What's Hot
This Week

Cortex · Oct 23, 2026Added Oct 26

Cortex blog: mitigating PHP2Shell (CVE-2026-109618, CVE-2026-109619) with the Cortex platform

Greg Smith's Oct 23 Cortex blog walks the full XSIAM workflow: find every PHP asset from code through infrastructure; rank exposure with XSIAM Exposure Management across five factors (network exposure, security controls, vulnerability, active threats, business criticality); confirm with Cortex XDR and the Cortex Network Scanner (credentialed scans, Focused Vulnerability Scan); fix with AgentiX automated remediation and virtual patching; and hunt for PHP spawning shells, unexpected downloads, new PHP files, and worker crashes.

Why it matters. It's a vendor-written storyline for running exposure management inside the SOC platform, landing the same week exploitation was confirmed.

Seller use. Walk customers through the five-factor ranking: XSIAM finds, prioritizes, verifies, and fixes in one console, versus separate scanner, SIEM, and SOAR tools.

Unit 42 · Oct 26, 2026Added Oct 26

Correction: Unit 42 retracts European government PHP2Shell (CVE-2026-109618, CVE-2026-109619) case

On Oct 25 Unit 42 withdrew its Oct 23 update linking the compromise of a European government agency to PHP2Shell: 'We are unable to confirm that initial access is associated with the specific PHP2Shell CVEs. We have retracted our previous update from October 23.' The intrusion and the agentic-AI post-exploitation behavior were real; only the CVE link was retracted. Press, including machine.news and The Hacker News, has covered the retraction.

Why it matters. Earlier talk tracks (Oct 24 and 25) used this case, and competitors and press are already covering the retraction.

Seller use. Stop citing 'PHP2Shell hit a European government.' If asked, say Unit 42 corrected itself, and point to the independently confirmed exploitation instead.

Cortex · Oct 27, 2026Added Oct 27

Nikesh Arora calls for "hybrid patching" and a SOC rebuilt around SOAR, then agents

DigitalToday summarizes a recent X post by CEO Nikesh Arora. AI models will keep surfacing vulnerabilities too fast to fix them all at once, so he proposes pairing software patches with network-layer virtual patches from "modern frontier defenders" across network traffic, cloud-app traffic, WAF, and endpoint. He warns that a defensive swarm of AI agents can't stop agent-led attacks: "This is not a volume fight, but a speed fight." His fix starts with SOC structure: tie logs, threat intelligence, and products together under a modern SOAR, then deploy agents for detection and recovery, and consolidate perimeter security on one platform. He also urges checking the security of AI coding harnesses.

Why it matters. It's the CEO's framing for the PHP2Shell and Brotli cycle, and it maps directly to XSIAM, AgentiX, and NGFW virtual patching.

Seller use. Use the line "a speed fight, not a volume fight." Position XSIAM as the place that unifies data first, then adds agents, in contrast to competitors who lead with an agent swarm.

Prisma · Oct 26, 2026Added Oct 27

Prisma Browser for Microsoft Intune is available on the Apple App Store and Google Play

Palo Alto launched Prisma Browser for Intune, built for Microsoft Intune-managed mobile devices. It closes the mobile-browser gap Intune leaves: weak security, weak DLP, and no private app access. It's deployed and managed through Intune.

Why it matters. It's a Prisma SASE land-and-expand motion inside Microsoft-standardized accounts, given Intune's more than 60% share of unified endpoint management.

Seller use. Ask Intune shops how they secure SaaS and internal-app access from phones, and offer Prisma Browser for Intune as a drop-in that needs no new device management.

Prisma · Oct 26, 2026Added Oct 27

Palo Alto (Idira) named a Leader in the 2026 Gartner Magic Quadrant for Privileged Access Management, for the eighth time

Palo Alto Networks (Idira) is a Leader in the 2026 Gartner Magic Quadrant for Privileged Access Management for the eighth consecutive time, and it's again positioned furthest in Completeness of Vision. The blog frames PAM for the AI era: attackers log in rather than break in, machine identities outnumber humans 109 to 1, and AI agents need governed access.

Why it matters. It's third-party validation for the Idira acquisition and for the identity part of the platform story.

Seller use. Bring up the MQ in identity and PAM conversations, and connect it to Idira agent identity security for Prisma AIRS.

Cortex · Oct 26, 2026Added Oct 26

Cortex XDR One launches in India

Palo Alto held a regional launch in Mumbai on Oct 26 for Cortex XDR One: AI inventory and shadow-AI discovery, two layers of enforcement with small language models on the sensor, up to 95% fewer false positives, a standalone Targeted Sensor option, Unit 42 MDR with Managed Agentic Endpoint Security, built on technology from the Koi acquisition. It's a regional follow-on to the Oct 19 global launch, not a new product.

Why it matters. Palo Alto is pushing XDR One into APJ markets quickly.

Seller use. With APJ or global accounts, use the India launch as proof that XDR One is available and supported in-region.

Strata · Oct 26, 2026Added Oct 27

CVE-2026-111497 (Brotli out-of-bounds write) affects PAN-OS 11.2 and 12.x with Brotli inspection and decryption on (9.2 CRITICAL)

UPDATE (Oct 28): Palo Alto released 11.2.7-h23, 11.2.13-h4, and 11.2.16-h1 and removed the Threat ID from the workarounds. Palo Alto still isn't aware of any exploitation. Palo Alto published this advisory Oct 26 and updated it Oct 27. It rates the bug 9.2 CRITICAL with MODERATE urgency, and Palo Alto is not aware of malicious exploitation. It affects PA-Series and VM-Series only when Brotli inspection and TLS/SSL decryption on the dataplane are both on. The management web UI and API are not affected, and Brotli is off by default. Affected versions: 12.2 below 12.2.4-h1; 12.1 below 12.1.4-h13, 12.1.7-h11, or 12.1.10-h3; and 11.2 below 11.2.4-h23, 11.2.7-h23, 11.2.10-h17, 11.2.13-h4, or 11.2.16-h1. The Prisma Cloud Application Security Transporter Client below 0.2.9 is also affected. Not affected: PAN-OS 11.1 and 10.2, Panorama, and Idira self-hosted. Released fixes: 12.2.4-h1, 12.1.7-h11, 11.2.7-h23, 11.2.10-h17, 11.2.13-h4, and 11.2.16-h1. Still due: 12.1.4-h13 (Oct 29), and 12.1.10-h3 and 11.2.4-h23 (Oct 30). Check with `show system setting brotli`. Mitigate with `set system setting brotli-encoding disable` (or uncheck Device > Setup > Content-ID > Allow Brotli Encoding on 12.1.2 or later). The same hotfix fixes PHP2Shell, except 11.2.10-h16, which fixes PHP2Shell only. Palo Alto has already remediated its affected SaaS services, and those customers don't need to act.

Why it matters. It's a critical score on the firewall itself, but exposure depends on configuration and the mitigation is one command, so customers will call in about it.

Seller use. Have each customer run `show system setting brotli`. If it shows "Enabled: yes" and they decrypt traffic, disable Brotli or apply the hotfix, which also fixes PHP2Shell.

Competition · Oct 25, 2026Added Oct 26

Wiz: 'Broccoli2Shell' Brotli decoder RCE (CVE-2026-111497) hits Node.js, Bun, Envoy, Istio

Wiz (Oct 25) published guidance on an out-of-bounds write in Google's Brotli decoder affecting Node.js, Bun, Envoy, Istio, Python Brotli/brotlicffi, and Go andybalholm/brotli; researchers showed RCE against unpatched Node.js, and Wiz says 91% of cloud environments have vulnerable resources. The Hacker News reported no in-the-wild exploitation as of Oct 22. Vulnerable: libbrotli 1.0.3-1.2.0; Node.js below 22.23.4, 24.22.1, 26.12.1; Bun 1.0.21-1.4.3; Envoy 1.36.11, 1.37.7, 1.38.5, 1.39.2; Istio 1.29.0-1.29.8, 1.30.0-1.30.5, 1.31.0-1.31.1; andybalholm/brotli below v1.2.7. Fix: upgrade (Brotli 1.0.10/1.1.1/1.2.1, Python Brotli 1.2.1, brotlicffi 1.2.1.0, Node.js 22.23.4/24.22.1/26.12.1, Bun 1.4.4, Envoy 1.36.12/1.37.8/1.38.6/1.39.3/1.40.0, Istio 1.29.9/1.30.6/1.31.2, andybalholm/brotli v1.2.7), rebuild images, and restart; if you can't patch, disable Brotli decompression or reject Brotli-encoded requests.

