[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:palo-alto-networks":3},{"vendor":4,"products":16,"links":135,"research":157,"news":210,"iocs":259,"iocs_total":313,"activity":314},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":14,"updated_at":15},"palo-alto-networks","Palo Alto Networks","paloaltonetworks.com","https:\u002F\u002Fwww.paloaltonetworks.com\u002F","US","Security vendor covering firewalls, SASE, endpoint, cloud and SOC platforms, and identity security from its acquisition of CyberArk, now sold as Idira. Its Unit 42 team does threat research and incident response.","\u002Fvendor-logos\u002Fpalo-alto-networks.png","#fa582d","At Palo Alto Networks, our values of disruption, execution, collaboration, integrity and inclusion guide everything we do to protect our digital way of life.","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fabout-us","2026-10-16T13:44:13.83774+00:00",[17,28,43,54,65,76,87,98,109,120],{"slug":18,"name":19,"url":20,"description":21,"pitch":22,"pitch_source_url":20,"controls":23},"next-generation-firewall","Next-Generation Firewalls","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fnetwork-security\u002Fnext-generation-firewall","Hardware, virtual and cloud firewalls running PAN-OS, with intrusion prevention.","Today’s Next-Generation Firewalls provide advanced protection for physical or virtual public and private cloud networks. Learn about our ML-Powered NGFW.",[24],{"slug":25,"name":26,"problem":27},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.",{"slug":29,"name":30,"url":31,"description":32,"pitch":33,"pitch_source_url":31,"controls":34},"prisma-access","Prisma Access","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fsase\u002Faccess","Cloud-delivered SASE: zero trust access to private apps and secure web gateway.","Prisma Access, a cloud-delivered security platform, provides secure remote access for the hybrid workforce.",[35,39],{"slug":36,"name":37,"problem":38},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.",{"slug":40,"name":41,"problem":42},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",{"slug":44,"name":45,"url":46,"description":47,"pitch":48,"pitch_source_url":46,"controls":49},"cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.","Achieve better endpoint protection, faster investigations, and the power of constant innovation with Cortex XDR, recognized as a leader by every major analyst.",[50],{"slug":51,"name":52,"problem":53},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":55,"name":56,"url":57,"description":58,"pitch":59,"pitch_source_url":57,"controls":60},"cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.","Cloud to SOC security to protect applications, data and AI models across multicloud and hybrid environments, leveraging unified data and full context for real-time",[61],{"slug":62,"name":63,"problem":64},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",{"slug":66,"name":67,"url":68,"description":69,"pitch":70,"pitch_source_url":68,"controls":71},"cortex-xpanse","Cortex Xpanse","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xpanse","External attack surface discovery and remediation.","Discover and secure digital assets with Cortex Xpanse, automating attack surface management to identify, mitigate, and prevent risks across your connected systems.",[72],{"slug":73,"name":74,"problem":75},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",{"slug":77,"name":78,"url":79,"description":80,"pitch":81,"pitch_source_url":79,"controls":82},"unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.","Secure immediate access to Unit 42's cybersecurity experts with a retainer, ensuring rapid incident response and ongoing protection on speed dial, any time.",[83],{"slug":84,"name":85,"problem":86},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",{"slug":88,"name":89,"url":90,"description":91,"pitch":92,"pitch_source_url":90,"controls":93},"prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.","Secure your entire AI ecosystem with Prisma AIRS, the comprehensive AI security platform to discover, assess, protect and govern AI apps, agents and models.",[94],{"slug":95,"name":96,"problem":97},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",{"slug":99,"name":100,"url":101,"description":102,"pitch":103,"pitch_source_url":101,"controls":104},"idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.","Secure