[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:palo-alto-networks":3},{"vendor":4,"products":16,"links":135,"research":157,"news":210,"iocs":259,"iocs_total":322,"activity":323},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":14,"updated_at":15},"palo-alto-networks","Palo Alto Networks","paloaltonetworks.com","https:\u002F\u002Fwww.paloaltonetworks.com\u002F","US","Security vendor covering firewalls, SASE, endpoint, cloud and SOC platforms, and identity security from its acquisition of CyberArk, now sold as Idira. Its Unit 42 team does threat research and incident response.","\u002Fvendor-logos\u002Fpalo-alto-networks.png","#fa582d","At Palo Alto Networks, our values of disruption, execution, collaboration, integrity and inclusion guide everything we do to protect our digital way of life.","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fabout-us","2026-10-16T13:44:13.83774+00:00",[17,28,43,54,65,76,87,98,109,120],{"slug":18,"name":19,"url":20,"description":21,"pitch":22,"pitch_source_url":20,"controls":23},"next-generation-firewall","Next-Generation Firewalls","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fnetwork-security\u002Fnext-generation-firewall","Hardware, virtual and cloud firewalls running PAN-OS, with intrusion prevention.","Today’s Next-Generation Firewalls provide advanced protection for physical or virtual public and private cloud networks. Learn about our ML-Powered NGFW.",[24],{"slug":25,"name":26,"problem":27},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.",{"slug":29,"name":30,"url":31,"description":32,"pitch":33,"pitch_source_url":31,"controls":34},"prisma-access","Prisma Access","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fsase\u002Faccess","Cloud-delivered SASE: zero trust access to private apps and secure web gateway.","Prisma Access, a cloud-delivered security platform, provides secure remote access for the hybrid workforce.",[35,39],{"slug":36,"name":37,"problem":38},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.",{"slug":40,"name":41,"problem":42},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",{"slug":44,"name":45,"url":46,"description":47,"pitch":48,"pitch_source_url":46,"controls":49},"cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.","Achieve better endpoint protection, faster investigations, and the power of constant innovation with Cortex XDR, recognized as a leader by every major analyst.",[50],{"slug":51,"name":52,"problem":53},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":55,"name":56,"url":57,"description":58,"pitch":59,"pitch_source_url":57,"controls":60},"cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.","Cloud to SOC security to protect applications, data and AI models across multicloud and hybrid environments, leveraging unified data and full context for real-time",[61],{"slug":62,"name":63,"problem":64},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",{"slug":66,"name":67,"url":68,"description":69,"pitch":70,"pitch_source_url":68,"controls":71},"cortex-xpanse","Cortex Xpanse","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xpanse","External attack surface discovery and remediation.","Discover and secure digital assets with Cortex Xpanse, automating attack surface management to identify, mitigate, and prevent risks across your connected systems.",[72],{"slug":73,"name":74,"problem":75},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",{"slug":77,"name":78,"url":79,"description":80,"pitch":81,"pitch_source_url":79,"controls":82},"unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.","Secure immediate access to Unit 42's cybersecurity experts with a retainer, ensuring rapid incident response and ongoing protection on speed dial, any time.",[83],{"slug":84,"name":85,"problem":86},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",{"slug":88,"name":89,"url":90,"description":91,"pitch":92,"pitch_source_url":90,"controls":93},"prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.","Secure your entire AI ecosystem with Prisma AIRS, the comprehensive AI security platform to discover, assess, protect and govern AI apps, agents and