Why it matters. Wiz is using a widespread cloud bug to showcase its Threat Center and detection queries.

Seller use. Cortex Cloud covers code to runtime with SOC response in the same platform; Wiz finds the issue but hands off to another tool to respond.

Competitor. Wiz

Palo Alto product. Cortex Cloud, plus XSIAM Exposure Management

How Palo Alto wins. Cortex Cloud covers code to runtime with SOC response in the same platform; Wiz finds the issue but needs another tool for response.

Business outcome. Shorter exposure windows on a bug that touches most cloud estates.

Technical outcome. A runtime and SBOM view of bundled Brotli copies, tied to XSIAM detection and response.

Competition · Oct 25, 2026Added Oct 26

Wiz: 'Gheist' campaign abuses stolen GitHub tokens to dump CI secrets

Wiz (Oct 25) reports an automated campaign that planted sync-check workflows on 13,500+ branches across 850+ compromised accounts, dumping repo and environment secrets into logs in base32 to evade masking. GitHub's approval hold blocks runs in public repos, but they succeed in private repos and on GitHub Enterprise Server; some enterprise victims then saw AWS Secrets Manager enumeration. Check: branches matching ^ci-sync-[0-9a-z]{6}$ adding .github/workflows/sync-check.yml ('ci: sync config'); runs on ci-sync-* branches deleted within a minute; user agent 'gheist'; OIDC role assumptions with a ci-sync- subject; runner files .gdmp_pat, .gdmp_patg, .gdmp_sweep. Fix: rotate all exposed secrets, revoke the pushing tokens and check owners for infostealers, treat affected self-hosted runners as compromised, don't approve held sync-check runs, and scope OIDC trust to protected branches.

Why it matters. Wiz is extending into CI/CD supply-chain detection with Wiz Defend.

Seller use. XSIAM ties GitHub audit logs, CloudTrail role assumptions, and runner telemetry into one incident; Wiz detects in the cloud but doesn't run SOC case management.

Competitor. Wiz

Palo Alto product. Cortex Cloud (application and CI/CD security), with XSIAM for cloud and identity correlation

How Palo Alto wins. XSIAM correlates GitHub audit logs, CloudTrail role assumptions, and runner host telemetry into one incident; Wiz doesn't run SOC case management.

Business outcome. Fewer production-credential leaks from the software supply chain.

Technical outcome. Correlated detection across GitHub and cloud logs, e.g. an OIDC role assumed from a ci-sync-* branch.

Competition · Sep 23, 2026Added Oct 26

Microsoft: Unified Security Operations in Defender (ISOC) runs SOC without a Sentinel workspace (preview)

Background, no new announcement this week: Microsoft's Unified Security Operations in Defender (ISOC), in preview since late September, lets Defender Suite, E5, and E7 customers run SOC operations in Defender without an active Sentinel workspace.

Why it matters. Microsoft is folding SOC operations into its licensing bundles, which competes directly with XSIAM for Microsoft-heavy accounts.

Seller use. Position XSIAM as the SOC platform for mixed-vendor estates that's open to any data source, with Exposure Management and AgentiX built in.

Competitor. Microsoft

Palo Alto product. Cortex XSIAM

How Palo Alto wins. ISOC is tied to Microsoft licensing and Defender telemetry; XSIAM is open to any data source with Exposure Management and AgentiX built in.

Business outcome. One SOC platform for mixed-vendor estates without reshaping licensing around Microsoft.

Technical outcome. Native analytics on third-party firewall, cloud, and identity data, not only Defender signals.

Competition · Oct 26, 2026Added Oct 27

SentinelOne and Moro Hub bring sovereign AI security to the UAE

Moro Hub will offer SentinelOne's AI Security platform as a sovereign deployment, either on-premises or in Moro Hub's UAE data centers, or as a managed service run by Moro Hub specialists.

Why it matters. SentinelOne is using in-country sovereignty and MSSP delivery to sell AI security in the Gulf.

Seller use. Counter with Prisma AIRS plus XSIAM through regional MSSP partners. That gives AI runtime protection and SOC correlation on one data platform, not a separately hosted point product.

Competitor. SentinelOne

Palo Alto product. Prisma AIRS and Cortex XSIAM

How Palo Alto wins. Prisma AIRS covers AI apps, agents, and models from code to runtime, and XSIAM correlates that with the rest of the SOC. SentinelOne leads with sovereign hosting.

Business outcome. Meet in-country data requirements without buying a separate AI security point product.

Technical outcome. AI runtime protection and SOC detection on one data platform.

Competition · Oct 26, 2026Added Oct 27

Wiz: "The Pwn Request Reckoning" maps the GitHub Actions attacks that still work after GitHub's 2026 hardening

Wiz reviews GitHub's 2026 fixes: actions/checkout v7 (Jun 18), read-only cache tokens (Jun 26), a checkout backport to v2.8.0, v3.7.0, v4.4.0, v5.1.0, and v6.1.0 (Jul 20), Workflow Execution Protections GA (Sep 17), and a default pull_request_target block on public repos from Dec 2. It then lists what still works: SHA-pinned checkouts from before Jul 20, git clone or gh pr checkout bypasses, issue_comment and repository_dispatch triggers, script injection through ${{ }}, artifact poisoning, non-ephemeral self-hosted runners, and private or internal repos. Wiz pitches Wiz Code and includes a grep audit (example only).

Why it matters. CI/CD supply-chain risk is a growing Wiz Code wedge into AppSec budgets.

Seller use. Position Cortex Cloud application and CI/CD security for finding risky pipelines, with XSIAM correlating GitHub audit logs and cloud identity activity for response.

Competitor. Wiz

Palo Alto product. Cortex Cloud (application and CI/CD security) with Cortex XSIAM

How Palo Alto wins. Cortex Cloud finds risky pipelines, and XSIAM correlates GitHub and cloud logs for SOC response. Wiz Code needs another tool for response.

Business outcome. Fewer supply-chain incidents coming out of CI pipelines.

Technical outcome. Pipeline misconfiguration findings linked to runtime and SOC detection.

Competition · Oct 26, 2026Added Oct 27

Datadog Security Labs: "Code security for new coders" guide for AI coding-agent users

Datadog published a primer for people building with coding agents. It explains SCA, SAST, IAST, DAST, IaC scanning, and secret scanning, uses PHP2Shell as its cautionary example, and pitches Datadog Code Security. It's educational content, not a product launch.

Why it matters. Datadog is courting AI-assisted developers with security content tied to its observability product.

Seller use. Position Cortex Cloud application security, which ties code findings to runtime exposure and the SOC, plus Prisma AIRS for AI coding-agent risk.

Competitor. Datadog

Palo Alto product. Cortex Cloud application security and Prisma AIRS

How Palo Alto wins. Cortex Cloud gives code-to-cloud-to-SOC context in one platform. Datadog's security tools sit on top of its observability product.

Business outcome. Secure AI-built apps before they ship.

Technical outcome. Code findings correlated with runtime exposure and SOC detections.

Competition · Oct 26, 2026Added Oct 27

Splunk SVD-2026-1013 (PHP2Shell, CVE-2026-109618 and CVE-2026-109619): Smartlook now listed as Remedied

Splunk updated its PHP2Shell advisory on Oct 26. Smartlook was upgraded to a fixed PHP version, so customers don't need to act, and Splunk has seen no evidence of exploitation. All other Splunk and Cisco products listed are still not affected.

Why it matters. It corrects the earlier position that no Splunk products were affected.

Seller use. Position XSIAM's built-in exposure management and Unit 42 XQL hunting for KEV-listed bugs like PHP2Shell against a SIEM that needs add-ons.

Competitor. Splunk

Palo Alto product. Cortex XSIAM

How Palo Alto wins. Asset discovery, prioritization, and hunting in one console, compared with SIEM plus add-ons.

Business outcome. Faster, auditable response to KEV-listed bugs.

Technical outcome. Exposure management and XQL hunting on the same data platform.

