Palo Alto Networks

AutoFocus

Why Threat Detection Needs to be Part of Your Cloud Security Strategy

The market has largely assimilated cloud security posture management (CSPM) tools for just three security functions:

While these are important for maintaining adequate security hygiene and reducing risk in cloud environments (along with minimizing runtime configurati...

Cloud Security Posture Management

Dec 16, 2020

By Jonathan Bregman

Palo Alto Networks

Products and Services

Partners

DevSecOps, Secure the Cloud, Secure the Future

Bringing High-Fidelity Threat Intelligence to Prisma Cloud

We've integrated AutoFocus threat intelligence into Prisma Cloud. This will allow users to realize the promise of threat intelligence for their cloud...

Jul 13, 2020

By Jonathan Bregman

Secure the Enterprise

SEGA Europe: You Cannot Protect What You Cannot See

As a prolific game developer and publisher with six studios across four countries, SEGA Europe needed greater visibility into vulnerabilities existing across its network and more granular control over applicat...

Jul 30, 2019

By Palo Alto Networks

Cybersecurity, Products and Services, Secure the Enterprise

When Scripts Attack, WildFire Protects

Adversaries look for fast and easy ways to steal data. Among the many techniques in their playbooks, using scripts is a quickly growing trend. Why? It requires minimum human intervention, automates manual steps, and gets them to their malic...

Jan 16, 2019

By Kamil Imtiaz

Endpoint, Products and Services, Secure the Enterprise

Preventing Malware and Ransomware With Traps

While ransomware is not new, major attacks like WannaCry, Petya/NotPetya and, more recently, TrickBot have shown that existing prevention methods have become ineffective at preventing advanced ransomware attack...

Jan 15, 2019

By Danny Milrad and Eila Shargh

News of the Week

News of the Week: May 19, 2018

Did you miss any of this week’s Palo Alto Networks action? Don’t worry – we’ve rounded up our top news and views right here:

May 19, 2018

By Justin Hall

Products and Services, Technical Documentation

Tech Docs: The May Release of AutoFocus is Now Live!

This release of AutoFocus introduces a number of usability improvements related to the AutoFocus user-interface, as well as support for samples submitted through Magnifier and Traps Android.

May 16, 2018

By Howard Kim

Unit 42

HenBox: Inside the Coop

On March 13, 2018, we published a blog describing a new Android malware family we discovered and called “HenBox” based on metadata found in most of the malicious apps. HenBox apps masquerade as others such as VPN apps, and Android system apps; some apps carry legitimate...

Apr 26, 2018

By Alex Hinchliffe, Mike Harbison, Jen Miller-Osborn and Tom Lancaster

Unit 42

HenBox: The Chickens Come Home to Roost

Unit 42 recently discovered a new Android malware family we named “HenBox” masquerading as a variety of legitimate Android apps. We chose the name “HenBox” based on metadata found in most of the malicious apps...

Mar 13, 2018

By Alex Hinchliffe, Mike Harbison, Jen Miller-Osborn and Tom Lancaster

Unit 42

Compromised Servers & Fraud Accounts: Recent Hancitor Attacks

Unit 42 has been tracking malicious spam (malspam) pushing Hancitor malware during the past 2 years. Hancitor, also known as Chanitor or Tordal, is a macro-based malware spread thr...

Feb 07, 2018

By Vicky Ray and Brad Duncan

Unit 42

VERMIN: Quasar RAT and Custom Malware Used In Ukraine

Palo Alto Networks Unit 42 has discovered a new malware family written using the Microsoft .NET Framework which the authors call "VERMIN"; an ironic term for a RAT (Remote Access Tool). Cursory investigation in...

Jan 29, 2018

By Tom Lancaster and Juan Cortes

Products and Services, Threat Prevention

UPDATED: Palo Alto Networks Protections Against WanaCrypt0r Ransomware Atta...

On Friday, May 12, 2017, a series of broad attacks began that spread the latest version of the WanaCrypt0r ransomware, including worm-like tactics to...

Jan 25, 2018

By Scott Simkin

Products and Services, Technical Documentation

AutoFocus 2.0.3 Release Documentation is Now Live!

This release of AutoFocus introduces a variety of improvements related to the AutoFocus Reports and Dashboard, as well as support for the newly available WildFire Windows 10 analysis environment.

Jan 18, 2018

By Howard Kim

Unit 42

Master Channel: The Boleto Mestre Campaign Targets Brazil

vlogMalicious spam (malspam) often uses malware attachments or links to malware disguised as legitimate documents. In Brazil-based malspam, such malware often impersonates a document called "boleto." Boleto is...

Dec 07, 2017

By Brad Duncan

Customer Spotlight, Security Platform, Service Providers

Customer Spotlight: Telkom Indonesia Protects Expansion Plans With Palo Alt...

With double-digit growth and plans for expansion, Telkom Indonesia is Indonesia’s largest telecommunications services company. They play a key role in...

Nov 08, 2017

By Rae Harrison

Customer Spotlight, Security Platform

Customer Spotlight: Domain Group Keeps the Presses Rolling With Palo Alto N...

Headquartered in Melbourne, Domain Group is one of Australia’s largest and most successful property media and marketing companies, running an integrat...

Sep 21, 2017

By Rae Harrison

Unit 42

The Blockbuster Saga Continues

Unit 42 researchers at Palo Alto Networks have discovered new attack activity targeting individuals involved with United States defense contractors. Through analysis of malicious code, files, and infrastructure it is clear the group behind this campaign is either direct...

Aug 14, 2017

By Anthony Kasza

Channel Scoop, Partners

Channel Scoop – May 12, 2017

*To access content on the Partner Portal you must be a Palo Alto Networks NextWave channel partner and have a valid user name and password. Email NextWave@paloaltonetworks.com to request Partner Portal access.

May 12, 2017

By Lang Tibbils

Unit 42

Practice Makes Perfect: Nemucod Evolves Delivery and Obfuscation Techniques...

Recently the Unit 42 research team have been investigating a wave of Nemucod downloader malware that uses weaponized documents to deploy encoded, and heavily obfuscated JavaScript,...

May 11, 2017

By Alex Hinchliffe

Unit 42

The Blockbuster Sequel

Unit 42 has identified malware with recent compilation and distribution timestamps that has code, infrastructure, and themes overlapping with threats described previously in the Operation Blockbuster report, written by researchers at Novetta. This report details the act...

Apr 07, 2017

By Anthony Kasza and Micah Yates

Technical Documentation

Tech Docs: Collect and Refine Threat Intelligence with MineMeld

The use of threat intelligence to defend networks against attacks is on the rise. Threat intelligence consists of evidence-based and actionable knowledge about attacks. As members...

Jan 09, 2017

By Patricia Cruz

Load more blogs