models.",[94],{"slug":95,"name":96,"problem":97},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",{"slug":99,"name":100,"url":101,"description":102,"pitch":103,"pitch_source_url":101,"controls":104},"idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.","Secure every identity with Idira Privileged Access Management. Close the privilege gap with zero standing privileges and ephemeral, task-based access control.",[105],{"slug":106,"name":107,"problem":108},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",{"slug":110,"name":111,"url":112,"description":113,"pitch":114,"pitch_source_url":112,"controls":115},"idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.","Eliminate secrets sprawl and automate credential rotation across hybrid and multicloud environments with centralized, enterprise-grade secrets management.",[116],{"slug":117,"name":118,"problem":119},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",{"slug":121,"name":122,"url":123,"description":124,"pitch":125,"pitch_source_url":123,"controls":126},"cortex-xsiam","Cortex XSIAM","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xsiam","AI-driven security operations platform that centralises security data, detection, automation and response for the SOC.","Automate and enhance security operations with Cortex XSIAM, using AI to centralize data, improve threat detection, and accelerate incident response across your SOC.",[127,131],{"slug":128,"name":129,"problem":130},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",{"slug":132,"name":133,"problem":134},"soc-automation","SOC automation and AI analysts","Alerts arrive faster than the team can investigate them, so real attacks wait in the queue or are closed unread.",[136,140,144,148,151,154],{"kind":137,"label":138,"url":139},"advisories","Security advisories","https:\u002F\u002Fsecurity.paloaltonetworks.com\u002F",{"kind":141,"label":142,"url":143},"research","Unit 42 research","https:\u002F\u002Funit42.paloaltonetworks.com\u002F",{"kind":145,"label":146,"url":147},"review","AV-Comparatives EPR test 2026: Palo Alto Networks","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_PaloAlto_2026.pdf",{"kind":145,"label":149,"url":150},"CyberRatings 2025 Q4 Enterprise Firewall Report: Palo Alto Networks follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-palo-alto-networks-follow-on\u002F",{"kind":145,"label":152,"url":153},"Gartner Peer Insights: PA-Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fpa-series",{"kind":145,"label":155,"url":156},"PeerSpot: Palo Alto Networks NG Firewalls user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fpalo-alto-networks-ng-firewalls-reviews",{"total":158,"stories":159},118,[160,165,170,175,180,185,190,195,200,205],{"slug":161,"title":162,"published_at":163,"brief":164},"peerstitch-malware-deployed-via-fortios-flaw-bypasses-checks-on-tagged-vpn-sessi-a2dfa0","PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions","2026-10-16T04:59:36+00:00","PEERSTITCH malware exploits FortiOS flaw to bypass VPN session checks.",{"slug":166,"title":167,"published_at":168,"brief":169},"palo-alto-networks-patches-pan-os-zero-day-exploited-for-remote-code-execution-bc4412","Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution","2026-10-15T06:59:54+00:00","Palo Alto Networks patches PAN-OS zero-day exploited for remote code execution.",{"slug":171,"title":172,"published_at":173,"brief":174},"in-other-news-ai-used-in-korean-bank-breaches-poem-guided-botnet-empire-admin-ge-77e8a1","In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years","2026-10-09T12:03:50+00:00","AI malware, supply chain attacks, crypto hacks, and CISA retention pay updates.",{"slug":176,"title":177,"published_at":178,"brief":179},"russian-spies-give-matchboil-malware-a-stealthy-facelift-b7077e","Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift","2026-10-08T18:01:50+00:00","Russian spies update 'MatchBoil' malware for stealthy attacks on Ukraine.",{"slug":181,"title":182,"published_at":183,"brief":184},"malicious-linux-implants-mimic-asian-mail-security-products-13d969","Malicious Linux Implants Mimic Asian Mail Security