Cortex · Oct 16, 2026Added Oct 19

Hunt opportunity: stolen ConnectWise Cloud Backup (SkyKick) credential used to access Microsoft 365 tenants

Huntress reports that a compromised ConnectWise Cloud Backup (formerly SkyKick) app credential was used from 144.172.64[.]128 to obtain Microsoft Graph tokens in customer M365 tenants, bypassing user MFA. Unauthorized sign-ins were confirmed in 162 tenants as of Oct 16; Huntress later saw almost 1,000 Entra tenants with sign-ins from the IP (300+ successful). ConnectWise disabled relevant apps as of Oct 17. Huntress's Oct 19 (1:30 PM ET) update: across 10,000+ tenants with ConnectWise apps, 144.172.64[.]128 is the only public IP that produced application sign-ins; 144.172.64[.]99 was a concentrated user password spray (Oct 10-14), 144.172.64[.]60 a few failed logins (Oct 18), and 144.172.94[.]243 an ongoing broad failed-login spray, none currently tied to the app sign-ins. A second tenant with post-compromise activity was found: in both, the app granted itself Global Administrator and planted secrets on a few in-tenant apps around 03:45 UTC Oct 15. Last confirmed malicious sign-in was 08:44 UTC Oct 15. No mailbox, file, user, or policy changes were seen, but Graph directory reads leave no audit record. Disabling apps does not remove credentials already added.

Why it matters. Abuse of a trusted vendor app's credential bypasses user-focused controls; detecting it requires correlating Entra ID sign-in and audit data, which is XSIAM's cross-source strength.

Seller use. For M365 and MSP-managed customers: hunt in XSIAM for service-principal sign-ins from 144.172.64[.]128 and for apps that self-assigned directory roles or added credentials to other apps since Oct 13; treat user sign-in failures from 144.172.64[.]99, 144.172.64[.]60, and 144.172.94[.]243 as a separate password-spray signal. If Entra ID sign-in and audit logs are not onboarded, that gap is the discovery question.

Cortex · Oct 19, 2026Added Oct 20

Cortex XDR 6.0 and Cortex XDR One: one sensor for endpoints and AI agents, feeding XSIAM

Palo Alto Networks launched Cortex XDR 6.0 and Cortex XDR One on Oct 19. XDR One combines Cortex XDR and Agentic Endpoint Security (AES, from Koi) in a single sensor and console. It discovers and risk-scores every agent, MCP server, plugin, model, and extension. AI Detection and Response (AIDR) records each AI coding agent session (prompts, shell commands, file reads, tool calls, network calls) and blocks policy-violating actions before they execute, covering tools such as Cursor, Claude Code, GitHub Copilot CLI, Codex CLI, Antigravity CLI, and Kiro. Also new: Native App Control, the Cortex Targeted Sensor (AES or AD-SPM alongside a third-party EDR), on-endpoint small language models, extended on-write WildFire checks, and AI-powered YARA rule management via AgentiX. Palo Alto says XDR One cuts false positives by up to 95% and gives Cortex XSIAM the data to govern AI risk.

Why it matters. Palo Alto's answer to shadow AI and agent risk on the endpoint, with the telemetry flowing directly into XSIAM's AI-risk and SOC workflows, launched the day before SentinelOne OneCon and alongside Microsoft's agent-security push.

Seller use. Ask: can you list every AI agent and MCP server on your developers' laptops and what each did yesterday? XDR One gives that inventory and audit trail; with another EDR in place, the Targeted Sensor adds AES without a rip-and-replace, and it all lands in XSIAM.

Unit 42 · Oct 19, 2026Added Oct 20

Unit 42 Managed Agentic Endpoint Security: 24/7 experts for AI-agent risk

Announced Oct 19, Unit 42 Managed AES adds 24/7 Unit 42 expertise on top of Cortex AES across four areas: AI governance, threat hunting, investigation and response, and AI-related cyber hygiene (AI Security Posture Reports and Threat Impact Reports). It works with standalone Cortex AES alongside an existing EDR or with Cortex XDR One, and Palo Alto says Unit 42 MDR will include it. Palo Alto cites that only 6% of organizations have an advanced AI security strategy.

Why it matters. Most customers lack staff to govern AI agents; a managed option removes the people barrier and gets AES in without displacing the incumbent EDR.

Seller use. Lead with Managed AES where the customer is worried about AI risk but has no team to run it; it can deploy next to the existing EDR.

Cortex · Oct 20, 2026Added Oct 21

Cortex XDR 6.0 detail: OS-level prompt interception, MITRE ATLAS-mapped AI runtime policies, on-sensor SLMs

SDxCentral (Oct 20) reports that Cortex XDR 6.0 intercepts AI prompts and responses at the operating-system level, so protection is not limited to apps with native monitoring hooks; named coverage includes Claude Code, Codex CLI, and open-source frameworks such as OpenClaw. The release adds preconfigured AI runtime security policies mapped to MITRE ATLAS, small language models on the endpoint sensor that flag malicious or obfuscated scripts before execution without a cloud round trip, AgentiX-assisted YARA rule creation and fleet sweeps (matches return hashes, signing info, and host details), and native App Control on Windows and macOS. XDR One combines XDR with Koi's Agentic Endpoint Security in one sensor and console, and Cortex Targeted Sensor runs selected capabilities next to a third-party EDR.

Why it matters. OS-level, hook-independent interception and ATLAS-mapped policies answer the two most common technical objections to agent security, and the telemetry feeds XSIAM.

Seller use. Tell technical buyers: developers run more AI tools than any vendor has hooks for. XDR 6.0 sees their prompts and actions at the OS level, ships MITRE ATLAS-mapped policies on day one, and sends everything to XSIAM. Use Targeted Sensor where another EDR is the incumbent.

Cortex · Oct 21, 2026Added Oct 22

Cortex XSIAM integrates with NVIDIA DOCA Argus to bring AI-factory signals into the SOC

In its Oct 21 NVIDIA OpenShell blog, Palo Alto says it has announced an integration of Cortex XSIAM with NVIDIA DOCA Argus. DOCA Argus monitors host activity from BlueField's independent trust domain, so XSIAM gets runtime signals that don't depend on an agent on the monitored host. NVIDIA Sentry, built on DOCA Argus, inspects memory and network activity out-of-band and streams alerts straight to XSIAM, which correlates them with network, cloud, and identity data. Palo Alto says it is continuing to develop broader fleet visibility and response workflows.

Why it matters. This is the first XSIAM-specific piece of the NVIDIA OpenShell story. It puts the SOC inside NVIDIA's AI-factory blueprint, not just runtime and network controls.

Seller use. When the host can't be trusted, XSIAM still sees it: Argus streams out-of-band DPU telemetry into the same XSIAM incident as your network, cloud, and identity data.

Unit 42 · Oct 21, 2026Added Oct 24

Unit 42 PHP2Shell (CVE-2026-109618, CVE-2026-109619) threat brief: XQL hunts published; European government case retracted Oct 25

CORRECTION (Oct 25): Unit 42 retracted its Oct 23 update that tied a European government agency compromise, with agentic-AI post-exploitation reaching password hashes and MFA secrets within two hours, to PHP2Shell: 'We are unable to confirm that initial access is associated with the specific PHP2Shell CVEs.' The intrusion was real; only the CVE link was withdrawn. Still valid: Cortex Xpanse counts over 22.6 million potentially vulnerable exposed instances (CVSS 4.0 score 9.2), and Unit 42 Managed Threat Hunting published two XQL queries: post-exploitation commands under PHP web workers (xdr_data) and inbound exploit attempts in NGFW threat logs (panw_ngfw_threat_raw, TID 543004). Fix: patch PHP to 8.5.12, 8.4.27, 8.3.36, or 8.2.35, rebuild images, restart workers, and enable Threat IDs 543004 and 97622-97625.

Why it matters. The XQL hunts remain the fastest way for XSIAM customers to check for PHP2Shell activity; the government-case example was retracted and shouldn't be used.

Seller use. Hand the customer's XSIAM team the two Unit 42 XQL queries to run today. Don't cite the European government case; Unit 42 retracted it.

