
company article
Cloud Cybersecurity Research Threat Research

Leaked Environment Variables Allow Large-Scale Extortion Operatio...

We recount an extensive cloud extortion campaign leveraging exposed .env files of at least 110k domains to compromise organizations' AWS environments....
August 15, 2024
By  Margaret Zimmermann , Sean Johnstone , William Gamazo , Nathaniel Quist
See all Unit 42 threat research

Subscribe to the Newsletter!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.

By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.

Get the latest news, invites to events, and threat alerts