Blog
Security Operations

Security Operations

New Cortex XDR Integration with Claude Cowork Secures Desktop AI Agents

New Cortex XDR Integration with Claude Cowork Secures Desktop AI Agents

AI agents working directly on the desktop offer new ways to automate complex tasks, yet they operate outside traditional endpoint controls and pose unacceptable risks to many security leaders. Today, we're announcing a new Cortex XDR integration with Claude Cowork to deliver visibility and threat detection for this new agentic workspace.

Products and Services

Nov 02, 2026

By Daphna Shemesh

Security Operations

Must-Read Articles

Product Features

News and Events

Partner Integrations

Playbook of the Week

Transforming Email Incident Response: Unifying Alert Triage, AI Summaries, and Evasion Analysis with Cortex Advanced Email Security

AI and Cybersecurity, Email Security, Endpoint security, Uncategorized

Transforming Email Incident Response: Unifying Alert Triage, AI Summaries, ...

Email remains the primary entry point for modern cyberattacks, leaving SOC teams under constant pressure. Analysts face a relentless stream of securit...

Nov 05, 2026

By Sehrish Khan and Guy Mazaltrim

AI and Cybersecurity, News and Events, Threat Intelligence

How Cortex AES Protects Against Compromised Claude Code Extensions

On October 29, 2026, attackers turned a trusted developer tool into a potential backdoor. Malicious versions of the Claude Code extension were distrib...

Nov 03, 2026

By Yuval Ronen and Anna Qi

Meet Cortex XSIAM 4.0: AI That Knows Your Enterprise

Must-Read Articles, News and Events, Product Features, Uncategorized

Meet Cortex XSIAM 4.0: AI That Knows Your Enterprise

Moving the SOC closer to autonomy with powerful AI agents, expanded protection for enterprise AI, and blazing-fast search

Nov 02, 2026

By Kasey Cross, Greg Smith and Jane Goh

Mitigating PHP2Shell Vulnerabilities (CVE-2026-109618 & CVE-2026-109619) With the Cortex Platform

Cybersecurity, Must-Read Articles, News and Events

Mitigating PHP2Shell Vulnerabilities (CVE-2026-109618 & CVE-2026-10961...

Learn how unified security platforms like Cortex XSIAM accelerate vulnerability remediation for critical flaws like the PHP2Shell vulnerabilities usin...

Oct 23, 2026

By Greg Smith

More Blogs

Displaying 1—16 of

627 results

Sort By:

Unifying Identity Posture and Threat Detection with the Cortex Platform

Cloud Security, Identity Security, ISPM, ITDR, Security Operations

Unifying Identity Posture and Threat Detection with the Cortex Platform

Discover how Cortex Cloud and Cortex ITDR unify identity posture management with real-time threat detection and response across cloud, SaaS and on-pre...

Nov 05, 2026

By Andrea Halsted and David Trigano

Introducing Cortex XDR 6.0: Built for Endpoints. Ready for Agents.

AI and Cybersecurity, AI Security, Announcement, Cybersecurity, Must-Read Articles, News and Events, Product Features, Use-Cases

Introducing Cortex XDR 6.0: Built for Endpoints. Ready for Agents.

Modern endpoints are evolving at machine speed with an ungoverned AI ecosystem. Driven by...

Oct 19, 2026

By Daphna Shemesh, Tali Ash and Alice Nguyen

Reinventing Endpoint Security with Cortex XDR One

Announcement, Cybersecurity, Products and Services

Reinventing Endpoint Security with Cortex XDR One

Enterprises spent the last two years racing to capture the vast potential of AI, authorizing AI agents to touch production code, internal databases, customer tickets and financial ledgers. Because these agents...

Oct 19, 2026

By Daphna Shemesh

AI Didn’t Create the Data Security Problem. It Made It Impossible to Ignore.

AI Didn’t Create the Data Security Problem. It Made It Impossible to Ignore...