Cortex · Oct 22, 2026Added Oct 23

Cortex Cloud maps the full code-to-cloud PHP2Shell response, with XSIAM on post-exploitation and a read-only AgentiX advisor agent

Palo Alto's Oct 22 Cortex Cloud blog covers CVE-2026-109618 and CVE-2026-109619 layer by layer: Cortex CLI blocks vulnerable images in CI/CD, Cortex Cloud Vulnerability Management finds vulnerable PHP, Cortex ASM has a PHP Attack Surface Rule, XDR and the Network Scanner inventory PHP on servers, Cortex Cloud Runtime and XSIAM handle post-exploitation, and NGFW with ATP Plus blocks exploit attempts (TID 543004). Affected deployments include PHP-FPM, Apache mod_php, php-cgi, FrankenPHP, and LiteSpeed. The blog also introduces a custom Cortex AgentiX agent, the PHP2Shell Security Advisor, which finds affected VMs, images, containers, and serverless functions, ranks them by criticality, checks XDR agent coverage, and recommends fixes. It runs read-only; remediation stays with the team.

Why it matters. It's a single code-to-firewall map for one critical vulnerability that ends in XSIAM, plus a live example of AgentiX shipping a threat-specific agent within a day with humans approving every change.

Seller use. "The government says patch or take it offline. We find every PHP instance from repo to runtime, block the exploit inline, and hunt for post-exploitation in XSIAM, with an AgentiX agent doing the triage."

Unit 42 · Oct 22, 2026Added Oct 23

Unit 42 maps the OAuth token-theft landscape: account hijacking, consent phishing, and malicious redirects

Unit 42's Oct 22 report says attackers increasingly steal OAuth access and refresh tokens instead of passwords; stolen tokens bypass MFA, survive password resets, and work until explicitly revoked. Campaigns fall into account hijacking (device-code phishing, authorization-code theft via legitimate apps' redirect_uri values), permission hijacking (consent phishing with vague or impersonating app names), and malicious redirects (abusing OAuth error flows). Recommended controls: disable end-user consent with admin approval, block unverified apps, enforce least-privilege scopes, revoke risky grants, audit redirect_uri values, and train users not to paste device codes.

Why it matters. Credential-based alerts won't fire on token abuse; catching it needs identity, browser, and SaaS telemetry correlated together, which is the XSIAM ITDR story.

Seller use. "Your MFA rollout didn't close this gap. Let's look at who has consented to which apps, and whether XSIAM can see token use across your IdP and SaaS."

Cortex · Oct 22, 2026Added Oct 23

SecurityBrief: Cortex XDR One for AI agents gets APJ coverage

SecurityBrief's Oct 22 article on Cortex XDR One quotes Orcun Tezel (VP Technical Solutions, APJ). It says XDR One uses small language models on the sensor to block fileless attacks offline, claims up to 95% fewer false positives, and notes Agentic Endpoint Security can run standalone alongside other EDRs.

Why it matters. Regional press coverage reinforces the XDR One and Agentic Endpoint Security launch for APJ customers and partners.

Seller use. Share with APJ accounts as third-party validation of XDR One; the standalone Agentic Endpoint Security option is a land motion in accounts running another EDR.

Unit 42 · Oct 23, 2026Added Oct 24

Third PHP bug CVE-2026-115560 gets no emergency fix; mitigation is disabling upload progress

PHP disclosed CVE-2026-115560 on Oct 23, a session upload-progress RCE that only works when session.serialize_handler is php_binary or php_serialize and is switched to php via ini_set() before session_start(), with upload progress enabled. It will be fixed in the next regular release, not an emergency one. Mitigation: set session.upload_progress.enabled = 0 and restart PHP workers. CERT-EU says PoCs are circulating for the PHP2Shell family and advises patching to 8.5.12, 8.4.27, 8.3.36, or 8.2.35 or isolating systems, and checking the NCSC-NL list for products that embed PHP.

Why it matters. Customers who patched for PHP2Shell aren't done; a config change is the only protection until the next PHP release.

Seller use. The patch you shipped this week doesn't cover this one. Disable upload progress now and keep hunting PHP worker activity in XSIAM.

Strata · Oct 19, 2026Added Oct 19

Critical infrastructure report: APAC findings show OT visibility gaps and tool sprawl

DQChannels (Oct 19) covers the APAC results of Palo Alto Networks' 2026 State of Critical Infrastructure Cybersecurity Report. Globally, 1,600+ leaders in 11 countries: 95% concerned about frontier-AI-powered attacks, 68% lack complete real-time OT visibility, 42% name legacy unpatchable OT as their biggest risk, 74% have not fully integrated IT and OT security. APAC (620 respondents): 58% had an operations-affecting incident, 74% lack full OT visibility, 64% use six or more tools, 80% lack full IT/OT integration, 90% expect AI security to help. Palo Alto cites PAN-OS 12.2 Ceres Frontier Virtual Patching, ruggedized NGFWs, and its Frontier AI Critical Defense Program.

Why it matters. Peer data for OT and critical-infrastructure accounts showing patching alone cannot keep pace with AI-accelerated exploitation.

Seller use. Tell OT accounts that 42% of their peers call unpatchable OT their biggest risk, and position network-layer virtual patching and ruggedized NGFWs as protection now.

Prisma · Oct 21, 2026Added Oct 21

NVIDIA OpenShell Reference Architecture names Palo Alto among security vendors integrating agent-security support

At GTC Berlin on Oct 21, NVIDIA launched the OpenShell Reference Architecture for building, containing, observing, and enforcing safe AI agents. It combines Vera Rubin inference infrastructure, Vera CPUs for agent harnesses, the open-source OpenShell runtime, and BlueField-4 DPUs running NVIDIA Sentry for in-silicon enforcement. NVIDIA lists Palo Alto Networks among the cybersecurity leaders integrating support, alongside 1Password, Check Point, CrowdStrike, Cisco, F5, Fortinet, Microsoft, Okta, TrendAI, and Zscaler. Palo Alto's Sept 28 NVIDIA blog describes its pieces: Prisma AIRS AI Gateway on Vera CPUs, Prisma AIRS AI Runtime Security on BlueField DPUs, and planned Idira agent identity integration with OpenShell.

Why it matters. AI-factory buyers will meet NVIDIA's blueprint first. Palo Alto is on the partner list, but so are CrowdStrike, Zscaler, Fortinet, and Check Point, so the partner logo alone is not a differentiator.

Seller use. Position the depth of the integration: Palo Alto runs on the DPU (AI Runtime Security on BlueField), on Vera (Prisma AIRS AI Gateway), and on the agent's identity (Idira), so one policy spans the network, the model gateway, and the agent.

Strata · Oct 21, 2026Added Oct 22

Frontier Virtual Patching protected customers from PHP2Shell before disclosure

Anand Oswal's Oct 21 blog says customers with Advanced Threat Prevention Plus and Frontier Virtual Patching were protected against CVE-2026-109618 and CVE-2026-109619 since Oct 20 by signature 543004, before details were public. Standard ATP coverage (543004 and 97622 to 97625) followed Oct 21. Coverage runs on PA-Series and VM-Series, with Prisma Access coming soon. The blog says the NOVA frontier-AI vulnerability analyzer has scanned 6,000+ open-source repos in three months and found 17,000+ vulnerabilities. Fixed PHP versions are 8.5.12, 8.4.27, 8.3.36, and 8.2.35. PHP 8.1 and older get no fix.

Why it matters. This is the clearest real-world proof point yet for the 'frontier AI exposure gap' message: inline protection before the vulnerability was public.

Seller use. Your PHP patch window is weeks, and attackers needed hours. Frontier Virtual Patching customers were covered the night before disclosure. Start the 30-day trial today.

Prisma · Oct 21, 2026Added Oct 22

Prisma Browser Advanced DNS Resolver is generally available

Prisma Browser now sends all DNS through an encrypted DNS-over-HTTPS channel to Palo Alto's Advanced DNS Resolver, with Precision AI threat blocking and hosts-file tamper protection. It needs no VPN, no endpoint agent, and no manual configuration. It's included with Prisma Browser Pro and higher, and you manage it in Strata Cloud Manager.

Why it matters. It closes the DNS security gap on BYOD, contractor, and unmanaged devices that network and agent-based controls can't reach.

Seller use. Bring this into contractor and BYOD access deals: DNS security on devices you don't manage, with one policy click.

Unit 42 · Oct 21, 2026Added Oct 22

Unit 42: a low-skill actor ran several cybercrime schemes with jailbroken AI (Hermes + DeepSeek V4)

Unit 42 describes an actor, BUGSTER, who used the Hermes Agent framework with DeepSeek V4 and a Cursor IDE with its permission checks bypassed. The actor brute-forced an Indian university's WordPress site, stole a database of 5,200+ student records from a second university, planned VoIP fraud, cracked Wi-Fi passwords, and profiled crypto whales. Unit 42 sees multiple unrelated actors adopting the Hermes and DeepSeek combination.

