Blog
Security Operations

Security Operations

What’s New in Cortex: The Latest Innovations for the World’s #1 SecOps Platform (Feb ’25 Release)

Cortex SOC platform introduces new enhancements and features across the entire portfolio including a brand new integration with Prisma Access Browser, enhanced investigation experience using causality forensics data, new MacOS detectors, and more.

Announcement

Must-Read Articles

News and Events

Feb 04, 2025

By Scott Simkin

Security Operations

AI Security, Company & Culture, Unit 42

DeepSeek’s Rise Shows AI Security Remains a Moving Target

DeepSeek is an LLM threatening to disrupt current AI market leaders and fundamentally change the economics of AI-powered applications.

Jan 30, 2025

By Anand Oswal

Announcement, Must-Read Articles, Product Features, Use-Cases

New Cortex Detectors for macOS Address Stealers and Malicious AppleScript

Cortex releases new detection analytics targeting macOS stealers and malicious applescript

Feb 04, 2025

By Dan Flaherty

Must-Read Articles, Product Features, Uncategorized

Detecting Threats with Microsoft Graph Activity Logs

Discover how Microsoft Graph API is used as an attack vector by threat actors through a real-world attack scenario. Find out why monitoring Microsoft Graph activity logs is important and how Cortex delivers tai...

Feb 02, 2025

By Eden Elazar

Playbook of the Week

Automating Response to Multi-Factor Authentication Threats

SEO Meta description Cortex XSIAM automated playbook addressing user rejected numerous SSO MFA attempts

Jan 30, 2025

By Tomer Haimof

More Blogs

Displaying 1—16 of

466 results

Sort By:

Announcement, Government, News and Events

Cortex Is the First SOC Platform to Achieve FedRAMP High Authorization

Cortex achieves FedRAMP High Authorization, becoming the first AI-driven SOC platform to meet the highest government security standards.

Jan 30, 2025

By Brendan Powers

Playbook of the Week, Product Features

Automating Response to Unauthorized Email Forwarding Activity in Google Wor...

Automating response to “A mail forwarding rule was configured in Google Workspace” with Cortex XSIAM

Jan 28, 2025

By Arik Day

Playbook of the Week, Uncategorized

Automate Response to Event Log Clearing Alerts with Cortex XSIAM

Automating response to potentially malicious event logs clearing activity with Cortex XSIAM

Jan 16, 2025

By Sasha Sokolovich

Playbook of the Week, Product Features

Handling Successful SSO Sign-ins from Tor

Automating response to successful Tor SSO sign-ins with Cortex XSIAM

Jan 09, 2025

By Omri Itzhak

Announcement

Cortex XDR Delivers Unmatched 100% Detection in MITRE Evals 2024

Cortex XDR achieves 100% technique-level detection in the 2024 MITRE ATT&CK evaluation.

Dec 11, 2024

By Scott Simkin

Must-Read Articles, News and Events

MITRE ATT&CK 2024: Raising the Bar for Security Testing

MITRE's 2024 ATT&CK evaluations have evolved, testing vendors against Ransomware as a Service and DPRK threats, introducing false positive detection.

Dec 10, 2024

By Peter Havens

Points of View, Threat Prevention

Stoked — Manifesting Innovation in Shared Threat Intelligence

Explore how skateboarding's collaborative spirit mirrors sharing threat intelligence in cybersecurity, fostering innovation and collective defense aga...

Nov 25, 2024

By Dena De Angelo

Company & Culture, Products and Services

Automation in Action — How 3 Customers Revolutionized SecOps with XSOAR

See how three of Palo Alto Networks customers across various industries and regions are leveraging Cortex XSOAR.

Nov 20, 2024

By Dena De Angelo

Must-Read Articles, Product Features

Identify 60 Additional Server Protocols with Cortex Xpanse

Discover how Cortex Xpanse now identifies 60 additional server protocols in your attack surface, protecting against emerging threats across proxy, net...

Nov 12, 2024

By Ruby Rios

Must-Read Articles, Product Features

Optimize Analyst Workflows with Cortex Copilot

Discover how Cortex Copilot streamlines security analyst workflows, reduces burnout, and accelerates incident investigations by leveraging AI to automate mundane tasks.

Nov 07, 2024

By Yitzy Tannenbaum

AI Governance, AI Security, Points of View

Shaking Up Security — The Power of AI-Native SOCs

Discover how AI-native SOCs revolutionize cybersecurity, reducing alert fatigue and improving threat detection. Transform your security operations with AI.

Nov 06, 2024

By Dena De Angelo

AI Governance, AI Security

Banking on AI to Defend the Financial Services Sector

Discover how financial institutions leverage AI to combat cyberthreats, enhance fraud detection, and streamline operations. Learn about FinTech security.

Oct 31, 2024

By Dena De Angelo

Cloud Security, Points of View, Product Features

Cloud Security — Maturing Past the Awkward Teenage Years

Explore cloud security's maturation, common misconceptions, and best practices for robust cloud defenses.

Oct 22, 2024

By Dena De Angelo

Must-Read Articles, Product Features, Uncategorized

Cutting Through the Noise: Simplifying SIEM Alerts with Cortex

Discover how integrating Cortex XSOAR with Splunk SIEM reduces false positives, automates alert triage, and enhances cybersecurity efficiency.

