Blog
Security Operations

Security Operations

Cortex XDR Is the Only Endpoint Security Market Leader Certified in Both AVC EDR Detection and Anti-Tampering Tests

Cortex XDR is the only endpoint security market leader certified in both AV-Comparative EDR Detection and Anti-Tampering tests, proving superior threat detection.

News and Events

Aug 06, 2025

By Emran Mazumder

Security Operations

AI and Cybersecurity, Must-Read Articles, News and Events, Product Features, Use-Cases

SE Labs Awards Palo Alto Networks AAA Rating and 100% Prevention Against Ra...

SE Labs awards Palo Alto Networks Cortex XDR a perfect 100% accuracy rating and AAA grade for ransomware protection with zero false positives.

Aug 05, 2025

By Emran Mazumder

AI Security, Interview

Security by Design — UX and AI in Modern Cybersecurity

Nelson Lee reveals how thoughtful design and emerging AI technologies are reshaping cybersecurity operations from the ground up.

Jul 24, 2025

By Dena De Angelo

Must-Read Articles, Product Features

Think You Have Visibility? Think Again.

Discover how Cortex XDR & XSIAM's Data Stitching and Smart Grouping unify security data, streamline SecOps, and accelerate threat investigations.

Jul 29, 2025

By Greg Smith

AI and Cybersecurity, Announcement, Product Features

What’s New for Cortex (July ‘25)

The latest release of Cortex harnesses AI to deliver more proactive security, expand visibility, and streamline workflows.

Jul 24, 2025

By Scott Simkin

More Blogs

Displaying 1—16 of

514 results

Sort By:

Interview, Must-Read Articles, Points of View, Use-Cases

How Apps and Your Phone Can Expose Your Life Without Permission

Security challenges encompass the entire ecosystem of apps, services and IoT devices that modern consumers use without understanding the data exposure...

Jul 22, 2025

By Dena De Angelo

Must-Read Articles, Product Features, Uncategorized, Use-Cases

Disrupting Legacy Vulnerability Management

Introducing the general availability of Cortex Exposure Management, a groundbreaking solution that will redefine traditional vulnerability management.

Jul 21, 2025

By Madhuresh Anur and Yvonne Le

Must-Read Articles, Product Features, Uncategorized, Use-Cases

Cortex Advanced Email Security – Built for Today’s AI Threats

Cortex Advanced Email Security uses AI to stop sophisticated phishing, BEC, and GenAI-powered attacks that bypass traditional email security solutions...

Jul 20, 2025

By Yitzy Tannenbaum

Announcement, Must-Read Articles, News and Events, Product Features, Products and Services, Reports

A Leader in the 2025 Gartner Magic Quadrant for EPP — 3 Years Running

Redefining endpoint security with Cortex XDR a Leader in the 2025 Gartner® Magic Quadrant™ for Endpoint Protection Platf...

Jul 17, 2025

By Gonen Fink

Cloud Security, Product Features, Products and Services

Why Diverse Cloud Environments Require Flexible Security

Can multicloud environments rely on one CSP to secure all their cloud environments?

Jul 03, 2025

By Elad Koren

AI Security, Must-Read Articles, News and Events, Points of View

Global Reach — The New Scale of Chinese Cyberthreats

David Moulton and Wendi Whitmore of Palo Alto Networks, put today's threat landscape in stark historical perspective as they discuss Chinese cyberthreats.

Jun 26, 2025

By Dena De Angelo

Cloud Infrastructure Entitlement Management, Cloud Workload Protection, CSO Perspective, Must-Read Articles

The Next Wave of Cybersecurity

Traditional cloud security fails against real-time attacks. Protect with a unified approach: best-in-class CDR combined with industry-leading CNAPP.

Jun 20, 2025

By Gonen Fink

AI and Cybersecurity, AI Security, Interview, Points of View

Baby Tigers Bite — The Hidden Risks of Scaling AI Too Fast

AI systems scale from prototypes to production environments, as do the risks. Is your organization planning for the AI baby tiger or full-grown AI pre...