every identity with Idira Privileged Access Management. Close the privilege gap with zero standing privileges and ephemeral, task-based access control.",[105],{"slug":106,"name":107,"problem":108},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",{"slug":110,"name":111,"url":112,"description":113,"pitch":114,"pitch_source_url":112,"controls":115},"idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.","Eliminate secrets sprawl and automate credential rotation across hybrid and multicloud environments with centralized, enterprise-grade secrets management.",[116],{"slug":117,"name":118,"problem":119},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",{"slug":121,"name":122,"url":123,"description":124,"pitch":125,"pitch_source_url":123,"controls":126},"cortex-xsiam","Cortex XSIAM","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xsiam","AI-driven security operations platform that centralises security data, detection, automation and response for the SOC.","Automate and enhance security operations with Cortex XSIAM, using AI to centralize data, improve threat detection, and accelerate incident response across your SOC.",[127,131],{"slug":128,"name":129,"problem":130},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",{"slug":132,"name":133,"problem":134},"soc-automation","SOC automation and AI analysts","Alerts arrive faster than the team can investigate them, so real attacks wait in the queue or are closed unread.",[136,140,144,148,151,154],{"kind":137,"label":138,"url":139},"advisories","Security advisories","https:\u002F\u002Fsecurity.paloaltonetworks.com\u002F",{"kind":141,"label":142,"url":143},"research","Unit 42 research","https:\u002F\u002Funit42.paloaltonetworks.com\u002F",{"kind":145,"label":146,"url":147},"review","AV-Comparatives EPR test 2026: Palo Alto Networks","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_PaloAlto_2026.pdf",{"kind":145,"label":149,"url":150},"CyberRatings 2025 Q4 Enterprise Firewall Report: Palo Alto Networks follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-palo-alto-networks-follow-on\u002F",{"kind":145,"label":152,"url":153},"Gartner Peer Insights: PA-Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fpa-series",{"kind":145,"label":155,"url":156},"PeerSpot: Palo Alto Networks NG Firewalls user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fpalo-alto-networks-ng-firewalls-reviews",{"total":158,"stories":159},143,[160,165,170,175,180,185,190,195,200,205],{"slug":161,"title":162,"published_at":163,"brief":164},"artex-attackers-adopted-this-ai-pentesting-tool-in-three-months-leaked-secrets-a-8d732f","ARTEX: Attackers Adopted This AI Pentesting Tool in Three Months. Leaked Secrets Are Its Fastest Way In.","2026-11-13T15:22:30+00:00","Attackers are using the AI pentesting tool ARTEX, with leaked secrets providing the fastest entry.",{"slug":166,"title":167,"published_at":168,"brief":169},"hackers-use-deepseek-and-glm-ai-agents-to-breach-10-organizations-in-autonomous-1e7126","Hackers Use DeepSeek and GLM AI Agents to Breach 10 Organizations in Autonomous Cyberattacks","2026-11-13T11:56:24+00:00","Hackers used AI agents powered by DeepSeek and GLM to breach 10 organizations autonomously.",{"slug":171,"title":172,"published_at":173,"brief":174},"attackers-use-autonomous-ai-to-target-semiconductor-defense-and-civil-society-se-4f6c49","Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors","2026-11-12T15:00:31+00:00","Chinese-speaking attackers weaponized Cairn AI framework to autonomously breach semiconductor, defense, and civil",{"slug":176,"title":177,"published_at":178,"brief":179},"attackers-breached-10-organizations-with-an-open-source-ai-pentest-framework-5910ad","Attackers breached 10 organizations with an open-source AI pentest framework","2026-11-12T15:00:29+00:00","Chinese-speaking attackers used an AI pentest framework to breach 10 organizations.",{"slug":181,"title":182,"published_at":183,"brief":184},"palo-alto-pan-os-rce-flaw-allows-attackers-to-execute-arbitrary-code-with-root-p-c11f8e","Palo Alto PAN-OS RCE Flaw Allows Attackers to Execute Arbitrary Code With Root Privileges","2026-11-12T08:09:33+00:00","Palo