* [Blog](https://www.paloaltonetworks.com/blog) * [Security Operations](https://www.paloaltonetworks.com/blog/security-operations/) * Product Features # Security Operations ## Product Features [![Cortex AES Extends Code Package Visibility to Go](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/10/Go-Modules-LinkedIn-post-scaled.jpg)](https://www.paloaltonetworks.com/blog/security-operations/cortex-aes-extends-code-package-visibility-to-go/) [Cortex AES Extends Code Package Visibility to Go \------------------------------------------------](https://www.paloaltonetworks.com/blog/security-operations/cortex-aes-extends-code-package-visibility-to-go/) Discover how Cortex AES extends supply chain security to Go modules across Windows and macOS endpoints. Flag malicious packages, retracted versions, and unmaintained code before they compromise your cloud-native infrastructure. [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown) [AI Security](https://www.paloaltonetworks.com/blog/category/ai-security/?ts=markdown) [Cybersecurity](https://www.paloaltonetworks.com/blog/category/cybersecurity/?ts=markdown) [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown) [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) [Use-Cases](https://www.paloaltonetworks.com/blog/security-operations/category/use-cases/?ts=markdown) Oct 07, 2026 By [Belle Kriger](https://www.paloaltonetworks.com/blog/author/belle-kriger/?ts=markdown "Posts by Belle Kriger") and [Alice Nguyen](https://www.paloaltonetworks.com/blog/author/alice-nguyen/?ts=markdown "Posts by Alice Nguyen") ## Security Operations *** ** * ** *** [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown) *** ** * ** *** [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) *** ** * ** *** [Use-Cases](https://www.paloaltonetworks.com/blog/security-operations/category/use-cases/?ts=markdown) *** ** * ** *** [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown) *** ** * ** *** [Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown) *** ** * ** *** [Playbook of the Week](https://www.paloaltonetworks.com/blog/security-operations/category/playbook-of-the-week/?ts=markdown) *** ** * ** *** ![Building an Agentic SOC: 7 Keys for Success](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/09/Building-an-Agentic-SOC.jpg) [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) ## [Building an Agentic SOC: 7 Keys for Success](https://www.paloaltonetworks.com/blog/security-operations/building-an-agentic-soc/) AI has handed security teams both a remarkable opportunity and a rather inconvenient deadline. Agentic AI can take on investigations, automate routine work and compress response times. Frontier AI is doing some... Sep 09, 2026 By [Kasey Cross](https://www.paloaltonetworks.com/blog/author/kasey-cross/?ts=markdown "Posts by Kasey Cross") ![Cortex XDR Scores Perfect 100% in SE Labs 2026 Ransomware Test](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/09/Cityscape.jpg) [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Cybersecurity](https://www.paloaltonetworks.com/blog/category/cybersecurity/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Use-Cases](https://www.paloaltonetworks.com/blog/security-operations/category/use-cases/?ts=markdown) ## [Cortex XDR Scores Perfect 100% in SE Labs 2026 Ransomware Test](https://www.paloaltonetworks.com/blog/security-operations/cortex-xdr-scores-perfect-100-in-se-labs-2026-ransomware-test/) Ransomware is accelerating at machine speed as adversaries harness frontier AI models to a... Sep 09, 2026 By [Emran Mazumder](https://www.paloaltonetworks.com/blog/author/emran-mazumder/?ts=markdown "Posts by Emran Mazumder") [](https://www.paloaltonetworks.com/blog/security-operations/mcp-client/) [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) ## [Orchestrating the Agentic SOC: A Practical Guide to Model Context Protocol](https://www.paloaltonetworks.com/blog/security-operations/mcp-client/) Learn how Model Context Protocol (MCP) connects Cortex XSIAM, AgentiX, XDR and Cloud to your SOC tool stack, to build a unified AI SecOps ecosystem. Sep 03, 2026 By [Jane Goh](https://www.paloaltonetworks.com/blog/author/jane-goh/?ts=markdown "Posts by Jane Goh") ![A Quarter of Innovation with Koi Agentic Endpoint Security](https://www.paloaltonetworks.com/blog/wp-content/uploads/2021/07/Woman-Working-at-Computer.jpg) [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Uncategorized](https://www.paloaltonetworks.com/blog/category/uncategorized/?ts=markdown), [Use-Cases](https://www.paloaltonetworks.com/blog/security-operations/category/use-cases/?ts=markdown) ## [A Quarter of Innovation with Koi Agentic Endpoint Security](https://www.paloaltonetworks.com/blog/security-operations/a-quarter-of-innovation-with-koi-agentic-endpoint-security/) Protect endpoints from autonomous AI risks with Koi Agentic Endpoint Security---get full