Blog
Security Operations

Security Operations

Cortex AES Extends Code Package Visibility to Go

Discover how Cortex AES extends supply chain security to Go modules across Windows and macOS endpoints. Flag malicious packages, retracted versions, and unmaintained code before they compromise your cloud-native infrastructure.

AI and Cybersecurity

AI Security

Cybersecurity

Must-Read Articles

Product Features

Use-Cases

Oct 07, 2026

By Belle Kriger and Alice Nguyen

Security Operations

Open Sesame: How a Fail-Open Bug in Open VSX's New Scanner Let Malware Walk...

Editor’s Note: This article was originally published by Koi Security on March 27, 2026. Following Koi Security’s acquisition by Palo Alto Networks, it has been republished to preserve historical research findin...

Oct 12, 2026

By Oran Simhony

Supply Chain Under Siege: GlassWorm’s Native Rust Loaders Target VS Code

Editor’s Note: This article was originally published by Koi Security on December 10, 2025. Following Palo Alto Networks' acquisition of Koi Security, this research has been migrated to the Palo Alto Networks Th...

Oct 09, 2026

By Lotan Sery

AI and Cybersecurity

GlassWorm Goes Mac: Fresh Infrastructure, New Tricks

Editor’s note: This article was originally published by Koi Security on December 29, 2025. Koi is now part of Palo Alto Networks, and this article has been adapted for the Palo Alto Networks blog. The technical...

Oct 01, 2026

By Gal Hachamov

AI and Cybersecurity, Data Security, Data Security Platform, DDR, DLP, DSPM

What the 2026 OWASP Top 10 Tells Us About the Growing Role of Data Security...

OWASP Top 10 2026 reveals how AI security is changing as AI gains greater access to enterprise data, tools and autonomy, making data security more cri...

Sep 28, 2026

By Sharon Farber and Roni Yaari

More Blogs

Displaying 1—16 of

613 results

Sort By:

AI and Cybersecurity, AI Security, Announcement, Cybersecurity, Must-Read Articles, News and Events, Products and Services

Cortex XDR is the only Certified Leader in AV-Comparatives EPR 7 years in a...

Modern enterprise security teams are locked in an escalating crisis where attackers levera...

Sep 16, 2026

By Emran Mazumder

Data Security, Data Security Platform, DDR, DLP, DSPM

Cortex Data Security – New AI-Native Operating Model for Protecting Data – ...

We’re pleased to announce that after two months in public preview, Cortex Data Security is now generally available. And we’re already looking ahead to...

Sep 15, 2026

By Yotam Ben-Ezra

AI and Cybersecurity, AI Security, Cloud Workload Protection Platform, Cybersecurity, Threat Intelligence, Use-Cases

Beyond the SEG: Why Single-Domain Email Defenses Break Down in the Modern S...

Generative AI has fundamentally rewritten the rules of social engineering. Using LLMs, adversaries now automate open-sou...

Sep 10, 2026

By Sehrish Khan and Guy Mazaltrim

AI and Cybersecurity, Must-Read Articles, Product Features

Building an Agentic SOC: 7 Keys for Success

AI has handed security teams both a remarkable opportunity and a rather inconvenient deadline. Agentic AI can take on investigations, automate routine work and compress response times. Frontier AI is doing some...

Sep 09, 2026

By Kasey Cross

AI and Cybersecurity, Announcement, Cybersecurity, Must-Read Articles, Product Features, Products and Services, Use-Cases

Cortex XDR Scores Perfect 100% in SE Labs 2026 Ransomware Test

Ransomware is accelerating at machine speed as adversaries harness frontier AI models to a...

Sep 09, 2026

By Emran Mazumder

Cybersecurity

Built for Resilience: How Cortex XDR Overcomes Modern SOC Architectural Lim...

Discover how Cortex XDR unifies multi-domain telemetry, eliminates logging cost penalties, and speeds up Linux threat response.

Sep 04, 2026

By Sehrish Khan

AI and Cybersecurity, Must-Read Articles, Product Features, Products and Services

Orchestrating the Agentic SOC: A Practical Guide to Model Context Protocol

Learn how Model Context Protocol (MCP) connects Cortex XSIAM, AgentiX, XDR and Cloud to your SOC tool stack, to build a unified AI SecOps ecosystem.

