PANW News
20 stories with this tag. A card opens the full write-up. Search covers every tag.
Palo Alto launched Prisma Browser for Intune, built for Microsoft Intune-managed mobile devices. It closes the mobile-browser gap Intune leaves: weak security, weak DLP, and no private app access. It's deployed and managed through Intune.
Source · paloaltonetworks.comPalo Alto Networks (Idira) is a Leader in the 2026 Gartner Magic Quadrant for Privileged Access Management for the eighth consecutive time, and it's again positioned furthest in Completeness of Vision. The blog frames PAM for the AI era: attackers log in rather than break in, machine identities outnumber humans 109 to 1, and AI agents need governed access.
Source · paloaltonetworks.comJaimin Patel's Oct 27 post maps Palo Alto controls to how companies roll out Anthropic Claude. Cortex Agentic Endpoint Security discovers coding agents and MCP servers. Prisma AIRS inspects Claude Enterprise prompts through Anthropic's native inference hooks. AIRS and Agentic Endpoint Security together cover Claude Code. AI Gateway governs LLM, MCP, and A2A traffic, including quotas. The post also covers Agent Identity Security, AI Supply Chain Security, and AI Red Teaming.
Source · paloaltonetworks.comOn "Patient Zero" (first-seen) web threats, Palo Alto scored 82.7% for NGFW (VM-Series) and 83.2% for SSE (Prisma Access). Palo Alto says no competitor topped 58%. The post credits Advanced URL Filtering with Precision AI.
Source · paloaltonetworks.comDQChannels (Oct 19) covers the APAC results of Palo Alto Networks' 2026 State of Critical Infrastructure Cybersecurity Report. Globally, 1,600+ leaders in 11 countries: 95% concerned about frontier-AI-powered attacks, 68% lack complete real-time OT visibility, 42% name legacy unpatchable OT as their biggest risk, 74% have not fully integrated IT and OT security. APAC (620 respondents): 58% had an operations-affecting incident, 74% lack full OT visibility, 64% use six or more tools, 80% lack full IT/OT integration, 90% expect AI security to help. Palo Alto cites PAN-OS 12.2 Ceres Frontier Virtual Patching, ruggedized NGFWs, and its Frontier AI Critical Defense Program.
Source · dqchannels.comAt GTC Berlin on Oct 21, NVIDIA launched the OpenShell Reference Architecture for building, containing, observing, and enforcing safe AI agents. It combines Vera Rubin inference infrastructure, Vera CPUs for agent harnesses, the open-source OpenShell runtime, and BlueField-4 DPUs running NVIDIA Sentry for in-silicon enforcement. NVIDIA lists Palo Alto Networks among the cybersecurity leaders integrating support, alongside 1Password, Check Point, CrowdStrike, Cisco, F5, Fortinet, Microsoft, Okta, TrendAI, and Zscaler. Palo Alto's Sept 28 NVIDIA blog describes its pieces: Prisma AIRS AI Gateway on Vera CPUs, Prisma AIRS AI Runtime Security on BlueField DPUs, and planned Idira agent identity integration with OpenShell.
Source · nvidianews.nvidia.comAnand Oswal's Oct 21 blog says customers with Advanced Threat Prevention Plus and Frontier Virtual Patching were protected against CVE-2026-109618 and CVE-2026-109619 since Oct 20 by signature 543004, before details were public. Standard ATP coverage (543004 and 97622 to 97625) followed Oct 21. Coverage runs on PA-Series and VM-Series, with Prisma Access coming soon. The blog says the NOVA frontier-AI vulnerability analyzer has scanned 6,000+ open-source repos in three months and found 17,000+ vulnerabilities. Fixed PHP versions are 8.5.12, 8.4.27, 8.3.36, and 8.2.35. PHP 8.1 and older get no fix.
Source · paloaltonetworks.comPrisma Browser now sends all DNS through an encrypted DNS-over-HTTPS channel to Palo Alto's Advanced DNS Resolver, with Precision AI threat blocking and hosts-file tamper protection. It needs no VPN, no endpoint agent, and no manual configuration. It's included with Prisma Browser Pro and higher, and you manage it in Strata Cloud Manager.
Source · live.paloaltonetworks.comUnit 42 describes an actor, BUGSTER, who used the Hermes Agent framework with DeepSeek V4 and a Cursor IDE with its permission checks bypassed. The actor brute-forced an Indian university's WordPress site, stole a database of 5,200+ student records from a second university, planned VoIP fraud, cracked Wi-Fi passwords, and profiled crypto whales. Unit 42 sees multiple unrelated actors adopting the Hermes and DeepSeek combination.