Oct 16, 2024

By Nadav Shai Kanon

Announcement, Must-Read Articles, News and Events, Product Features

Cortex Copilot - Another Step Forward in SOC Transformation

Discover how Cortex Copilot, an AI-powered security assistant, transforms SOC operations by speeding up investigations and optimizing analyst workflow...

Oct 15, 2024

By Gil Blum

Must-Read Articles, Product Features, Use-Cases

Bye Whack-a-Mole: The New Cortex Generic Persistence Analytics Module

Discover Palo Alto Networks' new Generic Persistence Analytics module, detecting malware persistence across techniques for enhanced cybersecurity.

Oct 10, 2024

By Tom Fakterman, Yoav Zemah and Matan Haim Guez

Load more blogs

More Blogs

Displaying 1—16 of

439 results

Sort By:

Must-Read Articles, News and Events

New Cloud Location Innovates and Strengthens Presence in Indonesia

Find out how Palo Alto Networks’ secure cloud infrastructure is aiding the growth of businesses in Indonesia, enabling them to leverage advanced cloud...

Jul 01, 2024

By The Prisma Cloud Team

Must-Read Articles, Product Features, Products and Services

AI, Cybersecurity and the Rise of Large Language Models

Discover how AI impacts threat detection, incident response and risk management, and learn about strategies for secure AI integration.

Apr 02, 2024

By Yitzy Tannenbaum

Announcement, Must-Read Articles, News and Events, Product Features, Products and Services

Forrester Names Palo Alto Networks a Leader in XDR

Palo Alto Networks was named a leader in extended detection and response platforms by Forrester for Cortex XDR.

Jun 03, 2024

By Gonen Fink

Announcement, Products and Services

Palo Alto Networks Excels in MITRE Managed Services Evaluation

Unit 42 MDR identified the most important details of the cyberthreat in the MITRE managed services evaluation - learn more.

Jun 18, 2024

By Sharon Maydar

Announcement, Must-Read Articles, News and Events, Products and Services

Palo Alto Networks Recognized as a Leader in the 2023 Gartner Magic Quadran...

Palo Alto Networks was named a leader in endpoint protection platforms by Gartner for Cortex XDR.

Jan 12, 2024

By Gonen Fink

Company & Culture, Must-Read Articles, Product Features, Products and Services

AI Provides an Rx for Cybersecurity in Healthcare

Tapan Mehta discusses the challenges, opportunities and future of AI in protecting healthcare infrastructure and data.

Jul 10, 2024

By Dena De Angelo and Tapan Mehta

Announcement, Public Sector

Advancing Innovation and Harnessing AI to Secure the Homeland

Before the House Committee on Homeland Security, Unit 42 shares the Palo Alto Networks perspective on the intersection of AI and cybersecurity.

Jun 12, 2024

By Michael Sikorski

Announcement, Must-Read Articles, News and Events, Products and Services

ONLY Cortex Delivers 100% Protection and Detection in MITRE Engenuity

MITRE Engenuity ATT&CK Evaluations have been released. This year, Cortex is the only vendor with 100% prevention and analytic detection.

Sep 20, 2023

By Peter Havens

Must-Read Articles, Points of View, Products and Services

The Dark Side of AI in Cybersecurity — AI-Generated Malware

Bar Matalon and Rem Dudas shed light on their groundbreaking research into AI-generated malware and predictions for the future of AI in cybersecurity....

May 15, 2024

By Dena De Angelo

Must-Read Articles, News and Events, Product Features

Introducing the New Cortex Shellcode AI Protection: A Precision AI-Driven M...

Discover Palo Alto Networks' new Cortex Shellcode AI Protection Module. Learn how Precision AI™ detects and prevents elusive shellcode attacks in real...

Jul 03, 2024

By Cortex Research Team

Company & Culture, Customer Spotlight, Must-Read Articles, Product Features, Products and Services, Use-Cases

AI Powers Sabre's Enhanced Threat Detection & Response

Precision AI by Palo Alto Networks helps security teams trust AI outcomes using security-specific models to automate det...

May 28, 2024

By Dena De Angelo

Company & Culture, Products and Services, Unit 42

Creating a Security Program with Less Complexity and More Visibility

Our 2024 Incident Response Report shows how vulnerabilities go unpatched, and critical resources sit exposed.

May 23, 2024

By Unit 42

Playbook of the Week, Uncategorized

Playbook of the Week: Automating Management of XDR Identity Analytics Alert...

Playbook that automates management of XDR identity analytics alerts for speedier response to identity threats.

Mar 07, 2024

By Omri Itzhak

Announcement, Must-Read Articles, News and Events, Product Features

What’s Next in Cortex - New Wave of Innovations in Cortex (June 2024 Releas...

Discover the latest innovations in Cortex products: XSIAM 2.3, XDR 3.11, Xpanse 2.6, and XSOAR 8.7. Enhance SecOps efficiency and threat prevention

Jul 02, 2024

By Gonen Fink

Must-Read Articles, Non classifié(e), Product Features

A Deep Dive Into Malicious Direct Syscall Detection

This blog explains how attackers use direct syscalls to overcome most EDR solutions, by first discussing the conventional Windows syscall flow and how most EDR solutions monitor those calls.

Feb 13, 2024

By Or Chechik and Ofir Ozer