Unit 42 uncovers 145 malicious Google Play apps. Get the full report.

Security Lifecycle Review

A focused, free security risk assessment, the SLR produces a report that summarizes the volume and types of threat exposures and vulnerabilities identified on your network over a specified time period.

Unit 42 brings together world-class cyber researchers and elite incident responders to protect our digital way of life. With a deep-rooted reputation in delivering industry-leading threat intelligence, Unit 42 is now expanding its scope to provide state-of-the-art incident response and cyber risk management services. Our incident response consultants will serve as trusted partners to respond fast and contain threats completely, so you can get back to business in no time.

This webinar will help. Designed with you in mind, it features our own Kasey Cross as well as Kerry Matre, author of Elements of Security Operations. Together, they’ll show you how you can cut down on repetitive tasks to spend more time investigating incidents and hunting for hidden threats.

Report reviews the current threat landscape and puts a spotlight on malware attack vectors in key industries.

Take advantage of our joint integrated approach to provide security services.

Security Lifecycle Review (SLR) is a cloud-based application that analyzes the network traffic and reports on the business and security risks facing an organization to provide visibility into the network. SLR leverages the Palo Alto Networks Next Generation Firewall logs Cortex Data Lake data to identify the applications and threats exposing vulnerabilities in an organization’s security’s posture.

Today, the U.S. Department of Homeland Security (DHS) announced the establishment of the Cyber Safety Review Board (CSRB), as directed in President Biden’s Executive Order 14028 on Improving the Nation’s Cybersecurity.

Introduction As we head towards the end of the year it’s common to reflect on the year almost behind us and to predict what the new year approaching will bring in terms of security challenges. This blog is part of a series that describe malware trends seen in the EMEA (Europe Middle East and Africa)...

The cybersecurity firm introduced an extended security orchestration, automation and response platform this week to provide capabilities for security analysts to deal with threats across the enterprise.

SANS.org conducts a hands-on product review of the Cortex XDR (Extended Detection and Response) platform, from the Enterprise perspective. Security Analysts, Architects, and SOC personnel can explore the features and capabilities that set apart Palo Alto Networks’ solutions from other security vendors.

SANS.org conducts a hands-on product review of the Cortex XDR (Extended Detection and Response) platform, from the Enterprise perspective.

Apple’s official iOS App Store is well known for its strict code review of any app submitted by a developer. This mandatory policy has become one of the most important mechanisms in the iOS security ecosystem to ensure the privacy and security of iOS users. But we recently identified an app that demonstrated new ways...

This service description document (“Service Description”) outlines the Unit 42 Breach Readiness Review service (“BRR Services”) for purchase by customers.

In Part 5 of our IDAPython blog series, we used IDAPython to extract embedded executables from malicious samples. For this sixth installment, I’d like to discuss using IDA in a very automated way. Specifically, let's address how we’re going to load files into IDA without spawning a GUI, automatically run an IDAPython script, and extract...

We continue our series on using IDAPython to make things easier for reverse-engineers by tackling a problem malware analysts deal with on an almost daily basis: extracting embedded executables. Malware will often store embedded executables in a number of ways. Some examples include attaching these files in the file’s overlay, including them as a PE...

Earlier installments of this series (Part 1, Part 2 and Part 3) have examined how to use IDAPython to make life easier. Now let’s look at how reverse engineers can use the colors and the powerful scripting features of IDAPython.

In the first two posts of this series (Part 1 and Part 2), we discussed using IDAPython to make your life as a reverse engineer easier. Now let’s look at conditional breakpoints. While debugging in IDA Pro, there are often situations where an analyst wishes to break on a specific address, but only when a...

Continuing our theme of using IDAPython to make your life as a reverse engineer easier, I’m going to tackle a very common issue: shellcode and malware that uses a hashing algorithm to obfuscate loaded functions and libraries. This technique is widely used and analysts come across it often. Using IDAPython, we will take this challenging...

As a malware reverse engineer, I often find myself using IDA Pro in my day-to-day activities. It should come as no surprise, seeing as IDA Pro is the industry standard (although alternatives such as radare2 and Hopper are gaining traction). One of the more powerful features of IDA that I implore all reverse engineers to...

In March of this year, Unit 42 investigated the SamSa actors that were attacking the healthcare industry with targeted ransomware. With this group being active for roughly one year, we decided to revisit this threat to determine what, if any, changes had been made to their toolset. In doing so, we discovered that it’s been...

Unit 42 continues their look into the EMEA malware trends of the last six months.

In this eBook you will learn how to begin addressing container security holistically, how to start embedding security across the entire container life cycle (i.e. DevSecOps), and how to gain full stack security awareness that will allow you to reduce, prioritize and automatically filter out alerts based on holistic, cloud context.

The acquisitions of Twistlock and PureSec further advance Prisma leadership in public cloud security by providing customers with a comprehensive set of capabilities to secure all cloud workloads.

Video: Credit-based licensing meets changing security needs in minutes - Palo Alto Networks

Palo Alto Networks® engaged independent data privacy risk management provider TRUSTe® to review and document the data flows and practices described in this datasheet. The purpose of this document is to provide customers of Palo Alto Networks with information needed to assess the impact of this service on their overall privacy posture by detailing how personal information may be captured, processed and stored by and within the service.

SANTA CLARA, Calif. – September 6, 2018 – Palo Alto Networks® (NYSE: PANW), the global cybersecurity leader, today announced that KPIT has transformed its approach to cybersecurity by deploying Palo Alto Networks Security Operating Platform, including its firewalls and network security management.