Alto PAN-OS RCE flaw allows arbitrary code execution with root privileges.",{"slug":186,"title":187,"published_at":188,"brief":189},"artex-and-ai-powered-red-teaming-tools-what-defenders-need-to-know-b7b40a","ARTEX and AI-Powered Red Teaming Tools: What Defenders Need to Know","2026-11-11T23:00:53+00:00","Attackers are using AI-powered red teaming tools like ARTEX and CyberStrikeAI for autonomous offensive operations.",{"slug":191,"title":192,"published_at":193,"brief":194},"the-xg-files-falcon-c2-flying-under-the-browser-radar-9ad4b0","The XG Files: Falcon C2 Flying Under The (Browser) Radar","2026-11-11T15:00:23+00:00","Falcon C2 framework targets governments with malicious browser scripts and extensions.",{"slug":196,"title":197,"published_at":198,"brief":199},"citrus-ransomware-vless-for-traffic-sn00py-for-encryption-and-llms-lending-a-han-4869c9","Citrus Ransomware: VLESS for traffic, Sn00py for encryption, and LLMs lending a hand","2026-11-11T10:00:25+00:00","Citrus Ransomware uses VLESS tunnels, LLMs for commands, and Sn00py ransomware.",{"slug":201,"title":202,"published_at":203,"brief":204},"ai-company-fireworks-says-hackers-stole-data-billing-info-during-october-breache-266c19","AI company Fireworks says hackers stole data, billing info during October breaches","2026-11-10T16:08:00+00:00","AI company Fireworks reports data and billing info stolen in two October breaches.",{"slug":206,"title":207,"published_at":208,"brief":209},"fireworks-ai-gets-burned-twice-as-customer-data-exposure-widens-f3cf8b","Fireworks AI gets burned twice as customer data exposure widens","2026-11-10T15:28:00+00:00","Fireworks AI discloses wider customer data exposure including billing records and model weights after a cloud provider",{"total":211,"stories":212},65,[213,218,219,224,229,234,239,244,249,254],{"slug":214,"title":215,"published_at":216,"brief":217},"siemens-ruggedcom-ape1808-057c02","Siemens RUGGEDCOM APE1808","2026-11-12T12:00:00+00:00","Siemens RUGGEDCOM APE1808 affected by PHP2Shell vulnerabilities in PAN-OS.",{"slug":181,"title":182,"published_at":183,"brief":184},{"slug":220,"title":221,"published_at":222,"brief":223},"php2shell-attacks-root-palo-alto-firewalls-but-fail-against-wordpress-a7785c","PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress","2026-10-30T15:09:25+00:00","China-linked hackers chain PHP2Shell CVEs with Fragnesia kernel bug to root Palo Alto firewalls",{"slug":225,"title":226,"published_at":227,"brief":228},"palo-alto-confirms-active-php2shell-exploitation-targeting-exposed-pan-os-manage-471b78","Palo Alto Confirms Active PHP2Shell Exploitation Targeting Exposed PAN-OS Management Interfaces","2026-10-30T10:42:02+00:00","Palo Alto Networks confirms active exploitation of PHP2Shell flaws in PAN-OS management interfaces.",{"slug":230,"title":231,"published_at":232,"brief":233},"suspected-chinese-attackers-built-a-custom-php2shell-exploit-and-rooted-25-serve-1e6b96","Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers","2026-10-29T19:05:17+00:00","Chinese attackers exploit PHP2Shell and Linux kernel flaw to breach 25 servers, including US government-affiliated",{"slug":235,"title":236,"published_at":237,"brief":238},"threat-brief-critical-vulnerabilities-in-php-cve-2026-109618-cve-2026-109619-upd-cb1bde","Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)","2026-10-29T18:00:34+00:00","Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, known as PHP2Shell, are being actively exploited.",{"slug":240,"title":241,"published_at":242,"brief":243},"chinese-hackers-used-vmware-esx-zero-day-php2shell-and-fragnesia-chained-to-root-ff5b24","Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls","2026-10-29T16:25:10+00:00","Chinese hackers exploit VMware ESX zero-day and chain Linux kernel bugs to root servers and firewalls.",{"slug":245,"title":246,"published_at":247,"brief":248},"cisa-warns-of-node2shell-exploitation-as-honeypots-log-attack-attempts-e6d5bd","CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts","2026-10-28T08:37:24+00:00","CISA adds Node2Shell vulnerability to KEV catalog; honeypots detect exploitation attempts.",{"slug":250,"title":251,"published_at":252,"brief":253},"palo-alto-confirms-brotli-vulnerability-impact-on-pan-os-and-releases-workaround-ea04aa","Palo