Why it matters. It's a concrete example of AI lowering the skill barrier for multi-domain cybercrime.

Seller use. Use it as the 'AI lowers the skill barrier' story for Cortex Agentic Endpoint Security, Idira, and the Unit 42 Frontier AI Defense service.

Prisma · Oct 22, 2026Added Oct 23

Idira Agent Identity Security is GA for Prisma AIRS

Palo Alto announced on Oct 22 that Idira can act as the agentic identity provider for the Prisma AIRS AI Agent Gateway. Each agent gets its own OAuth 2.1 client credentials and short-lived tokens, the gateway enforces fine-grained policy at runtime, and logs record both the agent and the human it acts for. Available now: SPIFFE/SVID workload identity, tool-level MCP policies, zero standing privileges for databases via the Secure Infrastructure Access MCP, on-behalf-of audit, shadow-agent onboarding, and automatic OAuth registration (DCR). Coming soon: an activity map (early access), credential protection for developers using Cursor and Claude Code, ZSP for cloud, and AWS SPIFFE. A secrets manager can now be bundled into the license.

Why it matters. It's the GA agent-identity piece of the Prisma AIRS story and a direct answer to SentinelOne ADR and CrowdStrike's agent-security messaging.

Seller use. "Every agent gets its own short-lived identity and least-privilege policy, and every action is tied back to a human. That's GA today."

Unit 42 · Oct 22, 2026Added Oct 23

Unit 42: eight eMudhra intermediate CA private keys could be derived; trust-store updates needed

Unit 42 reported on Oct 22 that eight eMudhra intermediate CA keys were generated with too little randomness, so their private keys can be derived from public certificates, enabling forged trusted TLS certificates for man-in-the-middle attacks. eMudhra has revoked the intermediates. Red Hat (RHSB-2026-012) tracks related CVEs (CVE-2026-111943, CVE-2026-114406, CVE-2026-91403, CVE-2026-113812) and suggests checking the ca-certificates package. Unit 42 recommends auditing PKI assets and bundled trust anchors, reissuing affected certificates from another CA, pushing trust-store updates, enforcing CRL/OCSP checks, and hunting for TLS validation-error spikes.

Why it matters. Forged trusted certificates undermine TLS inspection and identity trust everywhere; customers need inventory and trust-store hygiene now.

Seller use. Use it to open a PKI and decryption-hygiene conversation: which trust stores do your proxies, NGFW decryption, and apps use, and how fast can you push an update?

Prisma · Oct 23, 2026Added Oct 24

Unit 42 Continuous Frontier AI Defense and Prisma AIRS land on the OpenAI Marketplace

Palo Alto said on Oct 23 that OpenAI enterprise customers can buy Unit 42 Continuous Frontier AI Defense and Prisma AIRS on the new OpenAI Marketplace and retire pre-committed OpenAI spend. Continuous Frontier AI Defense is an always-on, expert-led agentic offensive security service whose multi-model harness includes GPT-5.6-Cyber; Palo Alto cites 75+ customer engagements, exposures in 100% of assessed organizations (37% high or critical), and over two-thirds of third-party exposures with no known CVE. It's available worldwide on an annual subscription. Prisma AIRS covers AI discovery, posture, red teaming, runtime protection, agent identity, and the AI Gateway.

Why it matters. It turns a customer's existing OpenAI commitment into security budget, removing the no-budget objection.

Seller use. If you've pre-committed OpenAI spend, put it toward Prisma AIRS and continuous AI-driven pentesting instead of letting it sit.

Strata · Oct 19, 2026Added Oct 19

Korean press questions Palo Alto's public-sector push after CVE-2026-0322 KEV listing

The Elec (Oct 19) reports the CISA KEV listing of PAN-OS CVE-2026-0322 complicates Palo Alto Networks Korea's public-sector sales strategy, citing country head Park Sang-kyu's Oct 14 Ignite on Tour Seoul keynote urging upgrades from L4 firewalls to L7 NGFWs, and noting the company became the first foreign vendor to supply a security monitoring system to the Bank of Korea last year.

Why it matters. Competitors will use the headline in APAC deals.

Seller use. Answer with facts: very limited exploitation, an authenticated management-interface flaw, fixes across all supported PAN-OS trains, and a clear management-access hardening path.

Cortex · Oct 7, 2026Added Oct 19

TD SYNNEX and Palo Alto Networks XSIAM Cyber Range workshop, Oct 21–22 (Gilbert, AZ)

Hands-on Cortex XSIAM overview, demo, and labs at TD SYNNEX's Cyber Range in Gilbert, Arizona, Oct 21–22, for TD SYNNEX customers only (RSVP closed Oct 2). Speakers include Palo Alto National Channel Engineer Ken Alexander. The page notes follow-up events can be scheduled with end customers.

Why it matters. Distributor-led XSIAM enablement this week gives partner reps a ready hands-on venue.

Seller use. For partner-led accounts, ask the TD SYNNEX team to schedule a follow-up Cyber Range session with the end customer.

Cortex · Oct 19, 2026Added Oct 20

Socura earns NextWave Cortex XSIAM MSSP Advanced Specialization

UK MDR provider Socura announced on Oct 19 that it achieved the Palo Alto Networks NextWave Cortex XSIAM MSSP Advanced Specialization and the matching XSIAM Product Specialization, effective Oct 18, 2026. Socura delivers its 24/7 managed detection and response on Cortex XSIAM.

Why it matters. A growing bench of XSIAM-specialized MSSPs helps sell XSIAM as a managed service into mid-market accounts.

Seller use. For UK and EU accounts without a SOC team, bring in an XSIAM-specialized MSSP such as Socura as the delivery partner.

Strata · Oct 22, 2026Added Oct 22

Bulgaria and Palo Alto Networks sign a cybersecurity MoU

SeeNews reported on Oct 22 that Bulgaria and Palo Alto Networks signed a cybersecurity memorandum of understanding. The article is paywalled, so details beyond the headline aren't verified.

Why it matters. It's a new public-sector government relationship in Central and Eastern Europe.

Seller use. A useful public-sector reference for CEE government conversations once the details are public.

Strata · Oct 22, 2026Added Oct 23

CNBC: PHP2Shell warnings lift cybersecurity stocks; PANW up 7% on Oct 21

CNBC reported on Oct 22 that cybersecurity stocks rallied after the government PHP warnings, with PANW up 7% on Wednesday, Oct 21. Morgan Stanley rates PANW overweight with a $410 price target versus a $347.25 close.

Why it matters. Market context sellers will hear about from customers and partners; it frames security as part of the AI trade.

Seller use. Context only, never a pitch. If customers raise The Inference's critique of no PAN-OS fix at disclosure, point to the published hotfix ETAs and the free mitigations (management lockdown, Threat IDs).

Cortex · Oct 23, 2026Added Oct 24

PANW up 6.5% after Evercore ISI channel survey flags stronger security budgets

Yahoo Finance reported on Oct 23 that PANW rose 6.5% (CrowdStrike 6.7%, Okta 5%) after Evercore ISI's survey of cybersecurity channel partners found budgets strengthening into year-end, healthy pipelines, and spending on data and AI, identity, and cloud security. It quotes Nikesh Arora on the TBPN podcast after PHP2Shell: "We're gonna see more of these, not less." PANW traded near 85x forward earnings before the move; fiscal Q1 results are expected in November.

Why it matters. Partners are reporting year-end budget, which supports closing deals already in motion.

Seller use. Context only, never a pitch: partners see year-end budget, so push the deals already in motion.

Competition · Oct 19, 2026Added Oct 19

Wiz CIRT details real AI-agent-driven attacks across cloud, Kubernetes, CI/CD, and identity

Wiz (Oct 19) says AI-driven attacks are rising; in several intrusions an AI agent ran the entire operation: exploiting an exposed Kafka UI, stealing Kubernetes service account tokens, minting GCP credentials, abusing AWS SSM, creating an IdP admin, and weaponizing CI/CD and GitOps. The same source IP scanned 600+ other Wiz customer environments. Wiz's first recommendation: unify logs across all platforms.

Why it matters. Wiz is pushing Wiz Defend and its Blue Agent into SOC territory using incident-response credibility.

