Blog
Security Operations

Security Operations

Cortex XDR is the Only Endpoint Security Market Leader to Achieve 99% in Both Threat Prevention and Response in AVC EPR

Palo Alto Networks Cortex XDR achieves 99% in both threat prevention & response in AV-Comparatives 2025 EPR test - the only endpoint security market leader to hit that benchmark.

AI and Cybersecurity

Must-Read Articles

News and Events

Sep 23, 2025

By Emran Mazumder

Security Operations

AI and Cybersecurity, AI Security, Must-Read Articles

The Ransomware Speed Crisis

There is a ransomware speed crisis. Attacks have accelerated 100x faster since 2021. Discover why traditional security fails and build AI-powered defenses.

Sep 24, 2025

By Dena De Angelo

Must-Read Articles

Defending against Phantom Taurus with Cortex

New APT threat actor, Phantom Taurus, is targeting global organizations. Learn more about how Cortex defends, prevents and responds to malware suite, NET-STAR.

Sep 30, 2025

By Yvonne Le

Must-Read Articles, Product Features, Uncategorized, Use-Cases

SCCM: Enterprise Backbone or Attack Vector? Part 2

Learn how attackers exploit Microsoft SCCM infrastructure through LDAP, WMI enumeration & detection strategies to secure enterprise environments.

Sep 17, 2025

By Lee Azrati Edri and Shachar Roitman

Must-Read Articles, Product Features, Uncategorized, Use-Cases

SCCM: Enterprise Backbone or Attack Vector?

Learn how attackers exploit Microsoft SCCM infrastructure through LDAP, WMI enumeration & detection strategies to secure enterprise environments.

Sep 16, 2025

By Lee Azrati Edri and Shachar Roitman

More Blogs

Displaying 1—16 of

523 results

Sort By:

Announcement, Unit 42

Raising the Bar for Incident Response

Unit 42 is now NCSC Enhanced Level CIR assured, proving our commitment to exceed the highest global standards for incident response and trust.

Sep 18, 2025

By Jack Hughes

News and Events, Uncategorized

Palo Alto Networks and MITRE ATT&CK® Evaluations: Enterprise 2025

To further accelerate innovation for our customers, Palo Alto Networks will not participate in the 2025 MITRE ATT&CK® Evaluations after two years of leading results.

Sep 12, 2025

By Palo Alto Networks

Events, Security Platform

Security Operations Under Fire Inside Black Hat's NOC

Palo Alto Networks secures Black Hat's NOC, managing billions of threat events with AI-driven automation, multivendor integration and rapid crisis response.

Sep 09, 2025

By Dena De Angelo

Points of View, Predictions

The Challenge of Cybersecurity Frenemies and Collaboration

Michael Sikorski discusses how cybersecurity relies on "frenemies" building cultural bridges to collaborate against shared threats, as attackers already do.

Aug 20, 2025

By Dena De Angelo

Must-Read Articles, Product Features

Why Integrated File Integrity Monitoring Matters for Elevating Your Securit...

Strengthen security & compliance with integrated File Integrity Monitoring (FIM). Learn how Cortex FIM provides real-time detection of unauthorized ch...

Aug 12, 2025

By Yitzy Tannenbaum and Aviel Tzarfaty

News and Events

Cortex XDR Is the Only Endpoint Security Market Leader Certified in Both AV...

Cortex XDR is the only endpoint security market leader certified in both AV-Comparative EDR Detection and Anti-Tampering tests, proving superior threat detection.

Aug 06, 2025

By Emran Mazumder

AI and Cybersecurity, Must-Read Articles, News and Events, Product Features, Use-Cases

SE Labs Awards Palo Alto Networks AAA Rating and 100% Prevention Against Ra...

SE Labs awards Palo Alto Networks Cortex XDR a perfect 100% accuracy rating and AAA grade for ransomware protection with zero false positives.