Products","2026-10-02T13:00:00+00:00","Researchers discover three Linux backdoors masquerading as Asian mail security products.",{"slug":186,"title":187,"published_at":188,"brief":189},"citrix-patches-actively-exploited-netscaler-zero-days-after-a-weekend-of-unoffic-e5990a","Citrix patches actively exploited NetScaler zero-days after a weekend of unofficial warnings","2026-09-29T00:58:15+00:00","Citrix patches actively exploited NetScaler zero-days after unofficial warnings.",{"slug":191,"title":192,"published_at":193,"brief":194},"contagious-interview-campaign-compromises-30-000-devices-steals-10-71m-in-crypto-c533ab","Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto","2026-09-21T17:19:00+00:00","North Korean actors compromised 30,000 devices, stealing $10.71M in crypto via job scam.",{"slug":196,"title":197,"published_at":198,"brief":199},"china-linked-famoussparrow-deploys-sparrowocky-backdoor-in-latin-america-dbb59f","China-Linked FamousSparrow Deploys SparroWocky Backdoor in Latin America","2026-09-21T12:38:12+00:00","China-linked FamousSparrow targets Latin American governments with SparroWocky backdoor.",{"slug":201,"title":202,"published_at":203,"brief":204},"threatsday-self-rewriting-agents-800-flaws-patched-insider-sim-swaps-and-22-more-27eee1","ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories","2026-09-17T17:32:22+00:00","New threats include AI agent self-modification, PPI malware distribution, and LocalAI instance exploits.",{"slug":206,"title":207,"published_at":208,"brief":209},"threatsday-ceo-phishing-kits-5k-dropbox-account-hacks-oauth-traps-17-more-storie-eae086","ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories","2026-09-03T18:02:47+00:00","Threat actors exploit IT impersonation, OAuth, and phishing kits in various attacks.",{"total":211,"stories":212},49,[213,214,219,224,229,234,239,244,249,254],{"slug":166,"title":167,"published_at":168,"brief":169},{"slug":215,"title":216,"published_at":217,"brief":218},"palo-alto-networks-patches-pan-os-authenticated-rce-flaw-amid-active-exploitatio-cc144a","Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation","2026-10-15T06:17:58+00:00","Palo Alto Networks patches PAN-OS RCE flaw CVE-2026-0322 amid active exploitation.",{"slug":220,"title":221,"published_at":222,"brief":223},"cisa-adds-four-known-exploited-vulnerabilities-to-catalog-616ea1","CISA Adds Four Known Exploited Vulnerabilities to Catalog","2026-10-14T12:00:00+00:00","CISA adds four actively exploited vulnerabilities to its KEV Catalog.",{"slug":225,"title":226,"published_at":227,"brief":228},"germany-arrests-alleged-core-qilin-ransomware-member-after-extradition-80ea61","Germany arrests alleged core Qilin ransomware member after extradition","2026-10-09T15:38:56+00:00","Germany arrests alleged Qilin ransomware member extradited from Japan.",{"slug":230,"title":231,"published_at":232,"brief":233},"chinese-hackers-exploit-wordpress-zyxel-flaws-to-steal-govt-data-178864","Chinese hackers exploit WordPress, Zyxel flaws to steal govt data","2026-09-22T20:35:24+00:00","Chinese hackers exploit WordPress and Zyxel flaws to steal government data.",{"slug":235,"title":236,"published_at":237,"brief":238},"qilin-ransomware-attackers-exploit-pan-os-authentication-bypass-for-initial-acce-c18df8","Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access","2026-07-21T14:04:57+00:00","Qilin ransomware exploits PAN-OS auth bypass for initial access, evading detection.",{"slug":240,"title":241,"published_at":242,"brief":243},"siemens-ruggedcom-ape1808-with-palo-alto-networks-virtual-ngfw-04b974","Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW","2026-07-21T12:00:00+00:00","Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW affected by multiple PAN-OS vulnerabilities.",{"slug":245,"title":246,"published_at":247,"brief":248},"critical-palo-alto-vpn-bug-now-exploited-by-qilin-ransomware-gang-02a531","Critical Palo Alto VPN bug now exploited by Qilin ransomware gang","2026-07-21T10:12:24+00:00","Qilin ransomware gang exploits critical Palo Alto VPN bug for network