visibility, runtime policy control, and automated remediation.... Aug 18, 2026 By [Alice Nguyen](https://www.paloaltonetworks.com/blog/author/alice-nguyen/?ts=markdown "Posts by Alice Nguyen"), [Tali Ash](https://www.paloaltonetworks.com/blog/author/tali-ash/?ts=markdown "Posts by Tali Ash") and [Netta Zohar](https://www.paloaltonetworks.com/blog/author/netta-zohar/?ts=markdown "Posts by Netta Zohar") ![Finland, Meet the AI-Driven SOC](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/08/Meeting.jpg) [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) ## [Finland, Meet the AI-Driven SOC](https://www.paloaltonetworks.com/blog/security-operations/cortex-cloud-location-finland/) Cortex services are now available from a cloud location in Finland, helping organizations support local data residency and modern security operations. Aug 12, 2026 By [Kasey Cross](https://www.paloaltonetworks.com/blog/author/kasey-cross/?ts=markdown "Posts by Kasey Cross") ![Your EDR is Blind to the Agentic Frontier](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/08/AdobeStock_640765504-scaled.jpeg) [Agent Security](https://www.paloaltonetworks.com/blog/ai-security/category/agent-security/?ts=markdown), [Agentic Identity Security](https://www.paloaltonetworks.com/blog/identity-security/category/agentic-identity-security/?ts=markdown), [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [AI Governance](https://www.paloaltonetworks.com/blog/ai-security/category/ai-governance/?ts=markdown), [AI Security](https://www.paloaltonetworks.com/blog/cloud-security/category/ai-security/?ts=markdown), [Announcement](https://www.paloaltonetworks.com/blog/cloud-security/category/announcement/?ts=markdown), [Assess AI Risks](https://www.paloaltonetworks.com/blog/ai-security/category/assess-ai-risks/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Secure AI Infrastructure](https://www.paloaltonetworks.com/blog/ai-security/category/secure-ai-infrastructure/?ts=markdown), [Secure GenAI Use](https://www.paloaltonetworks.com/blog/ai-security/category/secure-genai-use/?ts=markdown) ## [Your EDR is Blind to the Agentic Frontier](https://www.paloaltonetworks.com/blog/security-operations/your-edr-is-blind-to-the-agentic-frontier/) We are living through a massiv... Aug 10, 2026 By [Anna Qi](https://www.paloaltonetworks.com/blog/author/anna-qi/?ts=markdown "Posts by Anna Qi") and [Tali Ash](https://www.paloaltonetworks.com/blog/author/tali-ash/?ts=markdown "Posts by Tali Ash") [](https://www.paloaltonetworks.com/blog/2026/08/bridging-the-gap-an-unprecedented-approach-to-browser-and-endpoint-security/) [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Uncategorized](https://www.paloaltonetworks.com/blog/category/uncategorized/?ts=markdown), [Use-Cases](https://www.paloaltonetworks.com/blog/security-operations/category/use-cases/?ts=markdown) ## [Bridging the Gap: An Unprecedented Approach to Browser and Endpoint Securit...](https://www.paloaltonetworks.com/blog/2026/08/bridging-the-gap-an-unprecedented-approach-to-browser-and-endpoint-security/) The enterprise workforce now operates almost entirely within the web browser. In fact, employees do roughly 85% of their... Aug 06, 2026 By [Sehrish Khan](https://www.paloaltonetworks.com/blog/author/sehrish-khan/?ts=markdown "Posts by Sehrish Khan"), [Maxim Shifrin](https://www.paloaltonetworks.com/blog/author/maxim-shifrin/?ts=markdown "Posts by Maxim Shifrin"), [Kritika Singhal](https://www.paloaltonetworks.com/blog/author/kritika-singhal/?ts=markdown "Posts by Kritika Singhal") and [Gal Shalev](https://www.paloaltonetworks.com/blog/author/gal-shalev/?ts=markdown "Posts by Gal Shalev") ![Identity Meets the SOC: Redefining the Last Perimeter](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/06/iStock-1407863764-scaled.jpg) [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [AI Security](https://www.paloaltonetworks.com/blog/category/ai-security/?ts=markdown), [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Cybersecurity](https://www.paloaltonetworks.com/blog/category/cybersecurity/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Use-Cases](https://www.paloaltonetworks.com/blog/security-operations/category/use-cases/?ts=markdown) ## [Identity Meets the SOC: Redefining the Last Perimeter](https://www.paloaltonetworks.com/blog/security-operations/identity-meets-the-soc-redefining-the-last-perimeter/) Let's start with a hard truth that every security leader is waking up to: adversaries aren... Aug 06, 2026 By [Emran Mazumder](https://www.paloaltonetworks.com/blog/author/emran-mazumder/?ts=markdown "Posts by Emran Mazumder") and [David Trigano](https://www.paloaltonetworks.com/blog/author/david-trigano/?ts=markdown "Posts by David Trigano") ![Securing the AI Factory: Empowering Security Teams with In-Silicon