* [Blog](https://www.paloaltonetworks.com/blog) * [Security Operations](https://www.paloaltonetworks.com/blog/security-operations/) * [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/) * How Cortex AES Protects A... # How Cortex AES Protects Against Compromised Claude Code Extensions [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.paloaltonetworks.com%2Fblog%2Fsecurity-operations%2Fhow-cortex-aes-protects-against-compromised-claude-code-extensions%2F) [](https://twitter.com/share?text=How+Cortex+AES+Protects+Against+Compromised+Claude+Code+Extensions&url=https%3A%2F%2Fwww.paloaltonetworks.com%2Fblog%2Fsecurity-operations%2Fhow-cortex-aes-protects-against-compromised-claude-code-extensions%2F) [](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.paloaltonetworks.com%2Fblog%2Fsecurity-operations%2Fhow-cortex-aes-protects-against-compromised-claude-code-extensions%2F&title=How+Cortex+AES+Protects+Against+Compromised+Claude+Code+Extensions&summary=&source=) [](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www.paloaltonetworks.com/blog/security-operations/how-cortex-aes-protects-against-compromised-claude-code-extensions/&ts=markdown) \[\](mailto:?subject=How Cortex AES Protects Against Compromised Claude Code Extensions) Link copied By [Yuval Ronen](https://www.paloaltonetworks.com/blog/author/yuval-ronen/?ts=markdown "Posts by Yuval Ronen") and [Anna Qi](https://www.paloaltonetworks.com/blog/author/anna-qi/?ts=markdown "Posts by Anna Qi") Nov 03, 2026 8 minutes [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown) [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown) [Threat Intelligence](https://www.paloaltonetworks.com/blog/category/threat-intelligence-1/?ts=markdown) [Agentic Endpoint Security](https://www.paloaltonetworks.com/blog/tag/agentic-endpoint-security/?ts=markdown) [Cortex](https://www.paloaltonetworks.com/blog/tag/cortex/?ts=markdown) [Cortex AES](https://www.paloaltonetworks.com/blog/tag/cortex-aes/?ts=markdown) [Koi](https://www.paloaltonetworks.com/blog/tag/koi/?ts=markdown) [Threat Research](https://www.paloaltonetworks.com/blog/tag/threat-research/?ts=markdown) ## **Introduction** On October 29, 2026, attackers turned a trusted developer tool into a potential backdoor. Malicious versions of the Claude Code extension were distributed through Cursor's extension marketplace, exposing developers to malware capable of collecting host information, establishing persistence, and attempting to enable unauthorized remote access. In just 11 hours, up to 5,000 Cursor users were potentially exposed.^1^ The incident highlights a growing security challenge: as developers increasingly rely on AI coding assistants, the extensions and tools supporting these workflows are becoming attractive targets for software supply chain attacks. A seemingly routine extension update can introduce malicious code directly into a developer's environment, putting sensitive credentials, source code, and enterprise systems at risk. Traditional endpoint security remains essential, but organizations also need visibility and control over the AI tools, extensions, and supporting components that developers install and execute.[Cortex Agentic Endpoint Security (AES)](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) helps close this gap by providing continuous discovery, granular risk assessment, governance, and runtime protection for agentic environments. In this blog, we examine what happened in the Claude Code extension compromise, why it matters for enterprise security, and how Cortex AES helps organizations protect their developer workspaces against similar threats. ## **The Threat: How Attackers Weaponized a Claude Code Extension** On October 29, 2026, maliciously modified versions 2.1.312 and 2.1.313 of the Claude Code VS Code extension (anthropic.claude-code) were distributed through Cursor's Extension Marketplace (Mirrors OpenVSX). The compromised packages targeted macOS and Windows systems and contained malicious code embedded in the extension's extension.js bundle. These modifications were not developed by Anthropic, but due to the open marketplace the poisoned extension was downloaded by many developers. For approximately 11 hours, developers who installed or updated the affected extension risked unknowingly executing a malicious payload on their machines. Once loaded, the extension attempted several actions: 1. **Host Reconnaissance:** Collected system information, including operating system details, usernames, working directories, public IP addresses, and environment variable names, and transmitted telemetry to attacker-controlled infrastructure at 134.209.82.225:8099/beacon. 