Palo Alto Networks

United States10 products listed
At Palo Alto Networks, our values of disruption, execution, collaboration, integrity and inclusion guide everything we do to protect our digital way of life.
In their own words paloaltonetworks.com

Our summarySecurity vendor covering firewalls, SASE, endpoint, cloud and SOC platforms, and identity security from its acquisition of CyberArk, now sold as Idira. Its Unit 42 team does threat research and incident response.

Products listed
10
Research stories
143
Incidents and advisories
65
Indicators
174

Palo Alto Networks in our news, month by month

ResearchIncidents and advisories

Products and the controls they provide

Next-Generation Firewalls

“Today’s Next-Generation Firewalls provide advanced protection for physical or virtual public and private cloud networks. Learn about our ML-Powered NGFW.”

Hardware, virtual and cloud firewalls running PAN-OS, with intrusion prevention.

Product page

Cortex XDR

“Achieve better endpoint protection, faster investigations, and the power of constant innovation with Cortex XDR, recognized as a leader by every major analyst.”

Endpoint detection and response with extended detection across network, cloud and identity.

Product page

Cortex Cloud

“Cloud to SOC security to protect applications, data and AI models across multicloud and hybrid environments, leveraging unified data and full context for real-time”

Cloud security platform covering posture management and runtime protection.

Product page

Cortex Xpanse

“Discover and secure digital assets with Cortex Xpanse, automating attack surface management to identify, mitigate, and prevent risks across your connected systems.”

External attack surface discovery and remediation.

Product page

Unit 42 Retainer

“Secure immediate access to Unit 42's cybersecurity experts with a retainer, ensuring rapid incident response and ongoing protection on speed dial, any time.”

Incident response retainer with Unit 42, including preparation services.

Product page

Prisma AIRS

“Secure your entire AI ecosystem with Prisma AIRS, the comprehensive AI security platform to discover, assess, protect and govern AI apps, agents and models.”

Security for AI applications, models and agents, including runtime protection against prompt injection.

Product page

Idira Privileged Access Management

“Secure every identity with Idira Privileged Access Management. Close the privilege gap with zero standing privileges and ephemeral, task-based access control.”

Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.

Product page

Idira Secrets Management

“Eliminate secrets sprawl and automate credential rotation across hybrid and multicloud environments with centralized, enterprise-grade secrets management.”

Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.

Product page

Cortex XSIAM

“Automate and enhance security operations with Cortex XSIAM, using AI to centralize data, improve threat detection, and accelerate incident response across your SOC.”

AI-driven security operations platform that centralises security data, detection, automation and response for the SOC.

Product page

External reviews

Independent tests, peer reviews and articles about Palo Alto Networks. We link to them; we did not write or commission them, and nobody pays to appear here.

Research by Palo Alto Networks

Stories in our coverage based on what researchers at Palo Alto Networks found or reported: 143 in total.

Incidents and advisories

Stories where a Palo Alto Networks product had a vulnerability or was attacked, or Palo Alto Networks itself was: 65 in total. Useful if you run its products.

Indicators from these storieslatest 30 of 174 · show
TypeIndicatorStory
cveCVE-2026-109618Siemens RUGGEDCOM APE1808
cveCVE-2026-109619Siemens RUGGEDCOM APE1808
cveCVE-2026-0322Palo Alto PAN-OS RCE Flaw Allows Attackers to Execute Arbitrary Code With Root Privileges
cveCVE-2026-0330Palo Alto PAN-OS RCE Flaw Allows Attackers to Execute Arbitrary Code With Root Privileges
cveCVE-2026-109618PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
cveCVE-2026-109619PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
malwareFragnesiaPHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
cveCVE-2026-109618Palo Alto Confirms Active PHP2Shell Exploitation Targeting Exposed PAN-OS Management Interfaces
cveCVE-2026-109619Palo Alto Confirms Active PHP2Shell Exploitation Targeting Exposed PAN-OS Management Interfaces
cveCVE-2026-46300Palo Alto Confirms Active PHP2Shell Exploitation Targeting Exposed PAN-OS Management Interfaces
cveCVE-2026-109618Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
cveCVE-2026-109619Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
cveCVE-2026-46300Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
cveCVE-2026-109618Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)
cveCVE-2026-109619Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)
cveCVE-2026-109618Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls
cveCVE-2026-109619Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls
cveCVE-2026-41709Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls
cveCVE-2026-46300Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls
cveCVE-2026-111497CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
cveCVE-2026-111497Palo Alto Confirms Brotli Vulnerability Impact on PAN-OS and Releases Workarounds
malwareHTTP2ShellPalo Alto Confirms Brotli Vulnerability Impact on PAN-OS and Releases Workarounds
mitre_attackT1071.001Palo Alto Confirms Brotli Vulnerability Impact on PAN-OS and Releases Workarounds
cveCVE-2026-109618Week in review: PHP vulnerabilities patched, exploited Palo Alto GlobalProtect VPN flaw
cveCVE-2026-109619Week in review: PHP vulnerabilities patched, exploited Palo Alto GlobalProtect VPN flaw
cveCVE-2026-109618Palo Alto Confirms PHP RCE Vulnerabilities Impact PAN-OS and Multiple Network Products
cveCVE-2026-109619Palo Alto Confirms PHP RCE Vulnerabilities Impact PAN-OS and Multiple Network Products
cveCVE-2026-109618CVE-2026-109618: PHP2Shell Hits All PAN-OS Versions
cveCVE-2026-109619CVE-2026-109618: PHP2Shell Hits All PAN-OS Versions
cveCVE-2023-27532Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks
Vendor Watch

Run Palo Alto Networks?

Get an email when a new story names Palo Alto Networks, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

From Palo Alto Networks

Is this your company, or did we get something wrong?

Tell us what to fix on this page: a product, a description, a link or a review. We check every suggestion before changing anything, and listing stays free and editorial.

How we list vendors

  • A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
  • Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
  • Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
  • Logos, product names and quoted text belong to the vendors and are shown to identify them.
  • Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.