Data security in the age of AI requires evolving beyond traditional DLP to secure data access, posture, and real-time risks across clouds and agents.

Oct 13, 2026

By Sharon Farber

Announcement, Products and Services

Palo Alto Networks is named a Leader in the 2026 IDC MarketScape for Modern...

The enterprise landscape is undergoing a monumental shift. AI agents are transforming productivity, executing complex tasks autonomously across our di...

Oct 12, 2026

By Daphna Shemesh

Cortex AES Extends Code Package Visibility to Go

AI and Cybersecurity, AI Security, Cybersecurity, Must-Read Articles, Product Features, Use-Cases

Cortex AES Extends Code Package Visibility to Go

Discover how Cortex AES extends supply chain security to Go modules across Windows and macOS endpoints. Flag malicious packages, retracted versions, a...

Oct 07, 2026

By Belle Kriger and Alice Nguyen

GlassWorm Goes Mac: Fresh Infrastructure, New Tricks

AI and Cybersecurity

GlassWorm Goes Mac: Fresh Infrastructure, New Tricks

Editor’s note: This article was originally published by Koi Security on December 29, 2025. Koi is now part of Palo Alto Networks, and this article has been adapted for the Palo Alto Networks blog. The technical...

Oct 01, 2026

By Gal Hachamov

What the 2026 OWASP Top 10 Tells Us About the Growing Role of Data Security in AI

AI and Cybersecurity, Data Security Platform, DDR, DLP, DSPM, Uncategorized

What the 2026 OWASP Top 10 Tells Us About the Growing Role of Data Security...

OWASP Top 10 2026 reveals how AI security is changing as AI gains greater access to enterprise data, tools and autonomy, making data security more cri...

Sep 28, 2026

By Sharon Farber and Roni Yaari

Cortex XDR is the only Certified Leader in AV-Comparatives EPR 7 years in a row

AI and Cybersecurity, AI Security, Announcement, Cybersecurity, Must-Read Articles, News and Events, Products and Services

Cortex XDR is the only Certified Leader in AV-Comparatives EPR 7 years in a...

Modern enterprise security teams are locked in an escalating crisis where attackers levera...

Sep 16, 2026

By Emran Mazumder

Cortex Data Security – New AI-Native Operating Model for Protecting Data – Goes GA

Data Security Platform, DDR, DLP, DSPM, Uncategorized

Cortex Data Security – New AI-Native Operating Model for Protecting Data – ...

We’re pleased to announce that after two months in public preview, Cortex Data Security is now generally available. And we’re already looking ahead to...

Sep 15, 2026

By Yotam Ben-Ezra

Beyond the SEG: Why Single-Domain Email Defenses Break Down in the Modern SOC

AI and Cybersecurity, AI Security, Cloud Workload Protection Platform, Cybersecurity, Threat Intelligence, Use-Cases

Beyond the SEG: Why Single-Domain Email Defenses Break Down in the Modern S...

Generative AI has fundamentally rewritten the rules of social engineering. Using LLMs, adversaries now automate open-sou...

Sep 10, 2026

By Sehrish Khan and Guy Mazaltrim

Building an Agentic SOC: 7 Keys for Success

AI and Cybersecurity, Must-Read Articles, Product Features

Building an Agentic SOC: 7 Keys for Success

AI has handed security teams both a remarkable opportunity and a rather inconvenient deadline. Agentic AI can take on investigations, automate routine work and compress response times. Frontier AI is doing some...

Sep 09, 2026

By Kasey Cross

Cortex XDR Scores Perfect 100% in SE Labs 2026 Ransomware Test

AI and Cybersecurity, Announcement, Cybersecurity, Must-Read Articles, Product Features, Products and Services, Use-Cases

Cortex XDR Scores Perfect 100% in SE Labs 2026 Ransomware Test

Ransomware is accelerating at machine speed as adversaries harness frontier AI models to a...

