Blog
Security Operations

Security Operations

Rapid Response to CVE-2025-31324: Mitigating SAP NetWeaver Visual Composer Exploitation

Protect against SAP NetWeaver's critical CVE-2025-31324 vulnerability with Cortex XSIAM's automated detection and response playbook for identifying and mitigating exploitation

Must-Read Articles

News and Events

Playbook of the Week

May 15, 2025

By Sasha Sokolovich

Security Operations

Announcement, News and Events, Product Features, Products and Services

Introducing XSIAM 3.0

XSIAM is expanding from reactive response to proactive defense, transforming exposure management and email security with unified data, AI and automation.

Apr 28, 2025

By Gonen Fink

Must-Read Articles, News and Events, Playbook of the Week

What’s New for Cortex and Cortex Cloud (Apr ‘25)

Discover cutting-edge advancements in security ops with the latest Cortex releases. New features enhance threat prevention, platform coverage, automation, and attack surface tests for streamlined and robust sec...

May 05, 2025

By Scott Simkin

Playbook of the Week

Playbook Creation Reimagined: The Intuitive Approach to Security Automation

Continuing to innovate on our market-leading SOAR to simplify security operations, ensure ease of use in the adoption of automation.

May 01, 2025

By Alon Yardeni

AI and Cybersecurity, Uncategorized, Use-Cases

No More Guessing: Accurate AI Security with Palo Alto Networks

Learn how our rigorous evaluation techniques ensure that Palo Alto Networks’ precision AI solutions deliver the accuracy and reliability you need.

Apr 30, 2025

By Pamela Toman

More Blogs

Displaying 1—16 of

494 results

Sort By:

Must-Read Articles, Partner Integrations, Product Features, Uncategorized

Flexible Security Data Management with Cortex XSIAM & Cribl

Cortex XSIAM now integrates with Cribl to help security teams route high-quality data, fuel AI-driven operations, and detect threats fast with full vi...

Apr 29, 2025

By John Moran

Must-Read Articles, Product Features

Cortex Email Security Module: Defending Against Evolving Email Threats

Discover how Cortex Email Security Module detects sophisticated phishing attacks through AI-powered analysis, cross-domain correlation, and automated ...

Apr 28, 2025

By Yoav Zemah, Niv DavidPur, Luda Lazar and Gal Guzman

AI Security, Must-Read Articles, Points of View

Bruce Byrd on Public-Private Partnerships in Cybersecurity

Bruce Byrd offers strategic insights on cybersecurity evolution including public-private partnerships and AI impact.

Apr 24, 2025

By Dena De Angelo

AI and Cybersecurity, Must-Read Articles, Product Features, Use-Cases

NL2XQL: Turning Natural Language into Powerful Cybersecurity Querying

NL2XQL transforms natural language into powerful XQL queries, making cybersecurity investigations accessible to all security teams without requiring d...

Apr 23, 2025

By Gal Itzhak and Lior Perry

Playbook of the Week

Creating an Automated Workflow for Account Lockout Resolution

This playbook automates and speeds up response to excessive user account lockouts, which could indicate a credential-based attack.

Apr 10, 2025

By Ido Van Dijk

Playbook of the Week, Uncategorized

Automating Response to Unauthorized Scheduled Task Executions

Discover how Cortex XSIAM automates detection and response to malicious scheduled tasks that reference external HTTP/FTP sources for improved security...

Apr 03, 2025

By Omri Itzhak

Playbook of the Week, Uncategorized

Automating Response to Unauthorized Tor Logins

The A Successful Login from Tor playbook in Cortex XSIAM enhances security teams’ ability to detect and respond to unauthorized access attempts using Tor. By automating identity verification, automated remediat...

Mar 27, 2025

By Arik Day

Playbook of the Week, Unkategorisiert

Automating Response to Suspicious Process Executions

This playbook automates the investigation and response to suspicious process executions triggered by a scheduled task.

Mar 20, 2025

By Omri Itzhak

Announcement, Event, News and Events

Palo Alto Networks Helps Secure Black Hat Asia 2025

Palo Alto Networks secures Black Hat Asia 2025 with pride. Our NOC and SOC involvement ensures uninterrupted conference experience for attendees.

Mar 19, 2025

By James Holland and Jason Reverri

AI and Cybersecurity, Interview, Must-Read Articles, Points of View

SOC and Awe — How Autonomous Security Is Changing the Game

Learn how AI and cloud-native detection are revolutionizing SOCs into autonomous security ops. Clay Brothers of Unit 42 warns against traditional meth...

Mar 18, 2025

By Dena De Angelo

Playbook of the Week

Automated Rapid Response to Suspicious Remote Scheduled Task Creation

This playbook automates the identification and remediation of persistent threats that leverage scheduled tasks to execute malicious payloads across endpoints.

Mar 13, 2025

By Omri Itzhak

Playbook of the Week, Product Features, Products and Services, Unit 42

Announcing Unit 42 Managed XSIAM — Redefining 24/7 Managed SecOps

Palo Alto Networks announces Unit 42 Managed XSIAM, a solution that provides 24/7 expert-led defense across every attack surface.

Mar 11, 2025

By Sharon Maydar

Playbook of the Week

Automating Response to Suspicious SaaS Access From a Tor Exit Node

This playbook shows how a SecOps team can use Cortex XSIAM to automate and speed response to suspicious SaaS access alerts involving a Tor exit node.

