GlassWorm Goes Mac: Fresh Infrastructure, New Tricks
Originally published December 29, 2025
Security Operations
Security Operations
Must-Read Articles
Product Features
Use-Cases
News and Events
Partner Integrations
Playbook of the Week
What the 2026 OWASP Top 10 Tells Us About the Growing Role of Data Security...
OWASP Top 10 2026 reveals how AI security is changing as AI gains greater access to enterprise data, tools and autonomy, making data security more cri...
AI and Cybersecurity, AI Security, Announcement, Cybersecurity, Must-Read Articles, News and Events, Products and Services
Cortex XDR is the only Certified Leader in AV-Comparatives EPR 7 years in a...
Modern enterprise security teams are locked in an escalating crisis where attackers levera...
Cortex Data Security – New AI-Native Operating Model for Protecting Data – ...
We’re pleased to announce that after two months in public preview, Cortex Data Security is now generally available. And we’re already looking ahead to...
AI and Cybersecurity, AI Security, Cloud Workload Protection Platform, Cybersecurity, Threat Intelligence, Use-Cases
Beyond the SEG: Why Single-Domain Email Defenses Break Down in the Modern S...
Generative AI has fundamentally rewritten the rules of social engineering. Using LLMs, adversaries now automate open-sou...
More Blogs
Displaying 1—16 of
610 results
Sort By:
Building an Agentic SOC: 7 Keys for Success
AI has handed security teams both a remarkable opportunity and a rather inconvenient deadline. Agentic AI can take on investigations, automate routine work and compress response times. Frontier AI is doing some...
AI and Cybersecurity, Announcement, Cybersecurity, Must-Read Articles, Product Features, Products and Services, Use-Cases
Cortex XDR Scores Perfect 100% in SE Labs 2026 Ransomware Test
Ransomware is accelerating at machine speed as adversaries harness frontier AI models to a...
Built for Resilience: How Cortex XDR Overcomes Modern SOC Architectural Lim...
Discover how Cortex XDR unifies multi-domain telemetry, eliminates logging cost penalties, and speeds up Linux threat response.
Orchestrating the Agentic SOC: A Practical Guide to Model Context Protocol
Learn how Model Context Protocol (MCP) connects Cortex XSIAM, AgentiX, XDR and Cloud to your SOC tool stack, to build a unified AI SecOps ecosystem.
Introducing Active Directory Security Posture Management in Cortex ITDR
Active Directory remains a primary target for identity-based attacks. A single risky configuration—whether a misconfigured certificate template, exces...
A Quarter of Innovation with Koi Agentic Endpoint Security
Protect endpoints from autonomous AI risks with Koi Agentic Endpoint Security—get full visibility, runtime policy control, and automated remediation....
Finland, Meet the AI-Driven SOC
Cortex services are now available from a cloud location in Finland, helping organizations support local data residency and modern security operations.
SE Labs Awards Palo Alto Networks the Anti-Tampering Certification
Breaching a network is merely the opening move. The real prize for an attacker is silencing the security agent, unlocking complete freedom to harvest...
Announcing the Public Preview of Cortex Data Security: Unified Data Protect...
Data security platform solutions secure organizational data across cloud, SaaS, and AI environments with unified DSPM, DLP, and automated threat respo...
AI and Cybersecurity, Must-Read Articles, News and Events, Product Features, Uncategorized, Use-Cases
Bridging the Gap: An Unprecedented Approach to Browser and Endpoint Securit...
The enterprise workforce now operates almost entirely within the web browser. In fact, employees do roughly 85% of their...
AI and Cybersecurity, AI Security, Announcement, Cybersecurity, Must-Read Articles, News and Events, Product Features, Products and Services, Use-Cases
Identity Meets the SOC: Redefining the Last Perimeter
Let’s start with a hard truth that every security leader is waking up to: adversaries aren...
Living Off the Cloud: Analyzing AWS Systems Manager Attack Vectors
Learn how adversaries abuse AWS Systems Manager (SSM) for "Living Off the Cloud" attacks to execute code and move laterally between cloud and on-premi...