2. **Backdoor Installation:** Added an unauthorized SSH public key (svc-telemetry) to the host's authorized keys and attempted to enable SSH access and establish a reverse tunnel to the attacker's command-and-control (C2) infrastructure. 3. **Persistent Access:** Attempted to establish persistence through a macOS LaunchAgent or Windows scheduled tasks and startup scripts, allowing the malicious process to continue attempting connections independently of the extension. Although the malware attempted to establish persistent remote access, Cursor reported that errors in the payload and insufficient administrative privileges generally prevented the SSH backdoor from becoming operational. However, the malware could still install persistence mechanisms and transmit host information. The compromised versions have since been removed from Cursor's marketplace, and the attacker-controlled infrastructure has been taken offline. ## **The Security Challenge: Protecting the AI Developer Supply Chain** What makes this incident particularly concerning is how the malicious code reached developers. Rather than exploiting a traditional software vulnerability, attackers distributed malicious code through a familiar extension marketplace, using an established development workflow as the entry point. As AI coding assistants become embedded in enterprise development environments, organizations face an expanding attack surface. IDE extensions, MCP servers, and other AI supporting components can execute code, interact with local resources, and operate within environments containing sensitive enterprise assets. Protecting the modern developer workspace requires extending security beyond traditional endpoint defenses to the AI tools and software artifacts operating within it. ## **Beyond the Extension: The Open VSX Marketplace Takeover** To fully understand the severity of this threat, we must look at how the foundation itself was breached. Prior to this incident, security researchers at Koi uncovered a critical vulnerability in the Open VSX marketplace - the open-source extension registry powering alternative IDEs like Cursor and Windsurf. By exploiting flaws in publisher verification and namespace management, researchers demonstrated how an attacker could execute a complete takeover of marketplace accounts and published extensions. When a developer marketplace itself is compromised, the chain of trust is completely broken. Security models in modern IDEs rely heavily on implicit trust in publisher identities and versioning. When attackers control the registry, there are virtually no limits to what can be delivered: clean extensions can be silently replaced with malicious updates, signed packages can be hijacked, and thousands of developer environments can be poisoned overnight without triggering traditional warnings. The Claude Code extension compromise is a stark real-world realization of these systemic supply chain risks. It reinforces why our research team works continuously to uncover core platform vulnerabilities, defend extension marketplaces, and protect developer supply chains before attackers can exploit them at scale. ## **How Cortex AES Helps Protect Against Compromised Extensions** Cortex Agentic Endpoint Security (AES) is designed to help organizations address these emerging risks by securing the agentic endpoint and their related AI artifacts through the entire enterprise. In the context of the Claude Code extension compromise, several Cortex AES capabilities help organizations reduce exposure to similar supply chain attacks: 1. **Continuous Discovery and Visibility** Cortex AES provides visibility into AI agents, IDE extensions, MCP servers, and other supporting components operating across enterprise endpoints. This allows security teams to maintain an inventory of AI tools in their environment and identify potentially affected assets when a security incident emerges. ![AES Dashboard for complete agentic endpoint visibility](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/11/2026-11-02_20-22-42-scaled.png) AES Dashboard for complete agentic endpoint visibility For an incident like the Claude Code compromise, visibility into installed extension versions helps security teams determine which endpoints may require investigation or remediation. 2. **Version-Level Risk Assessment** Not all versions of a trusted extension carry the same level of risk. As demonstrated by the Claude Code incident, a specific update can introduce malicious functionality even when the underlying application is legitimate. ![Version-level risk assessment of the Claude Code Extension](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/11/2026-11-02_20-21-08-scaled.png) Version-level risk assessment of the Claude Code Extension Cortex AES helps security teams assess risks associated with individual extensions and software versions, enabling them to identify suspicious or potentially compromised artifacts and prioritize remediation. 