Hot Announcements
What Changed, Why It Matters

The Embrace acquisition, announced Jul 21, closed Thursday, Aug 27, 2026 — ahead of the guided fiscal Q1 2027 window. Value undisclosed, and there is no credible press-reported figure, so do not offer one. Embrace brings high-fidelity Real User Monitoring for mobile and web built on OpenTelemetry: 100% mobile session capture, automatic instrumentation of crashes, ANRs (detection from 1 second) and network calls, session timelines, Core Web Vitals, and Network Spans Forwarding that stitches a client request to the backend trace in one click. Announced alongside it — but organic, built with the ADEM team, not part of the deal — is Synthetics, proactive validation of app availability and performance from strategic locations across Palo Alto Networks' global infrastructure. Together they extend the Observability platform into Digital Experience Monitoring. This is the second observability acquisition in eight months after Chronosphere ($3.35B, Jan 29, 2026); the Observability business passed $300M ARR in Q3 FY26.

It closes the one gap that was awkward to defend against Datadog and Dynatrace. Chronosphere is excellent from the load balancer inward, but "our app feels slow and we don't know why" was somebody else's conversation. Now the platform covers end-user experience, proactive validation, backend software and infrastructure in one place, on open standards, with Gartner's top ranking for Observability Cost Control and an average 89% data-volume optimization behind the cost argument. Lee Klarich framed the end state as linking these capabilities with Cortex AgentiX so organizations can see and automatically fix issues — that part is stated direction, not GA.

55+ innovations, headlined by three flagship capabilities: Frontier Virtual Patching (frontier AI discovers unknown vulns, protections deploy in hours), Advanced IP Defense (real-time IP-layer intelligence from 70,000+ customers, zero-trust IP enforcement, 40+ connection attributes), and six new AI agents. Also in the release: quantum-safe / Next-Generation Trust Security with cross-stack cryptographic inventory, 5th-gen ML-optimized PA-Series (400G interfaces, 300 Gbps threat inspection, active clustering to 1.4 Tbps at 5-microsecond latency), ruggedized PA-50R 5G firewalls for OT, Prisma AIRS as a cloud-native service on the CloudNGFW platform, and Prisma Browser-to-NGFW integration that removes endpoint decryption while keeping full L7 inspection.

It collapses the exposure window from the industry-average 55 days to deploy a traditional patch down to near-zero — delivered as a software upgrade with automatic content updates, so no new hardware and no manual intervention. That reframes the conversation from "how fast can you patch" to "why are you still patching reactively."

Palo Alto Networks used frontier AI models to uncover more than 14,000 previously unknown vulnerabilities in open-source software, and is now coordinating a defense program across OT, healthcare, commercial software, and open-source communities. Existing collaborators include IBM, Red Hat (Lightwell), Microsoft (MAPP), Siemens, and Idaho National Laboratory (OT Threat Research Lab). Expanding to Anthropic, OpenAI, Mitsubishi Electric, Axis Communications, the Analysis and Resilience Center for Systemic Risk, Health-ISAC, EPRI, and Akrites (Linux Foundation). Joint customers get proactive protection through Frontier Virtual Patching.

This is the strongest available "AI is now on the offense side" narrative — and it's backed by an ecosystem, not a slide. It also names the exact problem your critical-infrastructure accounts already live with: strict uptime and safety-testing requirements mean they cannot patch at AI speed, which leaves a structural exposure gap. The program shifts defense from isolated reactive software patching to collective proactive protection at the network layer.