Seller use. Point out that Wiz's own first recommendation, unified logs across every platform, is XSIAM's core design, and XSIAM already ships detectors for pod token harvesting and RBAC enumeration.

Competitor. Wiz

Palo Alto product. Cortex Cloud and Cortex XSIAM

How Palo Alto wins. XSIAM stitches cloud, Kubernetes, identity, CI/CD, and endpoint data in one SOC platform, with out-of-the-box Kubernetes credential-theft detectors.

Business outcome. Incident scoping in minutes, not days, across multicloud.

Technical outcome. Cross-platform correlation of credential chaining from Kubernetes token to cloud identity to CI/CD.

Competition · Oct 13, 2026Added Oct 19

Splunk: Cisco Deep Time Series Model GA in AI Toolkit; Log and Graph Reasoning previewed; advisories Oct 21

Splunk (Oct 13) made the Cisco Deep Time Series Model (CDTSM) generally available in Splunk AI Toolkit and previewed Log Reasoning and Graph Reasoning foundation models; customer Mitiga reported about 95% fewer false-positive alerts. Separately, Splunk will disclose fixes on Oct 21 for Enterprise and Universal Forwarder 10.4.4, 10.2.8, 10.0.11, and 9.4.16 and SOAR 8.7.0 (SVD-2026-1006).

Why it matters. Splunk is layering AI models onto a SIEM that customers still patch and upgrade themselves.

Seller use. Contrast built-in, vendor-managed XSIAM analytics with add-on toolkit models on a self-managed SIEM and forwarders that need patching on Oct 21.

Competitor. Splunk

Palo Alto product. Cortex XSIAM

How Palo Alto wins. XSIAM's detection and ML content ships built in and vendor-managed, versus add-on models on a self-managed SIEM.

Business outcome. Lower SIEM operating and patching cost.

Technical outcome. Analytics delivered as content updates instead of customer-run model and platform upgrades.

Competition · Oct 19, 2026Added Oct 20

Microsoft extends Project Perception to secure the 'agentic insider'

On Oct 19 Microsoft extended Project Perception to govern internal AI agents: discovery of 35 more local agent types (60 total, including Claude Code, OpenAI Codex, GitHub Copilot), new Entra Agent ID identity types, Dynamic Permissions (task-scoped, time-bound), Dynamic Agent Risk, Dynamic Conditional Access for agents with graduated containment, and Guardian Agents with Playbooks. Project Perception and Agent 365 share a unified registry.

Why it matters. Microsoft is pitching the same agent-governance story as Cortex XDR One and AES, anchored in Entra and its own ecosystem.

Seller use. Position Palo Alto as the independent control plane: agent discovery and runtime blocking on the endpoint (XDR One/AES), AI runtime security (Prisma AIRS), and correlation in XSIAM across Microsoft and non-Microsoft agents, IDEs, clouds, and SaaS.

Competitor. Microsoft

Palo Alto product. Cortex XDR One and AES, Prisma AIRS, Idira, Cortex XSIAM

How Palo Alto wins. Enforcement independent of a single vendor ecosystem, with OS-level runtime blocking on the endpoint and cross-platform analytics in XSIAM.

Business outcome. One AI-agent governance program without single-ecosystem lock-in.

Technical outcome. Runtime interception of agent actions plus correlation of agent identity, endpoint, and network behavior.

Competition · Oct 19, 2026Added Oct 20

Wiz detects npm supply chain zero-days at package publication

Wiz (Oct 19) described a pipeline that analyzes each new npm package version at publication using static analysis, an AI classifier, and sandboxed runtime analysis with the Wiz Sensor, then publishes IOCs to Wiz Defend and code and cloud scanning before a CVE exists. Wiz says notable supply chain attacks rose from about 10% of significant incidents in H2 2025 to 25% in H1 2026.

Why it matters. Wiz is extending from cloud posture into developer supply chain detection, a space Palo Alto covers with Cortex Cloud and AES.

Seller use. Counter with endpoint-to-runtime coverage: AES sees packages and agents on developer machines where installs happen, and XSIAM correlates with CI/CD and cloud runtime data.

Competitor. Wiz

Palo Alto product. Cortex Cloud, Cortex AES, Cortex XSIAM

How Palo Alto wins. Visibility from developer endpoint to pipeline to runtime in one platform, not cloud-side scanning alone.

Business outcome. Fewer supply chain incidents reaching production.

Technical outcome. Package risk tracked from laptop to pipeline to runtime with unified correlation.

Competition · Oct 19, 2026Added Oct 20

Datadog upgraded by Bernstein on AI-driven observability demand

CNBC reports Bernstein upgraded Datadog to Outperform on Oct 19 and raised its price target to $350 from $237, citing alternative data showing enterprise token consumption at the largest AI labs grew at least 50% quarter over quarter; Bernstein flagged open-source and in-house replacement as the main risk. Shares were up about 82% year to date. Datadog reports Q3 results Nov 4.

Why it matters. AI workloads are inflating observability demand and cost, which raises the stakes on XCOR's cost-control and autonomous-response pitch.

Seller use. Position XCOR's consumption-based pricing and telemetry controls as the answer to AI-driven observability cost growth, with findings feeding security response.

Competitor. Datadog

Palo Alto product. Cortex XCOR

How Palo Alto wins. Consumption-based pricing and telemetry controls, with observability tied to security response and autonomous remediation.

Business outcome. Observability spend that tracks value rather than ingest volume.

Technical outcome. Telemetry reduction without losing investigation fidelity.

Competition · Oct 19, 2026Added Oct 20

Splunk Edge Processor, Ingest Processor, and AI Assistant achieve FedRAMP High

Splunk (Oct 19) said Edge Processor, Ingest Processor, and Splunk AI Assistant achieved FedRAMP High for Splunk Cloud Platform customers in AWS GovCloud (US), and SPL2 is now available across the platform. Separately, Splunk will publish advisories on Oct 21 for fixes in Splunk Enterprise and Universal Forwarder 10.4.4, 10.2.8, 10.0.11, 9.4.16 and SOAR 8.7.0.

Why it matters. Splunk is shoring up its federal position with data pipeline and AI-assistant authorizations.

Seller use. In federal deals, contrast an AI-driven SOC platform with vendor-managed detection content (XSIAM) against data pipeline tools plus a query assistant on a self-managed SIEM.

Competitor. Splunk

Palo Alto product. Cortex XSIAM

How Palo Alto wins. Automated detection and response with vendor-managed content and no forwarders to patch, versus AI-assisted query writing.

Business outcome. Lower SIEM operating and patching cost for agencies.

Technical outcome. Automated detection and response instead of AI-assisted query authoring.

Competition · Oct 21, 2026Added Oct 21

SentinelOne launches Singularity ASOC autonomous SOC suite at OneCon

On Oct 21 at OneCon, SentinelOne unveiled Singularity ASOC (Autonomous SOC). It bundles Purple Agentic Investigation, Hyperautomation, AI Data Pipelines (50+ connectors, including Palo Alto Prisma, Microsoft Defender XDR, and Wiz; OpenTelemetry and generic API collection listed as coming), AI SIEM with incident and case management, and threat-intel/IOC management. It is paid for with Singularity Credits, with analyst-set consumption guardrails. SentinelOne says Purple Agentic Investigation has completed 400,000+ investigations and saved about 332,000 analyst hours. (SentinelOne's own press-release URL returned 404 when checked on Oct 21; source is WebProNews coverage.)

Why it matters. This is SentinelOne's most direct challenge yet to XSIAM's autonomous-SOC position.

Seller use. Contrast production versus packaging: XSIAM is an autonomous SOC in production with native endpoint, network, cloud, and identity data. ASOC is a newly bundled suite that depends on third-party connectors for network and much of cloud, and some collection methods are still coming.

Competitor. SentinelOne

Palo Alto product. Cortex XSIAM with Cortex AgentiX

How Palo Alto wins. Native first-party telemetry across endpoint (XDR One), network, cloud, and identity, with autonomous response already in production.

Business outcome. One proven SOC platform instead of a newly bundled suite.

Technical outcome. Cross-domain data stitching that feeds autonomous response from a single data model.