Alto Confirms Brotli Vulnerability Impact on PAN-OS and Releases Workarounds","2026-10-27T04:17:51+00:00","Palo Alto Networks confirms critical Brotli vulnerability affecting PAN-OS and Prisma Cloud.",{"slug":255,"title":256,"published_at":257,"brief":258},"week-in-review-php-vulnerabilities-patched-exploited-palo-alto-globalprotect-vpn-28611d","Week in review: PHP vulnerabilities patched, exploited Palo Alto GlobalProtect VPN flaw","2026-10-25T09:00:56+00:00","Critical PHP vulnerabilities patched, exploited Palo Alto GlobalProtect VPN flaw",[260,263,265,267,269,270,271,274,275,276,278,279,280,281,282,283,284,285,287,288,290,291,293,296,297,298,302,303,307,308],{"type":261,"value":262,"article_slug":214,"article_title":215,"published_at":216},"cve","CVE-2026-109618",{"type":261,"value":264,"article_slug":214,"article_title":215,"published_at":216},"CVE-2026-109619",{"type":261,"value":266,"article_slug":181,"article_title":182,"published_at":183},"CVE-2026-0322",{"type":261,"value":268,"article_slug":181,"article_title":182,"published_at":183},"CVE-2026-0330",{"type":261,"value":262,"article_slug":220,"article_title":221,"published_at":222},{"type":261,"value":264,"article_slug":220,"article_title":221,"published_at":222},{"type":272,"value":273,"article_slug":220,"article_title":221,"published_at":222},"malware","Fragnesia",{"type":261,"value":262,"article_slug":225,"article_title":226,"published_at":227},{"type":261,"value":264,"article_slug":225,"article_title":226,"published_at":227},{"type":261,"value":277,"article_slug":225,"article_title":226,"published_at":227},"CVE-2026-46300",{"type":261,"value":262,"article_slug":230,"article_title":231,"published_at":232},{"type":261,"value":264,"article_slug":230,"article_title":231,"published_at":232},{"type":261,"value":277,"article_slug":230,"article_title":231,"published_at":232},{"type":261,"value":262,"article_slug":235,"article_title":236,"published_at":237},{"type":261,"value":264,"article_slug":235,"article_title":236,"published_at":237},{"type":261,"value":262,"article_slug":240,"article_title":241,"published_at":242},{"type":261,"value":264,"article_slug":240,"article_title":241,"published_at":242},{"type":261,"value":286,"article_slug":240,"article_title":241,"published_at":242},"CVE-2026-41709",{"type":261,"value":277,"article_slug":240,"article_title":241,"published_at":242},{"type":261,"value":289,"article_slug":245,"article_title":246,"published_at":247},"CVE-2026-111497",{"type":261,"value":289,"article_slug":250,"article_title":251,"published_at":252},{"type":272,"value":292,"article_slug":250,"article_title":251,"published_at":252},"HTTP2Shell",{"type":294,"value":295,"article_slug":250,"article_title":251,"published_at":252},"mitre_attack","T1071.001",{"type":261,"value":262,"article_slug":255,"article_title":256,"published_at":257},{"type":261,"value":264,"article_slug":255,"article_title":256,"published_at":257},{"type":261,"value":262,"article_slug":299,"article_title":300,"published_at":301},"palo-alto-confirms-php-rce-vulnerabilities-impact-pan-os-and-multiple-network-pr-22d0b9","Palo Alto Confirms PHP RCE Vulnerabilities Impact PAN-OS and Multiple Network Products","2026-10-24T06:41:29+00:00",{"type":261,"value":264,"article_slug":299,"article_title":300,"published_at":301},{"type":261,"value":262,"article_slug":304,"article_title":305,"published_at":306},"cve-2026-109618-php2shell-hits-all-pan-os-versions-aca0e8","CVE-2026-109618: PHP2Shell Hits All PAN-OS Versions","2026-10-23T01:47:17+00:00",{"type":261,"value":264,"article_slug":304,"article_title":305,"published_at":306},{"type":261,"value":309,"article_slug":310,"article_title":311,"published_at":312},"CVE-2023-27532","qilin-and-inc-exploit-palo-alto-vpn-flaw-in-ransomware-attacks-b31ace","Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks","2026-10-22T10:15:31+00:00",174,[315,319,323,327,330,333],{"month":316,"reported":317,"affected":318},"2026-06-01",15,11,{"month":320,"reported":321,"affected":322},"2026-07-01",9,5,{"month":324,"reported":325,"affected":326},"2026-08-01",16,0,{"month":328,"reported":322,"affected":329},"2026-09-01",1,{"month":331,"reported":325,"affected":332},"2026-10-01",19,{"month":334,"reported":317,"affected":335},"2026-11-01",2]