mobile nav[![palo altonetworks logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-light.svg)](https://www.paloaltonetworks.com) ![x close icon to close mobile navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-white.svg)[![mobile palo altonetworks logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-light.svg)](https://www.paloaltonetworks.com) [Watch the series](#understanding) [Watch the series](#understanding) Threat Vector Investigates Frontline Adversary Insights to Defend Your Organization === * [Watch the series](#understanding) {#defending-agentic-endpoint} ## Understand the Adversary to Stop the Breach To stop sophisticated attacks, you need to know what you're up against. Turn adversary insight into informed threat defense. ## This video series deconstructs high-impact threats discovered by Unit 42, breaking down each attack chain and how to disrupt it. * ### When software you trust becomes the attack vector, how do you defend the agentic endpoint? * ### How does a nation-state actor turn an everyday admin tool into a backdoor? * ### How can my organization defend and protect against a Linux threat? * ### Why are frontier AI models a threat to my organization's security? * ### What are the latest tactics, techniques and procedures that cybercrime groups are using that I should be aware of? * ### Can I catch an exploit before it's known to the public? * ### How do I detect a silent persistent threat with no malicious activity? * ### Can I stop a software supply chain attack hidden in a business tool? When software you trust becomes the attack vector, how do you defend the agentic endpoint? Watch the video Defending the Agentic Endpoint Against ChainDrop In this episode, we unpack ChainDrop, a sophisticated npm worm engineered to turn trusted software packages and developer environments into silent attack launchpads. We dissect how adversaries exploit supply chain dependencies to slip past traditional defenses, gain unauthorized access and move laterally across enterprise networks. Tune in to learn how security teams can spot early indicators of compromise, govern modern development workflows and deploy agentic endpoint security to stop supply chain threats before impact. How does a nation-state actor turn an everyday admin tool into a backdoor? Watch the video Weaponizing the Update Button: How Nation-State Actors Hijacked Notepad++ and What XDR Saw Compromise the tool, and you've compromised the most privileged hands in the building. Tune in to see how the nation-state threat group, Blossom Taurus (aka Lotus Blossom) hijacked the trust between a developer and their users to create a backdoor infection vector. Attackers have realized that if they can compromise the update, they don't have to spend weeks trying to find a hole in your perimeter. They just wait for you to invite them in by simply using the update button. How can my organization defend and protect against a Linux threat? Watch the video Unmasking CL-UNK-1068: Defending the Linux Backbone with Behavioral Analytics Think your Linux servers are safe? Think again. In this episode of Threat Vector Investigates, security experts break down CL-UNK-1068, a sophisticated threat actor that evaded detection for five years by targeting the Linux operating system. Discover why traditional anti-virus misses these stealthy attacks and how modern behavioral analytics stop credential theft at the kernel level before your data leaves the building. [Read the blog](https://unit42.paloaltonetworks.com/cl-unk-1068-targets-critical-sectors/) Why are frontier AI models a threat to my organization's security? Watch the video Frontier AI vs. SOC: Mastering Autonomous Defense As frontier AI models demonstrate the ability to compress years of vulnerability research into hours, the window for traditional defense is closing. This briefing explores how frontier models can uncover decades-old zero-day vulnerabilities and automate complex exploit chaining across core infrastructure. Learn why SOCs must pivot to autonomous SecOps and real-time response to survive an era where advanced nation-state capabilities are becoming commonplace. [Read the blog](https://www.paloaltonetworks.com/blog/2026/04/defenders-guide-frontier-ai-impact-cybersecurity/?ts=markdown) What are the latest tactics, techniques and procedures that cybercrime groups are using that I should be aware of? Watch the video Unmasking Boggy Serpens: The AI-Powered Evolution of Cyber Espionage Get the inside scoop on how Boggy Serpens is using GenAI and Rust-based malware to hijack "trusted" accounts and bypass traditional security. You'll learn how to close the gaps in your defense by connecting the dots between email, endpoint and network data to stop these high-speed, identity-driven attacks. [Read the blog](https://unit42.paloaltonetworks.com/boggy-serpens-threat-assessment/) Can I catch an exploit before it's known to the public? Watch the video Intercepting the ToolShell Zero-Day Before the Headlines Go behind the scenes of a pre-disclosure discovery to see how threat hunters identified a critical Remote Code Execution chain targeting Sharepoint servers 24 hours before the CVE was released. How do I detect a silent persistent threat with no malicious activity? Watch the video The Detection Nightmare: Years Pass Without a Move Explore the economy of "access brokers" who maintain dormant network footholds for years, and learn why detecting these silent threats requires analyzing statistical anomalies and process deviations rather than waiting for malicious execution. Can I stop a software supply chain attack hidden in a business tool? Watch the video The 3CX Supply Chain Attack: When Trusted Software Turns Malicious Go inside the Lazarus Group's attack methodology to understand how they weaponized a legitimate application, and why analyzing software behavior---not just digital signatures---is the only way to stop supply chain attacks before they are disclosed. Close Close ## Almost there! Fill out the form to watch instantly. recaptcha First NameLast NameBusiness EmailCompanyJob LevelSelect a job levelJob RoleSelect a job functionPhoneCountryCountryStateStateProvinceProvinceZip CodeDepartment Not You? Sign me up to receive news, product updates, sales outreach, event information and special offers about Palo Alto Networks and its partners. By submitting this form, I understand my personal data will be processed in accordance with [Palo Alto Networks Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) and [Terms of Use.](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. Watch now ## THANK YOU! A Palo Alto Networks specialist will reach out to you shortly. We look forward to connecting with you! ## The Foundation of the AI-Driven SOC Stop attacks with precision. Cortex XDR places endpoint security at the center of the SOC, building the context required for AI-driven detection and automated response. ### Stop What Others Can't Prevent endpoint attacks in real time with rigorously tested capabilities that work out of the box. ### Find What Others Miss Expose the most novel and stealthy tradecraft with AI-driven detection. ### Shut Down The Adversary Cut response time to minutes with native automation and AI agents at your command. * Stop wasting time tuning policies. * Detect across every key data source. * Unify the analyst experience into a single platform. * Slash response times with automation and agentic AI. ![Threat vector interface](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42/threat-vector-series/threat-vector-video-microsite-the-foundation-of-the-ai-driven-soc.jpg) © 2026 [Palo Alto Networks,](https://www.paloaltonetworks.com/) Inc. All Rights Reserved. [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy) | [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use) | [Contact Us](https://www.paloaltonetworks.com/company/contact-sales) ---