Jun 17, 2025

By Dena De Angelo

Must-Read Articles

Modern SIEM Journeys: Notes from the Migration Trail

Energy, finance and insurance SOCs cut alert noise 75% and MTTR 98% by moving from legacy SIEM to Cortex XSIAM’s unified, AI-driven security platform.

Jun 17, 2025

By Brendan Powers

Uncategorized

Beyond the Label: How AI-Driven Explanations Supercharge Malware Detection

Go beyond 'malicious' or 'benign'. Learn how Palo Alto Networks uses AI explanations to enhance the development of our malware detection to get more accurate verdicts.

Jun 10, 2025

By Pamela Toman, Yinnon Meshi and Bob Jung

Must-Read Articles, Product Features

Inside a Modern Cloud Attack — How to Catch It with Cortex CDR

Learn how Cortex CDR detects modern cloud attacks like Scattered Spider's identity-driven campaigns across Okta, AWS & Office 365 with real-time behav...

Jun 05, 2025

By Roi Saltzman, Chen Doytshman and Artur Oleyarsh

Announcement, Partners

Cybersecurity Challenges in the Energy and Utilities Sector

IBM and Palo Alto Networks are collaborating to address five key security challenges and their solutions.

Jun 03, 2025

By Scott McKinnon

Announcement, Must-Read Articles, News and Events

Cortex XDR Named 2025 Gartner Customers’ Choice for Endpoint Security

98% of reviewers recommend Palo Alto Networks industry-leading security, Cortex XDR, as Gartner Customers' Choice for Endpoint Protection Platforms.

May 28, 2025

By Dan Flaherty

AI Security, Must-Read Articles, Product Features

Across the Logs and Into Cortex XSIAM

Learn how Cortex XSIAM streamlines SIEM migration with 1000+ connectors, 10,000+ detectors & native automation. Complete traditional SIEM upgrade in 3 months

May 22, 2025

By Brendan Powers

Announcement, News and Events, Points of View

Cortex Cloud — Unified Efficiency, Now with Dual FedRAMP Authority

Cortex Cloud achieved FedRAMP High and Moderate authorizations since its Feb 2025 launch, highlighting its secure cloud commitment.

May 21, 2025

By Eric Trexler

Must-Read Articles, News and Events, Playbook of the Week

Rapid Response to CVE-2025-31324: Mitigating SAP NetWeaver Visual Composer ...

Protect against SAP NetWeaver's critical CVE-2025-31324 vulnerability with Cortex XSIAM's automated detection and response playbook for identifying an...

May 15, 2025

By Sasha Sokolovich

Load more blogs

More Blogs

Displaying 1—16 of

501 results

Sort By:

Announcement, Application Security, Cloud Security, CNAPP, News and Events, Product Features, Products and Services

Introducing Cortex Cloud — The Future of Real-Time Cloud Security

Cortex Cloud brings the world’s leading CNAPP onto the #1 SecOps platform, delivering real-time protection — for the fir...

Feb 13, 2025

By Elad Koren

Announcement

A Leader in the 2024 Gartner Magic Quadrant for EPP

Palo Alto Networks was named a leader in endpoint protection platforms by Gartner for Cortex XDR.

Sep 25, 2024

By Gonen Fink

Announcement, News and Events, Product Features, Products and Services

Introducing XSIAM 3.0

XSIAM is expanding from reactive response to proactive defense, transforming exposure management and email security with unified data, AI and automation.

Apr 28, 2025

By Gonen Fink

Announcement, Must-Read Articles, News and Events, Product Features, Products and Services

Forrester Names Palo Alto Networks a Leader in XDR

Palo Alto Networks was named a leader in extended detection and response platforms by Forrester for Cortex XDR.

Jun 03, 2024

By Gonen Fink

Must-Read Articles, Product Features

Cortex Email Security Module: Defending Against Evolving Email Threats

Discover how Cortex Email Security Module detects sophisticated phishing attacks through AI-powered analysis, cross-domain correlation, and automated ...

