Latest Blogs

Platformization Maximizes Security Efficacy & IT Operations Efficiency
Partner Integrations, Points of View, Product Features, Products and Services

Platformization Maximizes Security Efficacy & IT Operations Efficiency

Apr 01, 2025
By 
Addressing Federal Cybersecurity Challenges in the Cloud Era
Partners, Public Sector

Addressing Federal Cybersecurity Challenges in the Cloud Era

Mar 28, 2025
By 
Is Your Browser Ground Zero for Cyberattacks?
Mobile Users, Points of View

Is Your Browser Ground Zero for Cyberattacks?

Mar 27, 2025
By 
Making Every Dollar Count for Federal Cybersecurity
Cybersecurity, Government, Public Sector

Making Every Dollar Count for Federal Cybersecurity

Mar 24, 2025
By 
Palo Alto Networks Helps Secure Black Hat Asia 2025
Announcement, Event, News and Events

Palo Alto Networks Helps Secure Black Hat Asia 2025

Mar 19, 2025
By  and 
SOC and Awe — How Autonomous Security Is Changing the Game
AI and Cybersecurity, Interview, Must-Read Articles, Points of View

SOC and Awe — How Autonomous Security Is Changing the Game

Mar 18, 2025
By 

POPULAR BLOGS

Popular Topics

Black Hat
Endpoint protection
AI
Cortex XDR
AI’s Impact in Cybersecurity
Apology

Corporate Blogs

New Frontier of GenAI Threats: A Comprehensive Guide to Prompt Attacks
AI Security, Points of View

New Frontier of GenAI Threats: A Comprehensive Guide to Prompt Attacks

A comprehensive, adaptive and insightful view into prompt attacks against GenAI systems, a framework for defending against emerging threats in AI security.
Apr 09, 2025
By 
Key Cybersecurity Considerations for Financial Institutions
Announcement, Partners

Key Cybersecurity Considerations for Financial Institutions

Financial orgs face cybersecurity challenges. Palo Alto Networks & IBM experts share top considerations in a new vodcast series for better cybersecurity.
Mar 14, 2025
By 
Announcing Unit 42 Managed XSIAM — Redefining 24/7 Managed SecOps
Playbook of the Week, Product Features, Products and Services, Unit 42

Announcing Unit 42 Managed XSIAM — Redefining 24/7 Managed SecOps

Palo Alto Networks announces Unit 42 Managed XSIAM, a solution that provides 24/7 expert-l...
Mar 11, 2025
By 
The Rise of Advanced Attacks — What Business Leaders Need to Know
Announcement, Products and Services

The Rise of Advanced Attacks — What Business Leaders Need to Know

Exfiltration Shield extracts HTTP requests and verify domains in real time, preventing attackers from using trusted domains to exfiltra...
Mar 10, 2025
By 
Enhance Private 5G Security for Industrial Deployments
IoT, Partners, Products and Services

Enhance Private 5G Security for Industrial Deployments

NTT DATA and Palo Alto Networks have partnered to enhance private 5G security for industrial deployments to empower enterprises.
Mar 05, 2025
By   and 
Secure Your 5G Business Transformation
Event, Products and Services

Secure Your 5G Business Transformation

5G and AI technology convergence accelerate business transformation in critical infrastructure and governments, enhancing connectivity and intelligence.
Mar 02, 2025
By 
DeepSeek Unveiled — Exposing the GenAI Risks Hiding in Plain Sight
AI Security, Must-Read Articles, News & Events, Reports, Vulnerability Exposed

DeepSeek Unveiled — Exposing the GenAI Risks Hiding in Plain Sight

Palo Alto Networks saw a 1,800% increase in DeepSeek traffic, highlighting the need to sta...
Feb 28, 2025
By   and 
​​2025 Unit 42 Incident Response Report — Attacks Shift to Disruption
Announcement, Reports, Unit 42

​​2025 Unit 42 Incident Response Report — Attacks Shift to Disruption

The 2025 Incident Response Report revealed that speed, sophistication and scale of attacks have reached unprecedented levels with AI-assisted threats.
Feb 25, 2025
By 
See all Corporate blogs

Network Security Blogs

New Frontier of GenAI Threats: A Comprehensive Guide to Prompt Attacks
AI Security, Points of View