Visibility](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/06/AdobeStock_443627644-scaled.jpeg) [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Uncategorized](https://www.paloaltonetworks.com/blog/category/uncategorized/?ts=markdown) ## [Securing the AI Factory: Empowering Security Teams with In-Silicon Visibili...](https://www.paloaltonetworks.com/blog/security-operations/securing-the-ai-factory-empowering-security-teams-with-in-silicon-visibility/) Discover how Palo Alto Networks Cortex XSIAM integrates with NVIDIA DOCA Argus to deliver deep visibility and secure the AI Factory with zero performa... Jun 30, 2026 By [Nadav Shai Kanon](https://www.paloaltonetworks.com/blog/author/nadav-shai-kanon/?ts=markdown "Posts by Nadav Shai Kanon") and [Shrikant Brahmbhatt](https://www.paloaltonetworks.com/blog/author/shrikant-brahmbhatt/?ts=markdown "Posts by Shrikant Brahmbhatt") ![IDC MarketScape SIEM Leader 2026: Palo Alto Networks](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/06/NetSec-Adhoc-Updated-Blog-Image-Resize-497328705.png) [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) ## [IDC MarketScape SIEM Leader 2026: Palo Alto Networks](https://www.paloaltonetworks.com/blog/security-operations/2026-idc-marketscape-siem/) Palo Alto Networks named a Leader in the 2026 IDC MarketScape for Worldwide SIEM. Discover how Cortex XSIAM eliminates the traditional SIEM data tax. Jun 26, 2026 By [Greg Smith](https://www.paloaltonetworks.com/blog/author/greg-smith/?ts=markdown "Posts by Greg Smith") ![The End of the Visibility Tax](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/06/NetSec-Adhoc-Updated-Blog-Image-Resize-905545264.png) [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) ## [The End of the Visibility Tax](https://www.paloaltonetworks.com/blog/security-operations/the-end-of-the-visibility-tax/) Stop paying the visibility tax. Learn why Palo Alto Networks made data ingestion of enhanced application logs free to help CISOs eliminate blind spots and reduce SOC TCO. Jun 02, 2026 By [Greg Smith](https://www.paloaltonetworks.com/blog/author/greg-smith/?ts=markdown "Posts by Greg Smith") ![The Clock Is Running: What Frontier AI Means for Your SOC](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/01/Unit42-threat-vector-investigates-blog-400x300-ep1-1.png) [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) ## [The Clock Is Running: What Frontier AI Means for Your SOC](https://www.paloaltonetworks.com/blog/security-operations/the-clock-is-running-what-frontier-ai-means-for-your-soc/) Frontier AI is accelerating cyberattacks, creating complex exploits in hours. Learn why your SOC has six months to adapt and what Cortex's defensive testing reveal May 28, 2026 By [Dena De Angelo](https://www.paloaltonetworks.com/blog/author/dena-de-angelo/?ts=markdown "Posts by Dena De Angelo") ![What’s New in Cortex (May ‘26)](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/05/NetSec-Adhoc-Updated-Blog-Image-Resize-1080277602-1.png) [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) ## [What's New in Cortex (May '26)](https://www.paloaltonetworks.com/blog/security-operations/whats-new-in-cortex-may-26/) The latest Cortex release delivers enhancements to agentic investigation and response, cloud-native security offerings, and new Idira integrations. May 19, 2026 By [Scott Simkin](https://www.paloaltonetworks.com/blog/author/scott-simkin/?ts=markdown "Posts by Scott Simkin") ![How Mythos-Class Models Change Exposure Management](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/05/AdobeStock_429594706-2-scaled.jpeg) [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [AI Security](https://www.paloaltonetworks.com/blog/category/ai-security/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Threat Intelligence](https://www.paloaltonetworks.com/blog/category/threat-intelligence-1/?ts=markdown) ## [How Mythos-Class Models Change Exposure Management](https://www.paloaltonetworks.com/blog/security-operations/how-mythos-class-models-change-exposure-management/) Frontier AI exposure management with Xpanse and Cortex Exposure Management helps teams find and reduce exploitable exposure before attackers act. May 06, 2026 By [Brendan Powers](https://www.paloaltonetworks.com/blog/author/brendan-powers/?ts=markdown "Posts by Brendan Powers") ![The Dangerous Momentum of Autodownload Phishing](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/05/GettyImages-141339288-edit-scaled.jpg) [Cybersecurity](https://www.paloaltonetworks.com/blog/category/cybersecurity/?ts=markdown), [Points of View](https://www.paloaltonetworks.com/blog/category/points-of-view/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Use-Cases](https://www.paloaltonetworks.com/blog/security-operations/category/use-cases/?ts=markdown) ## [The Dangerous Momentum of Autodownload Phishing](https://www.paloaltonetworks.com/blog/2026/05/dangerous-momentum-autodownload-phishing/) Learn how attackers weaponize SaaS