Aug 05, 2025

By Emran Mazumder

Must-Read Articles, Product Features

Think You Have Visibility? Think Again.

Discover how Cortex XDR & XSIAM's Data Stitching and Smart Grouping unify security data, streamline SecOps, and accelerate threat investigations.

Jul 29, 2025

By Greg Smith

AI Security, Interview

Security by Design — UX and AI in Modern Cybersecurity

Nelson Lee reveals how thoughtful design and emerging AI technologies are reshaping cybersecurity operations from the ground up.

Jul 24, 2025

By Dena De Angelo

AI and Cybersecurity, Announcement, Product Features

What’s New for Cortex (July ‘25)

The latest release of Cortex harnesses AI to deliver more proactive security, expand visibility, and streamline workflows.

Jul 24, 2025

By Scott Simkin

Interview, Must-Read Articles, Points of View, Use-Cases

How Apps and Your Phone Can Expose Your Life Without Permission

Security challenges encompass the entire ecosystem of apps, services and IoT devices that modern consumers use without understanding the data exposure...

Jul 22, 2025

By Dena De Angelo

Must-Read Articles, Product Features, Uncategorized, Use-Cases

Disrupting Legacy Vulnerability Management

Introducing the general availability of Cortex Exposure Management, a groundbreaking solution that will redefine traditional vulnerability management.

Jul 21, 2025

By Madhuresh Anur and Yvonne Le

Must-Read Articles, Product Features, Uncategorized, Use-Cases

Cortex Advanced Email Security – Built for Today’s AI Threats

Cortex Advanced Email Security uses AI to stop sophisticated phishing, BEC, and GenAI-powered attacks that bypass traditional email security solutions...

Jul 20, 2025

By Yitzy Tannenbaum

Announcement, Must-Read Articles, News and Events, Product Features, Products and Services, Reports

A Leader in the 2025 Gartner Magic Quadrant for EPP — 3 Years Running

Redefining endpoint security with Cortex XDR a Leader in the 2025 Gartner® Magic Quadrant™ for Endpoint Protection Platf...

Jul 17, 2025

By Gonen Fink

Cloud Security, Product Features, Products and Services

Why Diverse Cloud Environments Require Flexible Security

Can multicloud environments rely on one CSP to secure all their cloud environments?

Jul 03, 2025

By Elad Koren

AI Security, Must-Read Articles, News and Events, Points of View

Global Reach — The New Scale of Chinese Cyberthreats

David Moulton and Wendi Whitmore of Palo Alto Networks, put today's threat landscape in stark historical perspective as they discuss Chinese cyberthreats.

Jun 26, 2025

By Dena De Angelo

Load more blogs

More Blogs

Displaying 1—16 of

500 results

Sort By:

Announcement, Application Security, Cloud Security, CNAPP, News and Events, Product Features, Products and Services

Introducing Cortex Cloud — The Future of Real-Time Cloud Security

Cortex Cloud brings the world’s leading CNAPP onto the #1 SecOps platform, delivering real-time protection — for the fir...

Feb 13, 2025

By Elad Koren

Announcement

A Leader in the 2024 Gartner Magic Quadrant for EPP

Palo Alto Networks was named a leader in endpoint protection platforms by Gartner for Cortex XDR.

Sep 25, 2024

By Gonen Fink

Announcement, News and Events, Product Features, Products and Services

Introducing XSIAM 3.0

XSIAM is expanding from reactive response to proactive defense, transforming exposure management and email security with unified data, AI and automation.

Apr 28, 2025

By Gonen Fink

Announcement, Must-Read Articles, News and Events, Product Features, Products and Services

Forrester Names Palo Alto Networks a Leader in XDR

Palo Alto Networks was named a leader in extended detection and response platforms by Forrester for Cortex XDR.

Jun 03, 2024

By Gonen Fink

Must-Read Articles, Product Features

Cortex Email Security Module: Defending Against Evolving Email Threats

Discover how Cortex Email Security Module detects sophisticated phishing attacks through AI-powered analysis, cross-domain correlation, and automated ...