Competition · Oct 20, 2026Added Oct 21

CrowdStrike earns UK NCSC Cyber Incident Response Enhanced Level assurance

CrowdStrike says (Oct 20) its incident response practice is now assured at the Enhanced Level of the UK NCSC Cyber Incident Response (CIR) scheme, the highest IR assurance the UK government offers, building on the Standard Level assurance announced earlier this year.

Why it matters. It strengthens CrowdStrike's IR credibility in UK regulated and critical-infrastructure deals.

Seller use. In UK deals, bring Unit 42's UK credentials and live casework (e.g., the GlobalProtect ransomware investigations) and stress that Unit 42 findings turn directly into XSIAM detections and playbooks.

Competitor. CrowdStrike

Palo Alto product. Unit 42 Incident Response and Retainers, Cortex XSIAM

How Palo Alto wins. Unit 42 IR is tied directly to XSIAM and XDR telemetry and turns findings into automated detections and playbooks.

Business outcome. Faster, defensible incident response for UK critical-infrastructure accounts.

Technical outcome. IR findings operationalized as XSIAM detections and automated response.

Competition · Oct 20, 2026Added Oct 21

Wiz CIRT: phishing-to-LLMjacking attacks hijack cloud billing accounts for AI usage

Wiz CIRT (Oct 20) describes GCP-focused intrusions in which Google Search ads for terms like 'google cloud' led to fake login pages that captured credentials and MFA codes. Attackers then enabled the Gemini API in low-usage projects, created service accounts with Gemini API keys and high-privilege roles such as roles/ml.admin, and linked attacker-controlled GCP projects to the victim's billing account. Victims paid for hundreds of thousands of dollars in AI API charges without seeing the prompts or outputs.

Why it matters. Wiz is using CIRT casework to push Wiz Defend into cloud detection and response.

Seller use. Detecting this takes correlation of Workspace sign-in anomalies, IAM and service-account changes, and billing or project-link events. That is XSIAM's cross-source strength; ask whether Workspace and GCP audit logs are onboarded.

Competitor. Wiz

Palo Alto product. Cortex Cloud and Cortex XSIAM

How Palo Alto wins. XSIAM stitches identity, cloud audit, and billing events across clouds and responds automatically, rather than a cloud-only view.

Business outcome. Stops AI-fueled cloud bill fraud before the invoice arrives.

Technical outcome. One incident chain from phishing login to cloud privilege escalation to billing abuse.

Competition · Oct 19, 2026Added Oct 21

Google SecOps extends SOAR-to-Chronicle API migration deadline to Mar 31, 2027

Google's weekly 'What's New in Google SecOps' (Oct 19, covering Oct 12-18) says the deadline for migrating SOAR APIs to the Chronicle API moved from Nov 30, 2026 to Mar 31, 2027. Google also published parity docs for moving MSSPs off the legacy Backstory Partner API, Applied Threat Intelligence curated rules now use the GTI_IOC feed, and Google TI added a macOS Mirage Sandbox. The roundup's top item was Gemini 4 Argon's release.

Why it matters. Google SecOps customers and MSSPs are mid-way through a forced API migration, which opens a window to evaluate alternatives.

Seller use. Offer XSIAM as the alternative to rebuilding SOAR integrations twice: SIEM, SOAR, and response in one data model with no API split.

Competitor. Google

Palo Alto product. Cortex XSIAM

How Palo Alto wins. One platform for SIEM, SOAR, and response, so there is no API migration or split to manage.

Business outcome. Avoid paying for a migration twice.

Technical outcome. Unified data model across detection, automation, and response.

Competition · Oct 21, 2026Added Oct 22

CrowdStrike: Falcon Guardian to integrate with NVIDIA OpenShell, with Sentry planned

CrowdStrike is integrating Falcon Guardian (AI Detection and Response) with the NVIDIA OpenShell runtime and plans to integrate with NVIDIA Sentry on BlueField-4 for in-silicon enforcement. Autodesk is quoted. Separately, CrowdStrike published PHP2Shell coverage: post-exploitation detection, Exposure Management checks, and a Next-Gen SIEM correlation template.

Why it matters. CrowdStrike is chasing the same NVIDIA AI-factory security position as Palo Alto.

Seller use. Palo Alto's BlueField runtime security is GA today, while CrowdStrike's Sentry integration is still planned. On PHP2Shell, Palo Alto blocked the exploit inline before disclosure.

Competitor. CrowdStrike

Palo Alto product. Prisma AIRS AI Runtime Security on BlueField, Cortex XSIAM with DOCA Argus, and Idira

How Palo Alto wins. BlueField runtime security is GA now (CrowdStrike's is planned), and Palo Alto offers inline pre-disclosure virtual patching instead of post-exploitation-only coverage.

Business outcome. Protection in place before the patch, not after the breach.

Technical outcome. Hardware-isolated enforcement plus out-of-band telemetry correlated in XSIAM.

Competition · Oct 21, 2026Added Oct 22

SentinelOne launches Singularity ADR (Agentic Detection and Response) in early access

At OneCon on Oct 21, SentinelOne unveiled Singularity ADR, which discovers AI agents, enforces what they can do, monitors their behavior, and stops malicious or unintended activity in real time. It's built on the Singularity Platform and is in early access. It shipped alongside the Singularity ASOC suite.

Why it matters. SentinelOne now has an AI-agent security product aimed directly at Cortex Agentic Endpoint Security.

Seller use. AES ships inside the generally available Cortex XDR agent today, while ADR is early access. Palo Alto also covers the agent's identity (Idira) and the model gateway (AIRS).

Competitor. SentinelOne

Palo Alto product. Cortex Agentic Endpoint Security (XDR One), Prisma AIRS, and Idira

How Palo Alto wins. Generally available today in the Cortex XDR agent, with identity and model-gateway coverage beyond the endpoint.

Business outcome. Governing AI agents in production now, not in a pilot.

Technical outcome. OS-level prompt and action interception tied to identity and SOC correlation.

Competition · Oct 20, 2026Added Oct 22

Microsoft: cross-tenant delegated access in Defender is generally available

Microsoft made cross-tenant delegated administration in Defender generally available, built on Entra Tenant Governance. It extends delegated access to Sentinel resources, with granular Defender unified RBAC for non-CSP MSSPs and multi-tenant organizations. BlueVoyant and CyberCX are quoted.

Why it matters. It makes Defender and Sentinel easier for MSSPs and multi-tenant SOCs to run.

Seller use. XSIAM's MSSP model isn't tied to Entra tenants and covers non-Microsoft telemetry natively. Point to Socura's XSIAM MSSP specialization.

Competitor. Microsoft

Palo Alto product. Cortex XSIAM (MSSP and multi-tenant)

How Palo Alto wins. Multi-tenant SOC operations across mixed-vendor environments, not just Entra-governed Microsoft tenants.

Business outcome. MSSPs can run one SOC platform across mixed-vendor customers.

Technical outcome. Multi-tenant operations across endpoint, network, cloud, and identity data in one data model.

Competition · Oct 21, 2026Added Oct 22

Wiz Research discovers and discloses PHP2Shell

Wiz says every PHP version back to 5.4 is affected by at least one of the PHP2Shell bugs and showed pre-auth RCE on WordPress, Drupal, and Joomla. It used Wiz Atlas, Gemini 4 Argon, and GPT-5.6 Sol to find them. Wiz Defend and the Wiz Sensor detect exploitation, with an automatic response policy on Sensor version 1.0.12768.

Why it matters. Wiz is using a headline research win to position its runtime sensor and Defend products.

Seller use. Wiz finds vulnerable PHP in the cloud. Palo Alto blocked exploitation inline for every PHP workload behind the firewall, including unknown and on-prem hosts, before disclosure.

Competitor. Wiz

Palo Alto product. Cortex Cloud, Advanced Threat Prevention with Frontier Virtual Patching, and Cortex Xpanse

How Palo Alto wins. Inline pre-disclosure prevention across the whole estate, plus cloud posture and external attack-surface discovery.

Business outcome. Risk reduced across the whole estate, not just the cloud inventory.

Technical outcome. Inline prevention plus cloud posture plus external attack-surface discovery.

Competition · Oct 21, 2026Added Oct 22

Splunk ships its October patch batch for Enterprise and SOAR

SVD-2026-1007 (Oct 21) fixes multiple CVEs in Splunk Enterprise 10.4.4, 10.2.8, 10.0.11, and 9.4.16, including RCE through Splunk Web Manager XML, authorization bypass, and SPL injection in Secure Gateway. SecurityWeek counts 16 Enterprise CVEs (including critical CVE-2026-76299 and CVE-2026-76302) and 15 in SOAR 8.7.0 (including critical CVE-2026-76531 and CVE-2026-76407). The Universal Forwarder was dropped from the batch.

