Security Operations

Must-Read Articles

Rapid Response to CVE-2025-31324: Mitigating SAP NetWeaver Visual Composer Exploitation

Protect against SAP NetWeaver's critical CVE-2025-31324 vulnerability with Cortex XSIAM's automated detection and response playbook for identifying and mitigating exploitation

Must-Read Articles

News and Events

Playbook of the Week

May 15, 2025

By Sasha Sokolovich

Security Operations

Must-Read Articles, News and Events, Playbook of the Week

What’s New for Cortex and Cortex Cloud (Apr ‘25)

Discover cutting-edge advancements in security ops with the latest Cortex releases. New features enhance threat prevention, platform coverage, automation, and attack surface tests for streamlined and robust sec...

May 05, 2025

By Scott Simkin

Must-Read Articles, Partner Integrations, Product Features, Uncategorized

Flexible Security Data Management with Cortex XSIAM & Cribl

Cortex XSIAM now integrates with Cribl to help security teams route high-quality data, fuel AI-driven operations, and detect threats fast with full vi...

Apr 29, 2025

By John Moran

Must-Read Articles, Product Features

Cortex Email Security Module: Defending Against Evolving Email Threats

Discover how Cortex Email Security Module detects sophisticated phishing attacks through AI-powered analysis, cross-domain correlation, and automated ...

Apr 28, 2025

By Yoav Zemah, Niv DavidPur, Luda Lazar and Gal Guzman

AI Security, Must-Read Articles, Points of View

Bruce Byrd on Public-Private Partnerships in Cybersecurity

Bruce Byrd offers strategic insights on cybersecurity evolution including public-private partnerships and AI impact.

Apr 24, 2025

By Dena De Angelo

AI and Cybersecurity, Must-Read Articles, Product Features, Use-Cases

NL2XQL: Turning Natural Language into Powerful Cybersecurity Querying

NL2XQL transforms natural language into powerful XQL queries, making cybersecurity investigations accessible to all security teams without requiring d...

Apr 23, 2025

By Gal Itzhak and Lior Perry

AI and Cybersecurity, Interview, Must-Read Articles, Points of View

SOC and Awe — How Autonomous Security Is Changing the Game

Learn how AI and cloud-native detection are revolutionizing SOCs into autonomous security ops. Clay Brothers of Unit 42 warns against traditional meth...

Mar 18, 2025

By Dena De Angelo

AI Security, Must-Read Articles, News & Events, Reports, Vulnerability Exposed

DeepSeek Unveiled — Exposing the GenAI Risks Hiding in Plain Sight

Palo Alto Networks saw a 1,800% increase in DeepSeek traffic, highlighting the need to stay vigilant against new AI tools outpacing security measures....

Feb 28, 2025

By Charles Choe and Himani Singh

Must-Read Articles, Product Features, Use-Cases

Democratize Threat Hunting with Cortex Copilot

Discover how Cortex Copilot democratizes threat hunting by enabling analysts to investigate security incidents with AI-powered guidance. Learn how a new threat hunter uncovered a privileged account breach.

Feb 19, 2025

By Jon David

Must-Read Articles, News and Events, Partner Integrations

Deloitte’s Cloud Migration Success: Transforming SecOps with Cortex XSOAR

For years, Deloitte's Cybersecurity Center had leveraged Cortex XSOAR on-premises to drive automation across its portfolio. Building on this success,...

Feb 06, 2025

By Bar Katzir

Announcement, Must-Read Articles, Product Features, Use-Cases

New Cortex Detectors for macOS Address Stealers and Malicious AppleScript

Cortex releases new detection analytics targeting macOS stealers and malicious applescript

Feb 04, 2025

By Dan Flaherty

Announcement, Must-Read Articles, News and Events

What’s New in Cortex: The Latest Innovations for the World’s #1 SecOps Plat...

Cortex SOC platform introduces new enhancements and features across the entire portfolio including a brand new integration with Prisma Access Browser,...

Feb 04, 2025

By Scott Simkin

Must-Read Articles, Product Features, Uncategorized

Detecting Threats with Microsoft Graph Activity Logs

Discover how Microsoft Graph API is used as an attack vector by threat actors through a real-world attack scenario. Find out why monitoring Microsoft Graph activity logs is important and how Cortex delivers tai...

Feb 02, 2025

By Eden Elazar

Must-Read Articles, Points of View, Predictions

Security Operations in 2025 and Beyond

Learn 2025 trends and challenges from Cortex leadership as organizations face cyberattacks and signs of cybercriminal adoption of AI.