Apr 28, 2025

By Yoav Zemah, Niv DavidPur, Luda Lazar and Gal Guzman

Announcement, News and Events, Products and Services, Reports

MITRE ATT&CK Evaluations — Cortex XDR Among Elite in Endpoint Security

Palo Alto Networks achieves top MITRE ATT&CK 2024 results with 100% detection rates against evolving AI-powered cyber threats.

Feb 19, 2025

By Peter Havens

Must-Read Articles, Non classifié(e), Product Features

A Deep Dive Into Malicious Direct Syscall Detection

This blog explains how attackers use direct syscalls to overcome most EDR solutions, by first discussing the conventional Windows syscall flow and how most EDR solutions monitor those calls.

Feb 13, 2024

By Or Chechik and Ofir Ozer

Playbook of the Week, Unkategorisiert

Automating Response to Suspicious Process Executions

This playbook automates the investigation and response to suspicious process executions triggered by a scheduled task.

Mar 20, 2025

By Omri Itzhak

Announcement, News and Events, Products and Services

Forrester Names Palo Alto Networks a Leader in Attack Surface Management

Palo Alto Networks was named a leader in attack surface management by Forrester for Cortex Xpanse.

Sep 24, 2024

By Greg Heon

AI and Cybersecurity, Must-Read Articles, Product Features, Use-Cases

NL2XQL: Turning Natural Language into Powerful Cybersecurity Querying

NL2XQL transforms natural language into powerful XQL queries, making cybersecurity investigations accessible to all security teams without requiring d...

Apr 23, 2025

By Gal Itzhak and Lior Perry

Playbook of the Week, Uncategorized

Automating Response to Unauthorized Scheduled Task Executions

Discover how Cortex XSIAM automates detection and response to malicious scheduled tasks that reference external HTTP/FTP sources for improved security...

Apr 03, 2025

By Omri Itzhak

Playbook of the Week, Uncategorized

Automating Response to Unauthorized Tor Logins

The A Successful Login from Tor playbook in Cortex XSIAM enhances security teams’ ability to detect and respond to unauthorized access attempts using Tor. By automating identity verification, automated remediat...

Mar 27, 2025

By Arik Day

Playbook of the Week, Product Features, Products and Services, Unit 42

Announcing Unit 42 Managed XSIAM — Redefining 24/7 Managed SecOps

Palo Alto Networks announces Unit 42 Managed XSIAM, a solution that provides 24/7 expert-led defense across every attack surface.

Mar 11, 2025

By Sharon Maydar

Must-Read Articles, Product Features, Uncategorized

Detecting Threats with Microsoft Graph Activity Logs

Discover how Microsoft Graph API is used as an attack vector by threat actors through a real-world attack scenario. Find out why monitoring Microsoft Graph activity logs is important and how Cortex delivers tai...

Feb 02, 2025

By Eden Elazar

Playbook of the Week

Creating an Automated Workflow for Account Lockout Resolution

This playbook automates and speeds up response to excessive user account lockouts, which could indicate a credential-based attack.

Apr 10, 2025

By Ido Van Dijk

Must-Read Articles, Partner Integrations, Product Features, Uncategorized

Flexible Security Data Management with Cortex XSIAM & Cribl

Cortex XSIAM now integrates with Cribl to help security teams route high-quality data, fuel AI-driven operations, and detect threats fast with full vi...

Apr 29, 2025

By John Moran

Load more blogs

Get the latest news, invites to events, and threat alerts

By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement.

Security Operations

Cortex XDR is the Only Endpoint Security Market Leader to Achieve 99% in Both Threat Prevention and Response in AVC EPR

Security Operations

More Blogs

More Blogs

Subscribe to Security Operations Blogs!

Get the latest news, invites to events, and threat alerts

Get the latest news, invites to events, and threat alerts

Products and Services

Company

Popular Links