Sep 09, 2026

By Emran Mazumder

Built for Resilience: How Cortex XDR Overcomes Modern SOC Architectural Limitations

Built for Resilience: How Cortex XDR Overcomes Modern SOC Architectural Lim...

Discover how Cortex XDR unifies multi-domain telemetry, eliminates logging cost penalties, and speeds up Linux threat response.

Sep 04, 2026

By Sehrish Khan

AI and Cybersecurity, Must-Read Articles, Product Features, Products and Services

Orchestrating the Agentic SOC: A Practical Guide to Model Context Protocol

Learn how Model Context Protocol (MCP) connects Cortex XSIAM, AgentiX, XDR and Cloud to your SOC tool stack, to build a unified AI SecOps ecosystem.

Sep 03, 2026

By Jane Goh

Introducing Active Directory Security Posture Management in Cortex ITDR

AI and Cybersecurity, News and Events, Uncategorized

Introducing Active Directory Security Posture Management in Cortex ITDR

Active Directory remains a primary target for identity-based attacks. A single risky configuration—whether a misconfigured certificate template, exces...

Aug 27, 2026

By Stav Setty and Shachar Roitman

Load more blogs

Load more blogs

More Blogs

Displaying 1—16 of

623 results

Sort By:

Reinventing Endpoint Security with Cortex XDR One

Announcement, Cybersecurity, Products and Services

Reinventing Endpoint Security with Cortex XDR One

Enterprises spent the last two years racing to capture the vast potential of AI, authorizing AI agents to touch production code, internal databases, customer tickets and financial ledgers. Because these agents...

Oct 19, 2026

By Daphna Shemesh

Cortex Data Security – New AI-Native Operating Model for Protecting Data – Goes GA

Data Security Platform, DDR, DLP, DSPM, Uncategorized

Cortex Data Security – New AI-Native Operating Model for Protecting Data – ...

We’re pleased to announce that after two months in public preview, Cortex Data Security is now generally available. And we’re already looking ahead to...

Sep 15, 2026

By Yotam Ben-Ezra

AI and Cybersecurity, Must-Read Articles, News and Events, Product Features, Uncategorized, Use-Cases

Bridging the Gap: An Unprecedented Approach to Browser and Endpoint Securit...

The enterprise workforce now operates almost entirely within the web browser. In fact, employees do roughly 85% of their...

Aug 06, 2026

By Sehrish Khan, Maxim Shifrin, Kritika Singhal and Gal Shalev

Identity Meets the SOC: Redefining the Last Perimeter

AI and Cybersecurity, AI Security, Announcement, Cybersecurity, Must-Read Articles, News and Events, Product Features, Products and Services, Use-Cases

Identity Meets the SOC: Redefining the Last Perimeter

Let’s start with a hard truth that every security leader is waking up to: adversaries aren...

Aug 06, 2026

By Emran Mazumder and David Trigano

Cortex XDR Scores Perfect 100% in SE Labs 2026 Ransomware Test

AI and Cybersecurity, Announcement, Cybersecurity, Must-Read Articles, Product Features, Products and Services, Use-Cases

Cortex XDR Scores Perfect 100% in SE Labs 2026 Ransomware Test

Ransomware is accelerating at machine speed as adversaries harness frontier AI models to a...

Sep 09, 2026

By Emran Mazumder

Cortex Cloud — Unified Efficiency, Now with Dual FedRAMP Authority

Announcement, News and Events, Points of View

Cortex Cloud — Unified Efficiency, Now with Dual FedRAMP Authority

Cortex Cloud achieved FedRAMP High and Moderate authorizations since its Feb 2025 launch, highlighting its secure cloud commitment.

May 21, 2025

By Eric Trexler

2026 Unit 42 Global Incident Response Report — Attacks Now 4x Faster

Announcement, Must-Read Articles, Threat Intelligence, Unit 42

2026 Unit 42 Global Incident Response Report — Attacks Now 4x Faster

Attackers are leveraging identity, AI, and supply chain exposure. Unit 42's Global 2026 IR Report reveals faster, broader, harder-to-contain threats.