Apr 28, 2025

By Yoav Zemah, Niv DavidPur, Luda Lazar and Gal Guzman

Announcement, News and Events, Products and Services, Reports

MITRE ATT&CK Evaluations — Cortex XDR Among Elite in Endpoint Security

Palo Alto Networks achieves top MITRE ATT&CK 2024 results with 100% detection rates against evolving AI-powered cyber threats.

Feb 19, 2025

By Peter Havens

Must-Read Articles, Non classifié(e), Product Features

A Deep Dive Into Malicious Direct Syscall Detection

This blog explains how attackers use direct syscalls to overcome most EDR solutions, by first discussing the conventional Windows syscall flow and how most EDR solutions monitor those calls.

Feb 13, 2024

By Or Chechik and Ofir Ozer

Playbook of the Week, Unkategorisiert

Automating Response to Suspicious Process Executions

This playbook automates the investigation and response to suspicious process executions triggered by a scheduled task.

Mar 20, 2025

By Omri Itzhak

Announcement, News and Events, Products and Services

Forrester Names Palo Alto Networks a Leader in Attack Surface Management

Palo Alto Networks was named a leader in attack surface management by Forrester for Cortex Xpanse.

Sep 24, 2024

By Greg Heon

AI and Cybersecurity, Must-Read Articles, Product Features, Use-Cases

NL2XQL: Turning Natural Language into Powerful Cybersecurity Querying

NL2XQL transforms natural language into powerful XQL queries, making cybersecurity investigations accessible to all security teams without requiring d...

Apr 23, 2025

By Gal Itzhak and Lior Perry

Playbook of the Week, Uncategorized

Automating Response to Unauthorized Scheduled Task Executions

Discover how Cortex XSIAM automates detection and response to malicious scheduled tasks that reference external HTTP/FTP sources for improved security...

Apr 03, 2025

By Omri Itzhak

Playbook of the Week, Uncategorized

Automating Response to Unauthorized Tor Logins

The A Successful Login from Tor playbook in Cortex XSIAM enhances security teams’ ability to detect and respond to unauthorized access attempts using Tor. By automating identity verification, automated remediat...

Mar 27, 2025

By Arik Day

Playbook of the Week, Product Features, Products and Services, Unit 42

Announcing Unit 42 Managed XSIAM — Redefining 24/7 Managed SecOps

Palo Alto Networks announces Unit 42 Managed XSIAM, a solution that provides 24/7 expert-led defense across every attack surface.

Mar 11, 2025

By Sharon Maydar

Must-Read Articles, Product Features, Uncategorized

Detecting Threats with Microsoft Graph Activity Logs

Discover how Microsoft Graph API is used as an attack vector by threat actors through a real-world attack scenario. Find out why monitoring Microsoft Graph activity logs is important and how Cortex delivers tai...

Feb 02, 2025

By Eden Elazar

Playbook of the Week

Creating an Automated Workflow for Account Lockout Resolution

This playbook automates and speeds up response to excessive user account lockouts, which could indicate a credential-based attack.

Apr 10, 2025

By Ido Van Dijk

Must-Read Articles, Partner Integrations, Product Features, Uncategorized

Flexible Security Data Management with Cortex XSIAM & Cribl

Cortex XSIAM now integrates with Cribl to help security teams route high-quality data, fuel AI-driven operations, and detect threats fast with full vi...

Apr 29, 2025

By John Moran

Load more blogs

Get the latest news, invites to events, and threat alerts

By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement.

Security Operations

Cortex XDR Is the Only Endpoint Security Market Leader Certified in Both AVC EDR Detection and Anti-Tampering Tests

Security Operations

More Blogs

More Blogs

Subscribe to Security Operations Blogs!

Get the latest news, invites to events, and threat alerts

Get the latest news, invites to events, and threat alerts

Products and Services

Company

Popular Links