Dec 12, 2024

By Shailesh Rao

Must-Read Articles, News and Events

MITRE ATT&CK 2024: Raising the Bar for Security Testing

MITRE's 2024 ATT&CK evaluations have evolved, testing vendors against Ransomware as a Service and DPRK threats, introducing false positive detection.

Dec 10, 2024

By Peter Havens

Must-Read Articles, Product Features

Identify 60 Additional Server Protocols with Cortex Xpanse

Discover how Cortex Xpanse now identifies 60 additional server protocols in your attack surface, protecting against emerging threats across proxy, net...

Nov 12, 2024

By Ruby Rios

Must-Read Articles, Product Features

Optimize Analyst Workflows with Cortex Copilot

Discover how Cortex Copilot streamlines security analyst workflows, reduces burnout, and accelerates incident investigations by leveraging AI to automate mundane tasks.

Nov 07, 2024

By Yitzy Tannenbaum

Must-Read Articles, Product Features, Uncategorized

Cutting Through the Noise: Simplifying SIEM Alerts with Cortex

Discover how integrating Cortex XSOAR with Splunk SIEM reduces false positives, automates alert triage, and enhances cybersecurity efficiency.

Oct 16, 2024

By Nadav Shai Kanon

Announcement, Must-Read Articles, News and Events, Product Features

Cortex Copilot - Another Step Forward in SOC Transformation

Discover how Cortex Copilot, an AI-powered security assistant, transforms SOC operations by speeding up investigations and optimizing analyst workflow...

Oct 15, 2024

By Gil Blum

Must-Read Articles, Product Features, Use-Cases

Bye Whack-a-Mole: The New Cortex Generic Persistence Analytics Module

Discover Palo Alto Networks' new Generic Persistence Analytics module, detecting malware persistence across techniques for enhanced cybersecurity.

Oct 10, 2024

By Tom Fakterman, Yoav Zemah and Matan Haim Guez

Announcement, Must-Read Articles, Product Features

Introducing Cortex Canvas: Unleashing the Power of Visual Storytelling

Discover Cortex Canvas: Visualize cyber incidents, enhance threat hunting, and boost SOC collaboration with dynamic attack diagrams.

Oct 09, 2024

By Bar Katzir

Load more blogs

Get the latest news, invites to events, and threat alerts

By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement.

Security Operations

Must-Read Articles

Rapid Response to CVE-2025-31324: Mitigating SAP NetWeaver Visual Composer Exploitation

Security Operations

What’s New for Cortex and Cortex Cloud (Apr ‘25)

Flexible Security Data Management with Cortex XSIAM & Cribl

Cortex Email Security Module: Defending Against Evolving Email Threats

Bruce Byrd on Public-Private Partnerships in Cybersecurity

NL2XQL: Turning Natural Language into Powerful Cybersecurity Querying

SOC and Awe — How Autonomous Security Is Changing the Game

DeepSeek Unveiled — Exposing the GenAI Risks Hiding in Plain Sight

Democratize Threat Hunting with Cortex Copilot

Deloitte’s Cloud Migration Success: Transforming SecOps with Cortex XSOAR

New Cortex Detectors for macOS Address Stealers and Malicious AppleScript

What’s New in Cortex: The Latest Innovations for the World’s #1 SecOps Plat...

Detecting Threats with Microsoft Graph Activity Logs

Security Operations in 2025 and Beyond

MITRE ATT&CK 2024: Raising the Bar for Security Testing

Identify 60 Additional Server Protocols with Cortex Xpanse

Optimize Analyst Workflows with Cortex Copilot

Cutting Through the Noise: Simplifying SIEM Alerts with Cortex

Cortex Copilot - Another Step Forward in SOC Transformation

Bye Whack-a-Mole: The New Cortex Generic Persistence Analytics Module

Introducing Cortex Canvas: Unleashing the Power of Visual Storytelling

Get the latest news, invites to events, and threat alerts

Get the latest news, invites to events, and threat alerts

Products and Services

Company

Popular Links

Security Operations

Must-Read Articles

Rapid Response to CVE-2025-31324: Mitigating SAP NetWeaver Visual Composer Exploitation

Security Operations

Subscribe to Security Operations Blogs!

Get the latest news, invites to events, and threat alerts

Get the latest news, invites to events, and threat alerts

Products and Services

Company

Popular Links