Feb 17, 2026

By Sam Rubin

Introducing Cortex XDR 6.0: Built for Endpoints. Ready for Agents.

AI and Cybersecurity, AI Security, Announcement, Cybersecurity, Must-Read Articles, News and Events, Product Features, Use-Cases

Introducing Cortex XDR 6.0: Built for Endpoints. Ready for Agents.

Modern endpoints are evolving at machine speed with an ungoverned AI ecosystem. Driven by...

Oct 19, 2026

By Daphna Shemesh, Tali Ash and Alice Nguyen

Introducing Unit 42 Managed XSIAM 2.0

Announcement, Products and Services, Threat Intelligence, Unit 42

Introducing Unit 42 Managed XSIAM 2.0

Unit 42 Managed XSIAM 2.0 delivers a 24/7 managed SOC with continuous detection, investigation, and full-cycle remediation.

Feb 17, 2026

By Sharon Maydar

Securing the Agentic Endpoint

AI Security, Announcement, Must-Read Articles, News and Events, Product Features, Products and Services

Securing the Agentic Endpoint

Secure the Agentic Endpoint. Traditional security misses the risk of AI agents. Learn how Palo Alto Networks and the Koi acquisition bring new protection.

Feb 17, 2026

By Hadar Oren

Cortex XDR is the only Certified Leader in AV-Comparatives EPR 7 years in a row

AI and Cybersecurity, AI Security, Announcement, Cybersecurity, Must-Read Articles, News and Events, Products and Services

Cortex XDR is the only Certified Leader in AV-Comparatives EPR 7 years in a...

Modern enterprise security teams are locked in an escalating crisis where attackers levera...

Sep 16, 2026

By Emran Mazumder

The Frontier AI SOC Has Arrived

AI and Cybersecurity, Must-Read Articles

The Frontier AI SOC Has Arrived

Cortex brings the latest frontier AI models into the SOC, letting analysts dynamically select the best model for each task while benefiting from state-of-the-art advances in AI.

Jun 11, 2026

By Ariel Blaier and Jane Goh

Building an Agentic SOC: 7 Keys for Success

AI and Cybersecurity, Must-Read Articles, Product Features

Building an Agentic SOC: 7 Keys for Success

AI has handed security teams both a remarkable opportunity and a rather inconvenient deadline. Agentic AI can take on investigations, automate routine work and compress response times. Frontier AI is doing some...

Sep 09, 2026

By Kasey Cross

Forrester Names Palo Alto Networks a Leader in Attack Surface Management

Announcement, News and Events, Products and Services

Forrester Names Palo Alto Networks a Leader in Attack Surface Management

Palo Alto Networks was named a leader in attack surface management by Forrester for Cortex Xpanse.

Sep 24, 2024

By Greg Heon

Introducing Active Directory Security Posture Management in Cortex ITDR

AI and Cybersecurity, News and Events, Uncategorized

Introducing Active Directory Security Posture Management in Cortex ITDR

Active Directory remains a primary target for identity-based attacks. A single risky configuration—whether a misconfigured certificate template, exces...

Aug 27, 2026

By Stav Setty and Shachar Roitman

Introducing the Cortex MCP Server

AI and Cybersecurity, Automation of the Week, Must-Read Articles

Introducing the Cortex MCP Server

This blog introduces the new Cortex MCP, bringing real-time intelligence from XSIAM data to your preferred LLM application.

Dec 04, 2025

By Abigael Levy and Tarin Waizman

Load more blogs

Load more blogs

Get the latest news, invites to events, and threat alerts

Get the latest news, invites to events, and threat alerts

By submitting this form, I understand my personal data will be processed in accordance with Palo Alto Networks Privacy Statement and Terms of Use.