New Frontier of GenAI Threats: A Comprehensive Guide to Prompt Attacks

A comprehensive, adaptive and insightful view into prompt attacks against GenAI systems, a framework for defending against emerging threats in AI security.
Apr 09, 2025
By 
Securing Healthcare Lifelines with Medical IoT Security
Announcement, IoT Security

Securing Healthcare Lifelines with Medical IoT Security

The latest enhancements in Palo Alto Networks Medical IoT Security that protect vulnerable medical devices without disrupting patient care.
Mar 31, 2025
By  and 
Beyond Legacy Defenses: AI-Powered Security for the Modern Enterprise
AI Security, Products and Services

Beyond Legacy Defenses: AI-Powered Security for the Modern Enterprise

Reduce the attack surface, simplify security management & make it harder for attackers to exploit vulnerabilities with Palo Alto Networks.
Mar 27, 2025
By 
Securing GenAI with AI Runtime Security and NVIDIA NeMo Guardrails
AI Security, Announcement, Partners

Securing GenAI with AI Runtime Security and NVIDIA NeMo Guardrails

NVIDIA & Palo Alto Networks are focused on making AI security accessible, flexible, and easy for developers to consume.
Mar 18, 2025
By ,   and 
The Rise of Advanced Attacks — What Business Leaders Need to Know
Announcement, Products and Services

The Rise of Advanced Attacks — What Business Leaders Need to Know

Exfiltration Shield extracts HTTP requests and verify domains in real time, preventing attackers from using trusted domains to exfiltrate data undetec...
Mar 10, 2025
By 
Meet Exfiltration Shield: Prevent Relayed Data Exfiltration Attacks
Announcement, Data Security, Products and Services

Meet Exfiltration Shield: Prevent Relayed Data Exfiltration Attacks

Prevent data exfiltration with Exfiltration Shield which stops DNS relay attacks via HTTP headers.
Mar 05, 2025
By ,   and 
Enhance Private 5G Security for Industrial Deployments
IoT, Partners, Products and Services

Enhance Private 5G Security for Industrial Deployments

NTT DATA and Palo Alto Networks have partnered to enhance private 5G security for industrial deployments to empower enterprises.
Mar 05, 2025
By  and 
Secure Your 5G Business Transformation
Event, Products and Services

Secure Your 5G Business Transformation

5G and AI technology convergence accelerate business transformation in critical infrastructure and governments, enhancing connectivity and intelligence.
Mar 02, 2025
By 
See all Network Security blogs

SASE Blogs

Platformization Maximizes Security Efficacy & IT Operations Efficiency
Partner Integrations, Points of View, Product Features, Products and Services

Platformization Maximizes Security Efficacy & IT Operations Efficiency

Enhance defenses and resilience by integrating security, development, and cloud ops teams. Embrace platformization for improved cybersecurity.
Apr 01, 2025
By 
Is Your Browser Ground Zero for Cyberattacks?
Mobile Users, Points of View

Is Your Browser Ground Zero for Cyberattacks?

New Omdia research commissioned by Palo Alto Networks highlights the role of a secure browser integrated with SASE for improved workforce security.
Mar 27, 2025
By 
Prisma Access Browser Enhances Cybersecurity in Asia-Pacific & Japan
Announcement, News & Events

Prisma Access Browser Enhances Cybersecurity in Asia-Pacific & Japan

Palo Alto Networks has integrated Prisma® Access Browser to help ensure data locality without compromising security or performance.
Mar 12, 2025
By   and 
Why Weak MFA Is as Dangerous as Having No MFA
Product Features, Products and Services, Use-Cases

Why Weak MFA Is as Dangerous as Having No MFA

Get a deeper understanding of MFA risks and how to address them with Palo Alto Networks SaaS Security Posture Management.
Mar 05, 2025
By   and 
Secure Your 5G Business Transformation
Event, Products and Services

Secure Your 5G Business Transformation

5G and AI technology convergence accelerate business transformation in critical infrastructure and governments, enhancing connectivity and intelligence.
Mar 02, 2025
By 
Service Providers Can Seize the 5G Opportunity with Prisma SASE 5G
News & Events, Partner Integrations, Partners, Products and Services

Service Providers Can Seize the 5G Opportunity with Prisma SASE 5G

Prisma SASE 5G provides industry-leading security for enterprises connected to service pro...
Mar 02, 2025
By   and 
DeepSeek Unveiled — Exposing the GenAI Risks Hiding in Plain Sight
AI Security, Must-Read Articles, News & Events, Reports, Vulnerability Exposed

