Meet Cortex XSIAM 4.0: AI That Knows Your Enterprise
Moving the SOC closer to autonomy with powerful AI agents, expanded protection for enterprise AI, and blazing-fast search
Security Operations
Security Operations
Must-Read Articles
Product Features
Use-Cases
News and Events
Partner Integrations
Playbook of the Week
New Cortex XDR Integration with Claude Cowork Secures Desktop AI Agents
AI agents working directly on the desktop offer new ways to automate complex tasks, yet they operate outside traditional endpoint controls and pose un...
How Cortex AES Protects Against Compromised Claude Code Extensions
On October 29, 2026, attackers turned a trusted developer tool into a potential backdoor. Malicious versions of the Claude Code extension were distrib...
Mitigating PHP2Shell Vulnerabilities (CVE-2026-109618 & CVE-2026-10961...
Learn how unified security platforms like Cortex XSIAM accelerate vulnerability remediation for critical flaws like the PHP2Shell vulnerabilities usin...
AI and Cybersecurity, AI Security, Announcement, Cybersecurity, Must-Read Articles, News and Events, Product Features, Use-Cases
Introducing Cortex XDR 6.0: Built for Endpoints. Ready for Agents.
Modern endpoints are evolving at machine speed with an ungoverned AI ecosystem. Driven by...
More Blogs
Displaying 1—16 of
624 results
Sort By:
Reinventing Endpoint Security with Cortex XDR One
Enterprises spent the last two years racing to capture the vast potential of AI, authorizing AI agents to touch production code, internal databases, customer tickets and financial ledgers. Because these agents...
AI Didn’t Create the Data Security Problem. It Made It Impossible to Ignore...
Data security in the age of AI requires evolving beyond traditional DLP to secure data access, posture, and real-time risks across clouds and agents.
Palo Alto Networks is named a Leader in the 2026 IDC MarketScape for Modern...
The enterprise landscape is undergoing a monumental shift. AI agents are transforming productivity, executing complex tasks autonomously across our di...
Cortex AES Extends Code Package Visibility to Go
Discover how Cortex AES extends supply chain security to Go modules across Windows and macOS endpoints. Flag malicious packages, retracted versions, a...
GlassWorm Goes Mac: Fresh Infrastructure, New Tricks
Editor’s note: This article was originally published by Koi Security on December 29, 2025. Koi is now part of Palo Alto Networks, and this article has been adapted for the Palo Alto Networks blog. The technical...
What the 2026 OWASP Top 10 Tells Us About the Growing Role of Data Security...
OWASP Top 10 2026 reveals how AI security is changing as AI gains greater access to enterprise data, tools and autonomy, making data security more cri...
AI and Cybersecurity, AI Security, Announcement, Cybersecurity, Must-Read Articles, News and Events, Products and Services
Cortex XDR is the only Certified Leader in AV-Comparatives EPR 7 years in a...
Modern enterprise security teams are locked in an escalating crisis where attackers levera...
Cortex Data Security – New AI-Native Operating Model for Protecting Data – ...
We’re pleased to announce that after two months in public preview, Cortex Data Security is now generally available. And we’re already looking ahead to...
AI and Cybersecurity, AI Security, Cloud Workload Protection Platform, Cybersecurity, Threat Intelligence, Use-Cases
Beyond the SEG: Why Single-Domain Email Defenses Break Down in the Modern S...
Generative AI has fundamentally rewritten the rules of social engineering. Using LLMs, adversaries now automate open-sou...
Building an Agentic SOC: 7 Keys for Success
AI has handed security teams both a remarkable opportunity and a rather inconvenient deadline. Agentic AI can take on investigations, automate routine work and compress response times. Frontier AI is doing some...
AI and Cybersecurity, Announcement, Cybersecurity, Must-Read Articles, Product Features, Products and Services, Use-Cases
Cortex XDR Scores Perfect 100% in SE Labs 2026 Ransomware Test
Ransomware is accelerating at machine speed as adversaries harness frontier AI models to a...
Built for Resilience: How Cortex XDR Overcomes Modern SOC Architectural Lim...
Discover how Cortex XDR unifies multi-domain telemetry, eliminates logging cost penalties, and speeds up Linux threat response.
Orchestrating the Agentic SOC: A Practical Guide to Model Context Protocol
Learn how Model Context Protocol (MCP) connects Cortex XSIAM, AgentiX, XDR and Cloud to your SOC tool stack, to build a unified AI SecOps ecosystem.