3. **Proactive Governance and Policy Enforcement** Cortex AES enables organizations to establish security policies governing which AI tools and supporting components are permitted to operate in their environments. ![Guardrails in Cortex AES](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/11/2026-11-02_20-23-58-scaled.png) Guardrails in Cortex AES Rather than relying solely on marketplace trust or developer discretion, security teams can apply controls to restrict risky or unauthorized extensions and remove insecure components. These guardrails help reduce the likelihood that compromised artifacts will be introduced into developer environments. 4. **Real-Time Runtime Protection** Even trusted tools can become compromised. Cortex AES complements preventive controls with runtime protection designed to detect and stop malicious activity associated with AI tools and agentic workflows. ![AI Runtime and Prevention Policies](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/11/2026-11-02_20-25-22-scaled.png) AI Runtime and Prevention Policies Together, these capabilities provide a layered approach to securing agentic development environments, helping organizations reduce software supply chain risk without unnecessarily slowing down employee workflows. ## **Recommended Actions: Detect, Contain, and Remediate** While proactive security controls help reduce exposure to compromised extensions, organizations that may have installed the affected Claude Code versions should take immediate steps to investigate and remediate potential compromise. Security teams should prioritize the following actions: 1. **Identify affected endpoints:** Review installed extensions and identify macOS or Windows systems that installed or updated anthropic.claude-code versions 2.1.312 or 2.1.313 from Cursor's marketplace during the exposure window. Cortex AES customers can use available extension inventory and endpoint visibility to support this assessment. 2. **Investigate and contain:** Search for the unauthorized SSH key svc-telemetry, suspicious persistence mechanisms, and outbound connections to 134.209.82.225. Isolate endpoints showing evidence of malicious payload execution. 3. **Remove malicious artifacts:** Uninstall the compromised extension and remove associated SSH keys, persistence scripts, scheduled tasks, and malicious processes. Since these mechanisms can persist after uninstalling the extension, follow the official[Cursor remediation guidance](https://cursor.com/blog/claude-code-extension-security-notice) and assess whether affected hosts require rebuilding. 4. **Rotate potentially exposed credentials:** Rotate source-control credentials, cloud keys, SSH credentials, registry tokens, and active sessions accessible from impacted systems. Perform credential rotation from a trusted, uncompromised endpoint. 5. **Block and monitor:** Block communications with the identified attacker infrastructure and review endpoint and network telemetry for suspicious activity or evidence of additional compromise. ## **Technical Reference: Affected Versions and Indicators of Compromise** The following information can help security teams identify potentially affected environments. ### **Affected Items** |-----------------------|----------------------------------------------------------|------------------------|------------------------| | **Item** | **Distribution** | **Malicious versions** | **Potential exposure** | | anthropic.claude-code | Cursor VS Code Extension Marketplace (macOS and Windows) | 2.1.312, 2.1.313 | Up to 5,000 users | ### **Key Indicators of Compromise** **Network indicators** * C2 IP address: 134.209.82\[.\]225 * HTTP beacon: hxxp://134\[.\]209\[.\]82\[.\]225:8099/beacon * Reverse SSH connections to the C2 infrastructure over TCP port 22 **Host indicators** * Unauthorized SSH key comment: svc-telemetry * macOS LaunchAgent: com.apple.sysmond.plist * Windows scheduled task: SysMon * Persistence artifacts including .config/.smt and .config/smt.cmd **File hashes and fingerprints** * SHA-256 (extension.js): ecb58cb29078d9646ad1dcdbe51526f2d9cfea06be5fb2ab183e8ecc3ab6bf15 * Unauthorized SSH public key fingerprint: SHA256:0Z6R+DF64Do2nwQic8a7kkfDLNNk4IiK+2U2Rci4htk For comprehensive platform-specific indicators, affected package hashes, verification commands, and remediation scripts, refer to[Cursor's official security notice](https://cursor.com/blog/claude-code-extension-security-notice). ## **Securing the Future of Agentic Workspaces** The Claude Code extension compromise