Mar 06, 2025

By Arik Day

Playbook of the Week, Uncategorized

Automating Response to Credential Dumping Attacks

Automated playbook designed to detect, contain and remediate credential dumping activity.

Feb 27, 2025

By Omri Itzhak

Product Features, Uncategorized, Use-Cases

Cortex Xpanse Protects Against Malicious Domain Takeover Techniques

Malicious domain takeovers have become an increasing concern for businesses as attackers exploit vulnerabilities by gaining unauthorized access to a d...

Feb 26, 2025

By Yvonne Le

Playbook of the Week

Automating Response to Unauthorized User Account Creation

This playbook automates incident response actions to identify, investigate, and remediate unauthorized hidden user account creation.

Feb 20, 2025

By Ido Van Dijk

Load more blogs

More Blogs

Displaying 1—16 of

439 results

Sort By:

Must-Read Articles, News and Events

New Cloud Location Innovates and Strengthens Presence in Indonesia

Find out how Palo Alto Networks’ secure cloud infrastructure is aiding the growth of businesses in Indonesia, enabling them to leverage advanced cloud...

Jul 01, 2024

By The Prisma Cloud Team

Must-Read Articles, Product Features, Products and Services

AI, Cybersecurity and the Rise of Large Language Models

Discover how AI impacts threat detection, incident response and risk management, and learn about strategies for secure AI integration.

Apr 02, 2024

By Yitzy Tannenbaum

Announcement, Must-Read Articles, News and Events, Product Features, Products and Services

Forrester Names Palo Alto Networks a Leader in XDR

Palo Alto Networks was named a leader in extended detection and response platforms by Forrester for Cortex XDR.

Jun 03, 2024

By Gonen Fink

Announcement, Products and Services

Palo Alto Networks Excels in MITRE Managed Services Evaluation

Unit 42 MDR identified the most important details of the cyberthreat in the MITRE managed services evaluation - learn more.

Jun 18, 2024

By Sharon Maydar

Announcement, Must-Read Articles, News and Events, Products and Services

Palo Alto Networks Recognized as a Leader in the 2023 Gartner Magic Quadran...

Palo Alto Networks was named a leader in endpoint protection platforms by Gartner for Cortex XDR.

Jan 12, 2024

By Gonen Fink

Company & Culture, Must-Read Articles, Product Features, Products and Services

AI Provides an Rx for Cybersecurity in Healthcare

Tapan Mehta discusses the challenges, opportunities and future of AI in protecting healthcare infrastructure and data.

Jul 10, 2024

By Dena De Angelo and Tapan Mehta

Announcement, Public Sector

Advancing Innovation and Harnessing AI to Secure the Homeland

Before the House Committee on Homeland Security, Unit 42 shares the Palo Alto Networks perspective on the intersection of AI and cybersecurity.

Jun 12, 2024

By Michael Sikorski

Announcement, Must-Read Articles, News and Events, Products and Services

ONLY Cortex Delivers 100% Protection and Detection in MITRE Engenuity

MITRE Engenuity ATT&CK Evaluations have been released. This year, Cortex is the only vendor with 100% prevention and analytic detection.

Sep 20, 2023

By Peter Havens

Must-Read Articles, Points of View, Products and Services

The Dark Side of AI in Cybersecurity — AI-Generated Malware

Bar Matalon and Rem Dudas shed light on their groundbreaking research into AI-generated malware and predictions for the future of AI in cybersecurity....

May 15, 2024

By Dena De Angelo

Must-Read Articles, News and Events, Product Features

Introducing the New Cortex Shellcode AI Protection: A Precision AI-Driven M...

Discover Palo Alto Networks' new Cortex Shellcode AI Protection Module. Learn how Precision AI™ detects and prevents elusive shellcode attacks in real...

Jul 03, 2024

By Cortex Research Team

Company & Culture, Customer Spotlight, Must-Read Articles, Product Features, Products and Services, Use-Cases

AI Powers Sabre's Enhanced Threat Detection & Response

Precision AI by Palo Alto Networks helps security teams trust AI outcomes using security-specific models to automate det...

May 28, 2024

By Dena De Angelo

Company & Culture, Products and Services, Unit 42

Creating a Security Program with Less Complexity and More Visibility

Our 2024 Incident Response Report shows how vulnerabilities go unpatched, and critical resources sit exposed.

May 23, 2024

By Unit 42

Playbook of the Week, Uncategorized

Playbook of the Week: Automating Management of XDR Identity Analytics Alert...

Playbook that automates management of XDR identity analytics alerts for speedier response to identity threats.

Mar 07, 2024

By Omri Itzhak

Announcement, Must-Read Articles, News and Events, Product Features

What’s Next in Cortex - New Wave of Innovations in Cortex (June 2024 Releas...

Discover the latest innovations in Cortex products: XSIAM 2.3, XDR 3.11, Xpanse 2.6, and XSOAR 8.7. Enhance SecOps efficiency and threat prevention

Jul 02, 2024

By Gonen Fink

Must-Read Articles, Non classifié(e), Product Features

A Deep Dive Into Malicious Direct Syscall Detection

This blog explains how attackers use direct syscalls to overcome most EDR solutions, by first discussing the conventional Windows syscall flow and how most EDR solutions monitor those calls.

Feb 13, 2024

By Or Chechik and Ofir Ozer