auto-download links and rotating phishing lures to deliver RMM malware. See how Cortex Email Security stops this forced-momentum attack. May 05, 2026 By [Roni Yehanov](https://www.paloaltonetworks.com/blog/author/roni-yehanov/?ts=markdown "Posts by Roni Yehanov") ![Unveiling Autonomous Playbooks: Immediate Threat Response in XSIAM](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/05/NetSec-Adhoc-Updated-Blog-Image-Resize-1080277602.png) [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) ## [Unveiling Autonomous Playbooks: Immediate Threat Response in XSIAM](https://www.paloaltonetworks.com/blog/security-operations/unveiling-autonomous-playbooks-immediate-threat-response-in-xsiam/) Discover how Cortex XSIAM autonomous playbooks revolutionize incident response by automating workflows and reducing manual toil for faster, more effic... May 05, 2026 By [Netta Norman](https://www.paloaltonetworks.com/blog/author/netta-norman/?ts=markdown "Posts by Netta Norman") ![Threat Intelligence in the Era of AI](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/04/AdobeStock_637057734-2-scaled.jpeg) [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) ## [Threat Intelligence in the Era of AI](https://www.paloaltonetworks.com/blog/security-operations/threat-intelligence-in-the-era-of-ai/) Discover how a custom threat intelligence AI agent automates security tasks, analyzes global risks in real-time, and strengthens your defense against cyberthreats. Apr 29, 2026 By [Tal Hagag](https://www.paloaltonetworks.com/blog/author/tal-hagag/?ts=markdown "Posts by Tal Hagag") ![Turning Device Context into Action: The Power of Contextual Segmentation](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/04/Screenshot-2026-04-20-at-8.11.47-AM.png) [AI Security](https://www.paloaltonetworks.com/blog/category/ai-security/?ts=markdown), [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [IoT Security](https://www.paloaltonetworks.com/blog/network-security/category/iot-security/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) ## [Turning Device Context into Action: The Power of Contextual Segmentation](https://www.paloaltonetworks.com/blog/network-security/turning-device-context-into-action-the-power-of-contextual-segmentation/) Traditional network segmentation was designed for a time when networks were static, devices were predictable, and security policies rarely changed. To... Apr 20, 2026 By [Karthik Thumula](https://www.paloaltonetworks.com/blog/author/karthik-thumula/?ts=markdown "Posts by Karthik Thumula") ![Unmasking Boggy Serpens' AI-Powered Surge](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/04/AdobeStock_649798854-scaled.jpeg) [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) ## [Unmasking Boggy Serpens' AI-Powered Surge](https://www.paloaltonetworks.com/blog/security-operations/boggy-serpens-muddywater-weaponizes-trust-ai-to-create-disposable-malware-bypassing-traditional-defense-unit-42-reveals-how-behavioral-detection-stops-them/) Boggy Serpens (MuddyWater) weaponizes trust \& AI to create disposable malware, bypassing traditional defense. Unit 42 reveals how behavioral detection stops them. Apr 07, 2026 By [Yvonne Le](https://www.paloaltonetworks.com/blog/author/yvonne-le/?ts=markdown "Posts by Yvonne Le") ![Why Your EDR Strategy Needs a Backup Plan](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/04/NetSec-Adhoc-Updated-Blog-Image-Resize-1135341681.png) [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Points of View](https://www.paloaltonetworks.com/blog/category/points-of-view/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) ## [Why Your EDR Strategy Needs a Backup Plan](https://www.paloaltonetworks.com/blog/security-operations/why-your-edr-strategy-needs-a-backup-plan/) Mitigate single-vendor EDR risk. See why 85% of organizations are adding a secondary endpoint vendor for infrastructure resilience \& continuity. Apr 07, 2026 By [Dena De Angelo](https://www.paloaltonetworks.com/blog/author/dena-de-angelo/?ts=markdown "Posts by Dena De Angelo") Load more blogs Load more blogs ### Subscribe to Security Operations Blogs! Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more. ![spinner](https://www.paloaltonetworks.com/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up Please enter a valid email. By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder. This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. {#footer} {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * Observability * [Cortex XCOR](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Prepare for Emerging Risks](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Understand the Adversary](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Respond to a Cyber Attack](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![Palo Alto Networks Logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language