From ILOVEYOU to AI Defenders – 25 Years of Email Evolution
Email security evolution: From ILOVEYOU to AI-powered phishing. Advanced Email Security stops threats with cross-domain correlation & automated defense.
Palo Alto Networks
Cortex
Introducing the Cortex MCP Server
This blog introduces the new Cortex MCP, bringing real-time intelligence from XSIAM data to your preferred LLM application.
What’s New in Cortex
The latest release of Cortex delivers autonomous SOC capabilities with Agentic AI, Federated Search, attack surface controls with AI detections, and more.
Transform Your SOC with Cortex XSIAM: Lessons From a Zombie Infestation
Like zombies, cyber threats need vulnerable hosts. Learn how Cortex XSIAM unifies your SOC to detect, respond, and prevent attacks before they spread....
How Cortex Defends Against Microsoft SharePoint "ToolShell" Exploits
Cortex defends against the new "ToolShell" attack chain, which exploits vulnerabilities to achieve full remote code execution without requiring creden...
Defending against Phantom Taurus with Cortex
New APT threat actor, Phantom Taurus, is targeting global organizations. Learn more about how Cortex defends, prevents and responds to malware suite, NET-STAR.
Cortex XDR Is the Only Endpoint Security Market Leader Certified in Both AV...
Cortex XDR is the only endpoint security market leader certified in both AV-Comparative EDR Detection and Anti-Tampering tests, proving superior threat detection.
Disrupting Legacy Vulnerability Management
Introducing the general availability of Cortex Exposure Management, a groundbreaking solution that will redefine traditional vulnerability management.
Cortex Advanced Email Security – Built for Today’s AI Threats
Cortex Advanced Email Security uses AI to stop sophisticated phishing, BEC, and GenAI-powered attacks that bypass traditional email security solutions...
Rapid Response to CVE-2025-31324: Mitigating SAP NetWeaver Visual Composer ...
Protect against SAP NetWeaver's critical CVE-2025-31324 vulnerability with Cortex XSIAM's automated detection and response playbook for identifying an...
What’s New for Cortex and Cortex Cloud (Apr ‘25)
Discover cutting-edge advancements in security ops with the latest Cortex releases. New features enhance threat prevention, platform coverage, automation, and attack surface tests for streamlined and robust sec...
Playbook Creation Reimagined: The Intuitive Approach to Security Automation
Continuing to innovate on our market-leading SOAR to simplify security operations, ensure ease of use in the adoption of automation.
Flexible Security Data Management with Cortex XSIAM & Cribl
Cortex XSIAM now integrates with Cribl to help security teams route high-quality data, fuel AI-driven operations, and detect threats fast with full vi...
Cortex Email Security Module: Defending Against Evolving Email Threats
Discover how Cortex Email Security Module detects sophisticated phishing attacks through AI-powered analysis, cross-domain correlation, and automated ...
NL2XQL: Turning Natural Language into Powerful Cybersecurity Querying
NL2XQL transforms natural language into powerful XQL queries, making cybersecurity investigations accessible to all security teams without requiring d...
Creating an Automated Workflow for Account Lockout Resolution
This playbook automates and speeds up response to excessive user account lockouts, which could indicate a credential-based attack.
Automating Response to Suspicious Process Executions
This playbook automates the investigation and response to suspicious process executions triggered by a scheduled task.
Automating Response to Suspicious SaaS Access From a Tor Exit Node
This playbook shows how a SecOps team can use Cortex XSIAM to automate and speed response to suspicious SaaS access alerts involving a Tor exit node.
Automating Response to Credential Dumping Attacks
Automated playbook designed to detect, contain and remediate credential dumping activity.
Cortex Xpanse Protects Against Malicious Domain Takeover Techniques
Malicious domain takeovers have become an increasing concern for businesses as attackers exploit vulnerabilities by gaining unauthorized access to a d...
SSO Password Spray Playbook
Learn how to detect and prevent SSO password spray attacks with our comprehensive security playbook. Automate response and strengthen authentication security.
Subscribe to the Blog!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.