reinforces a critical lesson: as AI becomes embedded in everyday workflows, securing the enterprise requires protecting not just AI models, but the entire ecosystem of tools, extensions, and execution environments supporting them. Palo Alto Networks is continuing to advance this approach through Cortex Agentic Endpoint Security and its collaboration with Anthropic. While Cortex AES helps organizations govern and protect AI tools and supporting components, the newly announced Cortex XDR integration with Anthropic's Claude Cowork will extend security visibility and threat detection into desktop AI agent execution environments. By bringing enterprise-grade endpoint security into agentic workflows, Palo Alto Networks is helping organizations adopt AI-powered tools with greater visibility, control, and confidence. To learn more about this collaboration, read[New Cortex XDR Integration with Claude Cowork Secures Desktop AI Agents](https://www.paloaltonetworks.com/blog/2026/11/new-cortex-xdr-integration-with-claude-cowork-secures-desktop-ai-agents/?ts=markdown). SOURCE: 1. https://thehackernews.com/2026/10/official-claude-code-vs-code-extension.html *** ** * ** *** ## Related Blogs ### [Agent Security](https://www.paloaltonetworks.com/blog/ai-security/category/agent-security/?ts=markdown), [Agentic Identity Security](https://www.paloaltonetworks.com/blog/identity-security/category/agentic-identity-security/?ts=markdown), [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [AI Governance](https://www.paloaltonetworks.com/blog/ai-security/category/ai-governance/?ts=markdown), [AI Security](https://www.paloaltonetworks.com/blog/cloud-security/category/ai-security/?ts=markdown), [Announcement](https://www.paloaltonetworks.com/blog/cloud-security/category/announcement/?ts=markdown), [Assess AI Risks](https://www.paloaltonetworks.com/blog/ai-security/category/assess-ai-risks/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Secure AI Infrastructure](https://www.paloaltonetworks.com/blog/ai-security/category/secure-ai-infrastructure/?ts=markdown), [Secure GenAI Use](https://www.paloaltonetworks.com/blog/ai-security/category/secure-genai-use/?ts=markdown) [#### Your EDR is Blind to the Agentic Frontier](https://www.paloaltonetworks.com/blog/security-operations/your-edr-is-blind-to-the-agentic-frontier/) ### [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Uncategorized](https://www.paloaltonetworks.com/blog/category/uncategorized/?ts=markdown) [#### Introducing Active Directory Security Posture Management in Cortex ITDR](https://www.paloaltonetworks.com/blog/security-operations/active-directory-security-posture-management/) ### [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown), [Unkategorisiert](https://www.paloaltonetworks.com/blog/category/unkategorisiert/?lang=ja&ts=markdown), [Use-Cases](https://www.paloaltonetworks.com/blog/security-operations/category/use-cases/?ts=markdown) [#### Fighting AI with AI: Palo Alto Networks and Tenzai Collaborate to Defeat Autonomous Threats](https://www.paloaltonetworks.com/blog/security-operations/fighting-ai-with-ai-palo-alto-networks-and-tenzai-collaborate-to-defeat-autonomous-threats/) [#### Open Sesame: How a Fail-Open Bug in Open VSX's New Scanner Let Malware Walk Right In](https://www.paloaltonetworks.com/blog/security-operations/open-sesame-fail-open-bug-open-vsx-scanner/) [#### The Evolution of GlassWorm: How a Known Threat is Rewriting its Playbook through GitHub](https://www.paloaltonetworks.com/blog/security-operations/glassworm-evolution/) ### [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Use-Cases](https://www.paloaltonetworks.com/blog/security-operations/category/use-cases/?ts=markdown) [#### NL2XQL: Turning Natural Language into Powerful Cybersecurity Querying](https://www.paloaltonetworks.com/blog/security-operations/nl2xql-turning-natural-language-into-powerful-cybersecurity-querying/) ### Subscribe to Security Operations Blogs! Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more. ![spinner](https://www.paloaltonetworks.com/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up Please enter a valid email. By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder. This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. {#footer} {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * Observability * [Cortex XCOR](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Prepare for Emerging Risks](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Understand the Adversary](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Respond to a Cyber Attack](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![Palo Alto Networks Logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language