DeepSeek Unveiled — Exposing the GenAI Risks Hiding in Plain Sight

Palo Alto Networks saw a 1,800% increase in DeepSeek traffic, highlighting the need to sta...
Feb 28, 2025
By   and 
Seamless Service Provider Network Attach with Prisma SASE
News & Events, Partner Integrations, Partners, Products and Services

Seamless Service Provider Network Attach with Prisma SASE

Prisma SASE now enables seamless network attach and deep network integration with service provider partner core and transport networks....
Feb 27, 2025
By   and 
See all SASE blogs

Cloud Security Blogs

Why Cloud Security Must Be Cloud-Agnostic

Why Cloud Security Must Be Cloud-Agnostic

Can CSPs offer effective cloud security when using a competitor’s cloud infrastructure or is it wise to adopt cloud-agnostic security across your multicloud estate?
Apr 01, 2025
By 
Is 'Peace-Time' Security Any Match for the Modern Threat Landscape?
Cloud Runtime Security, Cloud Security

Is 'Peace-Time' Security Any Match for the Modern Threat Landscape?

Modern cloud threats require real-time protection to stop attacks in progress, correlate threats across the application stack and enable rapid, automa...
Mar 24, 2025
By 
Cortex Cloud Introduces the Third Wave of CNAPP Innovation
Cloud Security, Cloud-Native Application Protection Platform

Cortex Cloud Introduces the Third Wave of CNAPP Innovation

Prisma Cloud becomes Cortex Cloud: Our CNAPP story of innovation, defining and transforming cloud security for the duration of CNAPP’s five-year marke...
Mar 19, 2025
By 
Cloud Runtime Security Without Tradeoffs
CDR, Cloud Runtime Security, Cloud Security

Cloud Runtime Security Without Tradeoffs

Cortex Cloud’s agentless scanning provides seamless visibility, while agent-based security delivers real-time monitoring and cloud runtime protection.
Mar 11, 2025
By  and 
Introducing Cortex Cloud — The Future of Real-Time Cloud Security
Announcement, Application Security, Cloud Security, CNAPP, News and Events, Product Features, Products and Services

Introducing Cortex Cloud — The Future of Real-Time Cloud Security

Cortex Cloud brings the world’s leading CNAPP onto the #1 SecOps platform, delivering real-time protection — for the fir...
Feb 13, 2025
By 
Prisma Cloud: The Industry’s Only FedRAMP High Authorized CNAPP
Announcement

Prisma Cloud: The Industry’s Only FedRAMP High Authorized CNAPP

FedRAMP bestows the first CNAPP with FedRAMP High authorization, making Prisma Cloud the only CNAPP to hold FedRAMP High certification.
Dec 19, 2024
By 
GigaOm Names Prisma Cloud a Leader in Software Supply Chain Security
Announcement, AppSec, CI/CD

GigaOm Names Prisma Cloud a Leader in Software Supply Chain Security

Secure your software supply chain with Prisma® Cloud, the top-ranked leader in GigaOm's Radar, offering end-to-end protection for cloud-native applications.
Dec 17, 2024
By 
Forecasting the 2025 Cloudscape
Cloud Security, Points of View, Predictions

Forecasting the 2025 Cloudscape

Discover 2025 cloud security trends, predictions on AI-driven threats, market consolidation, data security in CNAPPs, and more from Prisma Cloud leaders.
Dec 05, 2024
By 
See all Cloud Security blogs

Security Operations Blogs

Automating Response to Unauthorized Scheduled Task Executions
Playbook of the Week, Uncategorized

Automating Response to Unauthorized Scheduled Task Executions

Discover how Cortex XSIAM automates detection and response to malicious scheduled tasks that reference external HTTP/FTP sources for improved security...
Apr 03, 2025
By 
Automating Response to Unauthorized Tor Logins
Playbook of the Week, Uncategorized

Automating Response to Unauthorized Tor Logins

The A Successful Login from Tor playbook in Cortex XSIAM enhances security teams’ ability to detect and respond to unauthorized access attempts using Tor. By automating identity ve...
Mar 27, 2025
By 
Automating Response to Suspicious Process Executions
Playbook of the Week, Unkategorisiert

Automating Response to Suspicious Process Executions

This playbook automates the investigation and response to suspicious process executions triggered by a scheduled task.
Mar 20, 2025
By 
Palo Alto Networks Helps Secure Black Hat Asia 2025
Announcement, Event, News and Events

