Threat Intelligence in the Era of AI
Discover how a custom threat intelligence AI agent automates security tasks, analyzes global risks in real-time, and strengthens your defense against cyberthreats.
Security Operations
Must-Read Articles
Unmasking Boggy Serpens' AI-Powered Surge
Boggy Serpens (MuddyWater) weaponizes trust & AI to create disposable malware, bypassing traditional defense. Unit 42 reveals how behavioral detection stops them.
Why Your EDR Strategy Needs a Backup Plan
Mitigate single-vendor EDR risk. See why 85% of organizations are adding a secondary endpoint vendor for infrastructure resilience & continuity.
Securing Data in the AI Era: Purpose-Built DLP for the Modern Endpoint
Stop data leaks to AI tools, ChatGPT, & desktop apps with Cortex Endpoint DLP. Get context-aware, on-device security against Shadow IT exfiltration.
Always on the Case: Introducing the AgentiX Case Investigation Agent
Accelerate your security operations with the Cortex AgentiX Case Investigation Agent. This agentic AI teammate provides expert triage and investigatio...
Modernising the SOC: Navigating the Shift to Platformization and Agentic AI
Explore a discussion between IDC analyst Duncan Brown and Palo Alto Networks about agentic AI and platformization strategies to modernise the SOC and ...
Introducing Cortex XDR 5.0: The New Standard for Endpoint Security
Cortex XDR 5.0 redefines endpoint security with agentic AI, unified exposure management, endpoint DLP, and enhanced Linux & macOS protection.
AI Security, Announcement, Must-Read Articles, News and Events, Product Features, Products and Services
Securing the Agentic Endpoint
Secure the Agentic Endpoint. Traditional security misses the risk of AI agents. Learn how Palo Alto Networks and the Koi acquisition bring new protection.
2026 Unit 42 Global Incident Response Report — Attacks Now 4x Faster
Attackers are leveraging identity, AI, and supply chain exposure. Unit 42's Global 2026 IR Report reveals faster, broader, harder-to-contain threats.
AI and Cybersecurity, AI Security, Interview, Must-Read Articles, People of Palo Alto Networks, Points of View
When Security Becomes an Afterthought
As AI deployment races ahead, security scrambles to keep up. Nikesh Arora on why AI's biggest risk is treating security as an afterthought.
Stop Chasing Ghosts: The Strategic Case for Compensating Controls
Transform theoretical risk into operational outcomes. Cortex Exposure Management’s new Security and Compensating Controls feature reveals your true re...
Ransomware Attacks: Why Your Endpoint Protection Can't Keep Up
Ransomware attacks are 100x faster, beating legacy EPPs. Learn how Cortex XDR stops 25-minute attacks before exfiltration with machine-speed defense.
Intercepting the ToolShell Zero-Day Before the Headlines
How Unit 42's threat hunters warned customers about Tool Shell before the headlines broke. Discover the power of proactive hunting for zero-day threats.
The Detection Nightmare: Years Pass Without a Move
Patient adversaries hide for months using persistence techniques. Learn how Cortex XDR detects dormant backdoors without overwhelming SOC teams with alerts.
What the Alien Franchise Taught Me About Cybersecurity
Ripley's tactics from Alien are your blueprint for SOC transformation to defeat modern threats with AI-driven security, automation and SIEM modernization.
The 3CX Supply Chain Attack: When Trusted Software Turns Malicious
Cortex XDR's AI stopped the 3CX supply chain attack days before the security industry knew it existed. See how behavioral detection caught what signat...
Cortex AgentiX: A Behind-the-Scenes Perspective
A behind-the-scenes look at how we build and manage agentic AI agents with Cortex AgentiX.
2025: The Year of the Autonomous SOC. The Year of XSIAM.
Explore how Cortex XSIAM made 2025 the year of the autonomous SOC—unifying data, AI, and automation to deliver unmatched security.
From ILOVEYOU to AI Defenders – 25 Years of Email Evolution
Email security evolution: From ILOVEYOU to AI-powered phishing. Advanced Email Security stops threats with cross-domain correlation & automated defens...
Prioritizing Impact: A Practical Framework for XDR Success
Learn practical XDR implementation strategies from security experts. Reduce alert fatigue, expand beyond EDR, and measure real security impact with pr...
Introducing the Cortex MCP Server
This blog introduces the new Cortex MCP, bringing real-time intelligence from XSIAM data to your preferred LLM application.
Subscribe to Security Operations Blogs!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.
This site is protected by reCAPTCHA and the Google
Privacy Policy and
Terms of Service apply.