Introducing Active Directory Security Posture Management in Cortex ITDR
Active Directory remains a primary target for identity-based attacks. A single risky configuration—whether a misconfigured certificate template, exces...
A Quarter of Innovation with Koi Agentic Endpoint Security
Protect endpoints from autonomous AI risks with Koi Agentic Endpoint Security—get full visibility, runtime policy control, and automated remediation....
Finland, Meet the AI-Driven SOC
Cortex services are now available from a cloud location in Finland, helping organizations support local data residency and modern security operations.
More Blogs
Displaying 1—16 of
622 results
Sort By:
Reinventing Endpoint Security with Cortex XDR One
Enterprises spent the last two years racing to capture the vast potential of AI, authorizing AI agents to touch production code, internal databases, customer tickets and financial ledgers. Because these agents...
Cortex Data Security – New AI-Native Operating Model for Protecting Data – ...
We’re pleased to announce that after two months in public preview, Cortex Data Security is now generally available. And we’re already looking ahead to...
AI and Cybersecurity, Must-Read Articles, News and Events, Product Features, Uncategorized, Use-Cases
Bridging the Gap: An Unprecedented Approach to Browser and Endpoint Securit...
The enterprise workforce now operates almost entirely within the web browser. In fact, employees do roughly 85% of their...
AI and Cybersecurity, AI Security, Announcement, Cybersecurity, Must-Read Articles, News and Events, Product Features, Products and Services, Use-Cases
Identity Meets the SOC: Redefining the Last Perimeter
Let’s start with a hard truth that every security leader is waking up to: adversaries aren...
AI and Cybersecurity, Announcement, Cybersecurity, Must-Read Articles, Product Features, Products and Services, Use-Cases
Cortex XDR Scores Perfect 100% in SE Labs 2026 Ransomware Test
Ransomware is accelerating at machine speed as adversaries harness frontier AI models to a...
Cortex Cloud — Unified Efficiency, Now with Dual FedRAMP Authority
Cortex Cloud achieved FedRAMP High and Moderate authorizations since its Feb 2025 launch, highlighting its secure cloud commitment.
2026 Unit 42 Global Incident Response Report — Attacks Now 4x Faster
Attackers are leveraging identity, AI, and supply chain exposure. Unit 42's Global 2026 IR Report reveals faster, broader, harder-to-contain threats.
Introducing Unit 42 Managed XSIAM 2.0
Unit 42 Managed XSIAM 2.0 delivers a 24/7 managed SOC with continuous detection, investigation, and full-cycle remediation.
AI Security, Announcement, Must-Read Articles, News and Events, Product Features, Products and Services
Securing the Agentic Endpoint
Secure the Agentic Endpoint. Traditional security misses the risk of AI agents. Learn how Palo Alto Networks and the Koi acquisition bring new protection.
AI and Cybersecurity, AI Security, Announcement, Cybersecurity, Must-Read Articles, News and Events, Products and Services
Cortex XDR is the only Certified Leader in AV-Comparatives EPR 7 years in a...
Modern enterprise security teams are locked in an escalating crisis where attackers levera...
The Frontier AI SOC Has Arrived
Cortex brings the latest frontier AI models into the SOC, letting analysts dynamically select the best model for each task while benefiting from state-of-the-art advances in AI.
Building an Agentic SOC: 7 Keys for Success
AI has handed security teams both a remarkable opportunity and a rather inconvenient deadline. Agentic AI can take on investigations, automate routine work and compress response times. Frontier AI is doing some...
Forrester Names Palo Alto Networks a Leader in Attack Surface Management
Palo Alto Networks was named a leader in attack surface management by Forrester for Cortex Xpanse.
Introducing Active Directory Security Posture Management in Cortex ITDR
Active Directory remains a primary target for identity-based attacks. A single risky configuration—whether a misconfigured certificate template, exces...
Introducing the Cortex MCP Server
This blog introduces the new Cortex MCP, bringing real-time intelligence from XSIAM data to your preferred LLM application.
What’s New in Cortex
The latest Cortex portfolio release delivers new frontier AI capabilities and personalized agents, making detection and remediation faster than ever.
Subscribe to Security Operations Blogs!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.
This site is protected by reCAPTCHA and the Google
Privacy Policy and
Terms of Service apply.