Source · unit42.paloaltonetworks.comPalo Alto announced on Oct 22 that Idira can act as the agentic identity provider for the Prisma AIRS AI Agent Gateway. Each agent gets its own OAuth 2.1 client credentials and short-lived tokens, the gateway enforces fine-grained policy at runtime, and logs record both the agent and the human it acts for. Available now: SPIFFE/SVID workload identity, tool-level MCP policies, zero standing privileges for databases via the Secure Infrastructure Access MCP, on-behalf-of audit, shadow-agent onboarding, and automatic OAuth registration (DCR). Coming soon: an activity map (early access), credential protection for developers using Cursor and Claude Code, ZSP for cloud, and AWS SPIFFE. A secrets manager can now be bundled into the license.
Source · paloaltonetworks.comUnit 42 reported on Oct 22 that eight eMudhra intermediate CA keys were generated with too little randomness, so their private keys can be derived from public certificates, enabling forged trusted TLS certificates for man-in-the-middle attacks. eMudhra has revoked the intermediates. Red Hat (RHSB-2026-012) tracks related CVEs (CVE-2026-111943, CVE-2026-114406, CVE-2026-91403, CVE-2026-113812) and suggests checking the ca-certificates package. Unit 42 recommends auditing PKI assets and bundled trust anchors, reissuing affected certificates from another CA, pushing trust-store updates, enforcing CRL/OCSP checks, and hunting for TLS validation-error spikes.
Source · unit42.paloaltonetworks.comPalo Alto said on Oct 23 that OpenAI enterprise customers can buy Unit 42 Continuous Frontier AI Defense and Prisma AIRS on the new OpenAI Marketplace and retire pre-committed OpenAI spend. Continuous Frontier AI Defense is an always-on, expert-led agentic offensive security service whose multi-model harness includes GPT-5.6-Cyber; Palo Alto cites 75+ customer engagements, exposures in 100% of assessed organizations (37% high or critical), and over two-thirds of third-party exposures with no known CVE. It's available worldwide on an annual subscription. Prisma AIRS covers AI discovery, posture, red teaming, runtime protection, agent identity, and the AI Gateway.
Source · paloaltonetworks.comNHS England picks Palo Alto Networks, with IBM, for its Secure Boundary programme.
Source · paloaltonetworks.comAdvanced DNS Security is GA in Amazon Route 53 Resolver DNS Firewall.
Source · paloaltonetworks.comPrisma AIRS red teaming adds multi-turn attacks, including Crescendo and GOAT.
Source · docs.paloaltonetworks.comPrisma Browser sends DNS to Advanced DNS Security over DoH.
Source · docs.paloaltonetworks.comPalo Alto was named a Leader in the 2026 IDC MarketScape for Worldwide SASE (Oct 14) and in the Forrester Wave for OT Security, Q3 2026. Gartner called it the "Company to Beat" in AI Security Platforms for the second year running.
Source · paloaltonetworks.comOct 15 release adds runtime protection in Claude Enterprise via inference hooks, AI Supply Chain Security across models/skills/MCP servers (3M+ artifacts pre-scanned), MCP Guardrails for bidirectional tool traffic, and Signals & Smart Routing to control AI spend.
Source · paloaltonetworks.comPalo Alto added PA-5510/5520/5530 (100G), the PA-3500 campus series with custom ASICs, PA-1500 series with integrated switching and PoE (9 to 27 Gbps threat prevention, up to 724W PoE), PA-520-5G, and ruggedized PA-50R models; PA-7500 reaches up to 1.5 Tbps App-ID throughput. Quantum-resistant IPsec VPNs and zero-touch provisioning via Strata Cloud Manager. Available now.
Source · paloaltonetworks.comPalo Alto published a fillable PQC Migration Plan template covering all nine required elements of OMB M-26-15; federal civilian agencies must submit plans by October 22, 2026. Milestones include TLS 1.3 by Jan 2, 2030, ML-KEM for high-value assets by Dec 31, 2030, and ML-DSA/SLH-DSA signatures by Dec 31, 2031. Quantum-Safe Security (FedRAMP Moderate) supports discovery and CBOM generation.
Source · paloaltonetworks.com