Palo Alto Networks Helps Secure Black Hat Asia 2025

Palo Alto Networks secures Black Hat Asia 2025 with pride. Our NOC and SOC involvement ensures uninterrupted conference experience for attendees.
Mar 19, 2025
By   and 
SOC and Awe — How Autonomous Security Is Changing the Game
AI and Cybersecurity, Interview, Must-Read Articles, Points of View

SOC and Awe — How Autonomous Security Is Changing the Game

Learn how AI and cloud-native detection are revolutionizing SOCs into autonomous security ops. Clay Brothers of Unit 42 warns against t...
Mar 18, 2025
By 
Automated Rapid Response to Suspicious Remote Scheduled Task Creation
Playbook of the Week

Automated Rapid Response to Suspicious Remote Scheduled Task Creation

This playbook automates the identification and remediation of persistent threats that leverage scheduled tasks to execute malicious payloads across endpoints.
Mar 13, 2025
By 
Announcing Unit 42 Managed XSIAM — Redefining 24/7 Managed SecOps
Playbook of the Week, Product Features, Products and Services, Unit 42

Announcing Unit 42 Managed XSIAM — Redefining 24/7 Managed SecOps

Palo Alto Networks announces Unit 42 Managed XSIAM, a solution that provides 24/7 expert-l...
Mar 11, 2025
By 
Automating Response to Suspicious SaaS Access From a Tor Exit Node
Playbook of the Week

Automating Response to Suspicious SaaS Access From a Tor Exit Node

This playbook shows how a SecOps team can use Cortex XSIAM to automate and speed response to suspicious SaaS access alerts involving a Tor exit node.
Mar 06, 2025
By 
See all Security Operations blogs

Unit 42 Threat Research

company article
High Profile Threats Vulnerabilities

Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-...

We detail the observed limited activity regarding authentication bypass vulnerability CVE-2024-0012 affecting specific versions of PAN-OS software, and include ...
November 22, 2024
By  Unit 42
company article
Cloud Cybersecurity Research Threat Research

OH-MY-DC: OIDC Misconfigurations in CI/CD

We found three key attack vectors in OpenID Connect (OIDC) implementation and usage. Bad actors could exploit these to access restricted resources....
April 4, 2025
By  Aviad Hahami
company article
Business Email Compromise Malware Threat Research

Evolution of Sophisticated Phishing Tactics: The QR Code Phenomen...

Phishing with QR codes: New tactics described here include concealing links with redirects and using Cloudflare Turnstile to evade security crawlers....
April 1, 2025
By  Aiden Huang ,   Vishwa Thothathri
company article
Cloud Cybersecurity Research Threat Research

Cloud Threats on the Rise: Alert Trends Show Intensified Attacker...

Understanding trends amidst noise: tracking shifts in security alerts allows cloud defenders to parse threats from attackers targeting IAM, storage and more....
March 27, 2025
By  Nathaniel Quist
company article
Cloud Cybersecurity Research High Profile Threats

GitHub Actions Supply Chain Attack: A Targeted Attack on Coinbase...

A compromise of the GitHub action tj-actions/changed-files highlights how attackers could exploit vulnerabilities in third-party actions to compromise supply ch...
March 20, 2025
By  Omer Gil ,   Aviad Hahami ,   Asi Greenholts ,   Yaron Avital
company article
Malware Threat Research

Off the Beaten Path: Recent Unusual Malware

Three unusual malware samples analyzed here include an ISS backdoor developed in a rare language, a bootkit and a Windows implant of a post-exploit framework....
March 14, 2025
By  Dominik Reichel
company article
Cybercrime Malware Threat Research

Investigating Scam Crypto Investment Platforms Using Pyramid Sche...

We identified a campaign spreading thousands of sca crypto investment platforms through websites and mobile apps, possibly through a standardized toolkit....
March 13, 2025
By  Shehroze Farooqi ,   Nabeel Mohamed ,   Brad Duncan
company article
Threat Research Vulnerabilities

Multiple Vulnerabilities Discovered in a SCADA System

We identified multiple vulnerabilities in ICONICS Suite, SCADA software used in numerous OT applications. This article offers a technical analysis of our findin...
March 7, 2025
By  Asher Davila ,   Malav Vyas
See all Unit 42 threat research

Subscribe to the Newsletter!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.

By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.

Get the latest news, invites to events, and threat alerts