Sep 03, 2026

By Jane Goh

AI and Cybersecurity, News and Events, Uncategorized

Introducing Active Directory Security Posture Management in Cortex ITDR

Active Directory remains a primary target for identity-based attacks. A single risky configuration—whether a misconfigured certificate template, exces...

Aug 27, 2026

By Stav Setty and Shachar Roitman

Product Features, Uncategorized, Use-Cases

A Quarter of Innovation with Koi Agentic Endpoint Security

Protect endpoints from autonomous AI risks with Koi Agentic Endpoint Security—get full visibility, runtime policy control, and automated remediation....

Aug 18, 2026

By Alice Nguyen, Tali Ash and Netta Zohar

Announcement, Must-Read Articles, News and Events, Product Features

Finland, Meet the AI-Driven SOC

Cortex services are now available from a cloud location in Finland, helping organizations support local data residency and modern security operations.

Aug 12, 2026

By Kasey Cross

Cybersecurity, Products and Services

SE Labs Awards Palo Alto Networks the Anti-Tampering Certification

Breaching a network is merely the opening move. The real prize for an attacker is silencing the security agent, unlocking complete freedom to harvest...

Aug 11, 2026

By Emran Mazumder

AI and Cybersecurity, Announcement, Data Security Platform, DDR, DLP, DSPM

Announcing the Public Preview of Cortex Data Security: Unified Data Protect...

Data security platform solutions secure organizational data across cloud, SaaS, and AI environments with unified DSPM, DLP, and automated threat respo...

Aug 11, 2026

By Yotam Ben-Ezra

Agent Security, Agentic Identity Security, AI and Cybersecurity, AI Governance, AI Security, Announcement, Assess AI Risks, Must-Read Articles, News and Events, Product Features, Secure AI Infrastructure, Secure GenAI Use

Your EDR is Blind to the Agentic Frontier

We are living through a massiv...

Aug 10, 2026

By Anna Qi and Tali Ash

AI and Cybersecurity, Must-Read Articles, News and Events, Product Features, Uncategorized, Use-Cases

Bridging the Gap: An Unprecedented Approach to Browser and Endpoint Securit...

The enterprise workforce now operates almost entirely within the web browser. In fact, employees do roughly 85% of their...

Aug 06, 2026

By Sehrish Khan, Maxim Shifrin, Kritika Singhal and Gal Shalev

AI and Cybersecurity, AI Security, Announcement, Cybersecurity, Must-Read Articles, News and Events, Product Features, Products and Services, Use-Cases

Identity Meets the SOC: Redefining the Last Perimeter

Let’s start with a hard truth that every security leader is waking up to: adversaries aren...

Aug 06, 2026

By Emran Mazumder and David Trigano

Cloud Security, Must-Read Articles, Use-Cases

Living Off the Cloud: Analyzing AWS Systems Manager Attack Vectors

Learn how adversaries abuse AWS Systems Manager (SSM) for "Living Off the Cloud" attacks to execute code and move laterally between cloud and on-premi...

Aug 04, 2026

By Eden Elazar

Load more blogs

More Blogs

Displaying 1—16 of

613 results

Sort By:

Announcement, Must-Read Articles, Threat Intelligence, Unit 42

2026 Unit 42 Global Incident Response Report — Attacks Now 4x Faster

Attackers are leveraging identity, AI, and supply chain exposure. Unit 42's Global 2026 IR Report reveals faster, broader, harder-to-contain threats.

Feb 17, 2026

By Sam Rubin

Announcement, Products and Services, Threat Intelligence, Unit 42

Introducing Unit 42 Managed XSIAM 2.0

Unit 42 Managed XSIAM 2.0 delivers a 24/7 managed SOC with continuous detection, investigation, and full-cycle remediation.

Feb 17, 2026

By Sharon Maydar

AI and Cybersecurity, AI Security, Announcement, Cybersecurity, Must-Read Articles, News and Events, Product Features, Products and Services, Use-Cases

Identity Meets the SOC: Redefining the Last Perimeter

Let’s start with a hard truth that every security leader is waking up to: adversaries aren...

Aug 06, 2026

By Emran Mazumder and David Trigano

AI and Cybersecurity, Must-Read Articles, News and Events, Product Features, Uncategorized, Use-Cases

Bridging the Gap: An Unprecedented Approach to Browser and Endpoint Securit...