What’s New in Cortex
The latest Cortex portfolio release delivers new frontier AI capabilities and personalized agents, making detection and remediation faster than ever.
AI and Cybersecurity, Must-Read Articles, News and Events, Partner Integrations, Unkategorisiert, Use-Cases
Fighting AI with AI: Palo Alto Networks and Tenzai Collaborate to Defeat Au...
The cybersecurity landscape has evolved beyond human scale. With autonomous AI agents now capable of planning and execut...
Securing the AI Factory: Empowering Security Teams with In-Silicon Visibili...
Discover how Palo Alto Networks Cortex XSIAM integrates with NVIDIA DOCA Argus to deliver deep visibility and secure the AI Factory with zero performa...
More Blogs
Displaying 1—16 of
610 results
Sort By:
2026 Unit 42 Global Incident Response Report — Attacks Now 4x Faster
Attackers are leveraging identity, AI, and supply chain exposure. Unit 42's Global 2026 IR Report reveals faster, broader, harder-to-contain threats.
Introducing Unit 42 Managed XSIAM 2.0
Unit 42 Managed XSIAM 2.0 delivers a 24/7 managed SOC with continuous detection, investigation, and full-cycle remediation.
AI and Cybersecurity, AI Security, Announcement, Cybersecurity, Must-Read Articles, News and Events, Product Features, Products and Services, Use-Cases
Identity Meets the SOC: Redefining the Last Perimeter
Let’s start with a hard truth that every security leader is waking up to: adversaries aren...
AI and Cybersecurity, Must-Read Articles, News and Events, Product Features, Uncategorized, Use-Cases
Bridging the Gap: An Unprecedented Approach to Browser and Endpoint Securit...
The enterprise workforce now operates almost entirely within the web browser. In fact, employees do roughly 85% of their...
The Frontier AI SOC Has Arrived
Cortex brings the latest frontier AI models into the SOC, letting analysts dynamically select the best model for each task while benefiting from state-of-the-art advances in AI.
Announcing the Public Preview of Cortex Data Security: Unified Data Protect...
Data security platform solutions secure organizational data across cloud, SaaS, and AI environments with unified DSPM, DLP, and automated threat respo...
Cortex Cloud — Unified Efficiency, Now with Dual FedRAMP Authority
Cortex Cloud achieved FedRAMP High and Moderate authorizations since its Feb 2025 launch, highlighting its secure cloud commitment.
What’s New in Cortex
The latest Cortex portfolio release delivers new frontier AI capabilities and personalized agents, making detection and remediation faster than ever.
AI and Cybersecurity, Announcement, Cybersecurity, Must-Read Articles, Product Features, Products and Services, Use-Cases
Cortex XDR Scores Perfect 100% in SE Labs 2026 Ransomware Test
Ransomware is accelerating at machine speed as adversaries harness frontier AI models to a...
AI Security, Announcement, Must-Read Articles, News and Events, Product Features, Products and Services
Securing the Agentic Endpoint
Secure the Agentic Endpoint. Traditional security misses the risk of AI agents. Learn how Palo Alto Networks and the Koi acquisition bring new protection.
A Quarter of Innovation with Koi Agentic Endpoint Security
Protect endpoints from autonomous AI risks with Koi Agentic Endpoint Security—get full visibility, runtime policy control, and automated remediation....
Forrester Names Palo Alto Networks a Leader in Attack Surface Management
Palo Alto Networks was named a leader in attack surface management by Forrester for Cortex Xpanse.
How Koi Protects Against Developer Supply Chains
A poisoned VS Code extension compromised 3,800 GitHub repos in minutes. Here's why traditional EDR missed it and how Agentic Endpoint Security closes the gap.
Introducing Active Directory Security Posture Management in Cortex ITDR
Active Directory remains a primary target for identity-based attacks. A single risky configuration—whether a misconfigured certificate template, exces...
Introducing the Cortex MCP Server
This blog introduces the new Cortex MCP, bringing real-time intelligence from XSIAM data to your preferred LLM application.
Subscribe to Security Operations Blogs!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.
This site is protected by reCAPTCHA and the Google
Privacy Policy and
Terms of Service apply.