breaches.",{"slug":250,"title":251,"published_at":252,"brief":253},"trend-micro-tanium-eset-and-tenable-patch-severe-product-vulnerabilities-345002","Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities","2026-07-16T06:08:08+00:00","Trend Micro, Tanium, ESET, and Tenable patch critical and high-severity vulnerabilities in security products.",{"slug":255,"title":256,"published_at":257,"brief":258},"gentlemen-ransomware-uses-multiple-edr-killers-to-disable-defenses-42866a","Gentlemen ransomware uses multiple EDR killers to disable defenses","2026-06-18T22:31:52+00:00","Gentlemen ransomware uses multiple EDR killers to disable defenses.",[260,263,266,267,271,273,275,277,278,280,282,284,287,289,291,293,295,297,299,301,303,305,307,309,311,313,315,317,319,321],{"type":261,"value":262,"article_slug":166,"article_title":167,"published_at":168},"cve","CVE-2026-0322",{"type":264,"value":265,"article_slug":166,"article_title":167,"published_at":168},"ip","192.168.1.1",{"type":261,"value":262,"article_slug":215,"article_title":216,"published_at":217},{"type":261,"value":262,"article_slug":268,"article_title":269,"published_at":270},"palo-alto-networks-warns-of-pan-os-rce-flaw-exploited-in-attacks-10dada","Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks","2026-10-14T22:56:47+00:00",{"type":264,"value":272,"article_slug":268,"article_title":269,"published_at":270},"149.248.47.234",{"type":264,"value":274,"article_slug":268,"article_title":269,"published_at":270},"208.83.239.114",{"type":264,"value":276,"article_slug":268,"article_title":269,"published_at":270},"66.42.72.14",{"type":261,"value":262,"article_slug":220,"article_title":221,"published_at":222},{"type":261,"value":279,"article_slug":220,"article_title":221,"published_at":222},"CVE-2026-105133",{"type":261,"value":281,"article_slug":220,"article_title":221,"published_at":222},"CVE-2026-105134",{"type":261,"value":283,"article_slug":220,"article_title":221,"published_at":222},"CVE-2026-76519",{"type":285,"value":286,"article_slug":225,"article_title":226,"published_at":227},"malware","Agenda",{"type":285,"value":288,"article_slug":225,"article_title":226,"published_at":227},"Qilin",{"type":261,"value":290,"article_slug":230,"article_title":231,"published_at":232},"CVE-2022-0847",{"type":261,"value":292,"article_slug":230,"article_title":231,"published_at":232},"CVE-2023-54391",{"type":261,"value":294,"article_slug":230,"article_title":231,"published_at":232},"CVE-2026-34908",{"type":261,"value":296,"article_slug":230,"article_title":231,"published_at":232},"CVE-2026-34909",{"type":261,"value":298,"article_slug":230,"article_title":231,"published_at":232},"CVE-2026-34910",{"type":261,"value":300,"article_slug":230,"article_title":231,"published_at":232},"CVE-2026-54569",{"type":261,"value":302,"article_slug":230,"article_title":231,"published_at":232},"CVE-2026-56271",{"type":261,"value":304,"article_slug":230,"article_title":231,"published_at":232},"CVE-2026-60004",{"type":261,"value":306,"article_slug":230,"article_title":231,"published_at":232},"CVE-2026-60137",{"type":261,"value":308,"article_slug":230,"article_title":231,"published_at":232},"CVE-2026-63030",{"type":261,"value":310,"article_slug":230,"article_title":231,"published_at":232},"CVE-2026-7273",{"type":261,"value":312,"article_slug":230,"article_title":231,"published_at":232},"CVE-2026-79756",{"type":261,"value":314,"article_slug":235,"article_title":236,"published_at":237},"CVE-2026-0257",{"type":261,"value":316,"article_slug":240,"article_title":241,"published_at":242},"CVE-2026-0266",{"type":261,"value":318,"article_slug":240,"article_title":241,"published_at":242},"CVE-2026-0272",{"type":261,"value":320,"article_slug":240,"article_title":241,"published_at":242},"CVE-2026-0273",{"type":261,"value":314,"article_slug":245,"article_title":246,"published_at":247},138,[324,328,332,336,340,343],{"month":325,"reported":326,"affected":327},"2026-05-01",23,25,{"month":329,"reported":330,"affected":331},"2026-06-01",15,11,{"month":333,"reported":334,"affected":335},"2026-07-01",9,5,{"month":337,"reported":338,"affected":339},"2026-08-01",16,0,{"month":341,"reported":335,"affected":342},"2026-09-01",1,{"month":344,"reported":345,"affected":335},"2026-10-01",6]