The enterprise workforce now operates almost entirely within the web browser. In fact, employees do roughly 85% of their...

Aug 06, 2026

By Sehrish Khan, Maxim Shifrin, Kritika Singhal and Gal Shalev

AI and Cybersecurity, Must-Read Articles

The Frontier AI SOC Has Arrived

Cortex brings the latest frontier AI models into the SOC, letting analysts dynamically select the best model for each task while benefiting from state-of-the-art advances in AI.

Jun 11, 2026

By Ariel Blaier and Jane Goh

AI and Cybersecurity, Announcement, Data Security Platform, DDR, DLP, DSPM

Announcing the Public Preview of Cortex Data Security: Unified Data Protect...

Data security platform solutions secure organizational data across cloud, SaaS, and AI environments with unified DSPM, DLP, and automated threat respo...

Aug 11, 2026

By Yotam Ben-Ezra

Announcement, News and Events, Points of View

Cortex Cloud — Unified Efficiency, Now with Dual FedRAMP Authority

Cortex Cloud achieved FedRAMP High and Moderate authorizations since its Feb 2025 launch, highlighting its secure cloud commitment.

May 21, 2025

By Eric Trexler

Data Security, Data Security Platform, DDR, DLP, DSPM

Cortex Data Security – New AI-Native Operating Model for Protecting Data – ...

We’re pleased to announce that after two months in public preview, Cortex Data Security is now generally available. And we’re already looking ahead to...

Sep 15, 2026

By Yotam Ben-Ezra

AI and Cybersecurity, Uncategorized

What’s New in Cortex

The latest Cortex portfolio release delivers new frontier AI capabilities and personalized agents, making detection and remediation faster than ever.

Jul 30, 2026

By Scott Simkin

AI and Cybersecurity, Announcement, Cybersecurity, Must-Read Articles, Product Features, Products and Services, Use-Cases

Cortex XDR Scores Perfect 100% in SE Labs 2026 Ransomware Test

Ransomware is accelerating at machine speed as adversaries harness frontier AI models to a...

Sep 09, 2026

By Emran Mazumder

AI Security, Announcement, Must-Read Articles, News and Events, Product Features, Products and Services

Securing the Agentic Endpoint

Secure the Agentic Endpoint. Traditional security misses the risk of AI agents. Learn how Palo Alto Networks and the Koi acquisition bring new protection.

Feb 17, 2026

By Hadar Oren

Your EDR is Blind to the Agentic Frontier

We are living through a massiv...

Aug 10, 2026

By Anna Qi and Tali Ash

AI and Cybersecurity, AI Security, Announcement, Cybersecurity, Must-Read Articles, News and Events, Products and Services

Cortex XDR is the only Certified Leader in AV-Comparatives EPR 7 years in a...

Modern enterprise security teams are locked in an escalating crisis where attackers levera...

Sep 16, 2026

By Emran Mazumder

Product Features, Uncategorized, Use-Cases

A Quarter of Innovation with Koi Agentic Endpoint Security

Protect endpoints from autonomous AI risks with Koi Agentic Endpoint Security—get full visibility, runtime policy control, and automated remediation....

Aug 18, 2026

By Alice Nguyen, Tali Ash and Netta Zohar

Announcement, News and Events, Products and Services

Forrester Names Palo Alto Networks a Leader in Attack Surface Management

Palo Alto Networks was named a leader in attack surface management by Forrester for Cortex Xpanse.

Sep 24, 2024

By Greg Heon

How Koi Protects Against Developer Supply Chains

A poisoned VS Code extension compromised 3,800 GitHub repos in minutes. Here's why traditional EDR missed it and how Agentic Endpoint Security closes the gap.

May 22, 2026

By Yuval Ronen and Emran Mazumder

Load more blogs

Get the latest news, invites to events, and threat alerts

By submitting this form, I understand my personal data will be processed in accordance with Palo Alto Networks Privacy Statement and Terms of Use.

Security Operations

Cortex AES Extends Code Package Visibility to Go

Security Operations

More Blogs

More Blogs

Subscribe to Security Operations Blogs!

Get the latest news, invites to events, and threat alerts