Why it matters. This is the second large Splunk patch batch in October, adding to self-managed SIEM operating cost.

Seller use. XSIAM is SaaS, so customers have no search heads, SOAR servers, or Secure Gateway apps to patch.

Competitor. Splunk

Palo Alto product. Cortex XSIAM

How Palo Alto wins. Vendor-managed SaaS, so there's no SIEM or SOAR infrastructure for customers to patch.

Business outcome. Lower SIEM operating and patching cost.

Technical outcome. Vendor-managed platform and content updates.

Competition · Oct 21, 2026Added Oct 23

CrowdStrike details four new agentic-AI threat actors

CrowdStrike's Oct 21 Counter Adversary Operations report describes four previously unreported actors using AI agent harnesses; one ran a Claude Code supervisor/executor setup derived from PentestGPT against at least 15 Argentine healthcare organizations. Per Cybersecurity Dive, the report counts three times as many agentic intrusions in H2 2026 as H1 and says token budgets, not engineering, are the main barrier to scale. CrowdStrike assesses agentic intrusions will almost certainly increase. Defender guidance is in the gated full report.

Why it matters. CrowdStrike is owning the agentic-threat narrative; sellers need a prevention-and-response answer, not just threat intel.

Seller use. CrowdStrike describes the threat; Palo Alto ships machine-speed inline prevention (Frontier Virtual Patching), agentic response in XSIAM, and GA agent identity (Idira).

Competitor. CrowdStrike

Palo Alto product. Cortex XSIAM, XDR One with Agentic Endpoint Security, Unit 42

How Palo Alto wins. Palo Alto pairs threat research with shipping inline prevention and automated agentic response across endpoint, network, and identity.

Business outcome. Response window shrinks from hours to minutes.

Technical outcome. Automated correlation and containment across endpoint, network, and identity.

Competition · Oct 21, 2026Added Oct 23

SentinelOne Prompt Security joins Lenovo ThinkShield

SentinelOne announced on Oct 21 that Prompt Security is now part of Lenovo's ThinkShield portfolio, discovering sanctioned and shadow AI use, stopping sensitive data from reaching unauthorized AI apps, and enforcing policy in real time, building on SentinelOne EDR already in ThinkShield.

Why it matters. An OEM channel for AI usage governance puts SentinelOne on new Lenovo devices by default.

Seller use. Palo Alto governs AI use at the browser, network, endpoint, and agent gateway, plus per-agent identity (Idira GA), not just prompt control on one OEM's devices.

Competitor. SentinelOne

Palo Alto product. Prisma AIRS, Prisma Browser, Prisma Access AI Access Security, Agentic Endpoint Security

How Palo Alto wins. Multi-channel AI governance plus agent identity versus device-bound prompt control.

Business outcome. One AI governance policy across every device and channel.

Technical outcome. Inline DLP plus agent identity plus runtime enforcement.

Competition · Oct 20, 2026Added Oct 23

Microsoft Sentinel Unified Data Management enters public preview

Microsoft announced on Oct 20 a public preview of Unified Data Management in the Defender portal (Setup & configuration > Data & connectors), showing ingestion volume split between the Analytics and Data Lake tiers, connectors needing attention, spikes and drops, latency, and both unified and classic connectors.

Why it matters. Microsoft is adding tooling to manage Sentinel's tiered ingestion costs, a recurring customer pain point.

Seller use. Ask Sentinel customers how much time they spend on tier triage; XSIAM positions one data platform that handles non-Microsoft telemetry natively.

Competitor. Microsoft

Palo Alto product. Cortex XSIAM

How Palo Alto wins. No tier juggling and native multi-vendor data handling.

Business outcome. Predictable SIEM spend without tier triage.

Technical outcome. One normalized data model across all sources.

Competition · Oct 22, 2026Added Oct 23

Wiz: ARTEX AI pentest agent used against Okta, Entra, and Cognito, overlapping with Storm-0940

Wiz reported on Oct 22 that ARTEX, an open-source autonomous pentest framework (closed-source since Oct 8 after 12,000+ forks), was used throughout October against IT and software vendors: scraping JavaScript source maps and OpenAPI docs, unsigned JWT (alg: none) SSO bypass attempts, burst password spraying of Okta and Entra, and account-recovery abuse, rotating IPs and user agents when blocked. Wiz notes overlap with Microsoft's Storm-0940 report, which Microsoft links to a supply-chain attack using stolen vendor credentials against downstream Microsoft 365 tenants. Wiz shares IOCs, example log patterns, and detection rule names.

Why it matters. An AI agent running identity attacks at machine speed against vendors is a supply-chain risk for every customer.

Seller use. Wiz sees the cloud side; XSIAM correlates IdP, web-access, and network logs where these bursts stand out and automates the IP block and account lockout.

Competitor. Wiz

Palo Alto product. Cortex XSIAM (ITDR and analytics), Cortex Cloud

How Palo Alto wins. Cross-source correlation and automated containment, not cloud-only visibility.

Business outcome. Stop automated identity attacks before a vendor compromise reaches your customers.

Technical outcome. Cross-source correlation of IdP, HTTP, and network telemetry with automated containment.

Competition · Oct 22, 2026Added Oct 23

Datadog adds AI cost features to Agent Observability

Datadog announced on Oct 22 a Cost page in Agent Observability that ties estimated AI spend to applications, traces, models, providers, and tags, plus Cost Savings Opportunities (for example uncached prompt prefixes or full history re-sent each turn) with a Fix with Bits option. Agent Observability is free for up to 40,000 LLM spans a month.

Why it matters. Datadog is pushing deeper into AI-agent observability, the space Cortex XCOR targets.

Seller use. Datadog optimizes AI spend; XCOR ties observability to autonomous response and security in the Cortex platform, with Chronosphere telemetry-volume control.

Competitor. Datadog

Palo Alto product. Cortex XCOR

How Palo Alto wins. Observability tied to security and autonomous response, with telemetry shaping.

Business outcome. Lower observability and AI spend with the SOC in the loop.

Technical outcome. Telemetry shaping plus security-grade correlation.

Competition · Oct 22, 2026Added Oct 23

Splunk demos a five-agent attack swarm in Attack Range; PHP2Shell advisory SVD-2026-1013

Splunk's Threat Research Team showed on Oct 22 five cooperating attack agents reaching Domain Admin, DCSync, and Linux root in 3 minutes 47 seconds in a lab; password spraying (T1110.003) was the top technique, and the defensive framework shown is a personal experimental project, not a Splunk product. Separately, SVD-2026-1013 (Oct 22) says no Splunk products are currently known to be affected by PHP2Shell (CVE-2026-109618, CVE-2026-109619); Splunk OnCall and AppDynamics SaaS are under investigation.

Why it matters. Splunk's own research argues defenders need cross-source correlation and automatic, scoped blocks.

Seller use. XSIAM with AgentiX ships cross-domain correlation and playbook-driven response today; Splunk's defense here is a research prototype.

Competitor. Splunk

Palo Alto product. Cortex XSIAM with AgentiX

How Palo Alto wins. Productized correlation and automated response versus a research prototype.

Business outcome. Containment at the speed of the attack.

Technical outcome. Built-in cross-domain correlation plus playbook-driven, scoped response.

Competition · Oct 23, 2026Added Oct 24

CrowdStrike says PHP2Shell is hard to weaponize; reports no successful exploitation

CrowdStrike Counter Adversary Operations (Oct 23) says most public PHP2Shell PoCs only crash PHP, reliable RCE must be tuned per PHP version, SAPI, app, and image, and it has seen only probing and failed attempts, with no successful exploitation in the wild or in honeypots. It recommends patching, rebuilding containers, restarting workers, disabling upload progress (which doesn't mitigate CVE-2026-109618), turning off file_uploads where unneeded, and limiting request bodies at the proxy or WAF.

Why it matters. CrowdStrike is downplaying near-term exploitation the same day Unit 42 published an in-the-wild agentic intrusion.

Seller use. Unit 42 published a real PHP2Shell intrusion with XQL hunts; use that as a front-line credibility point, not a dig.

Competitor. CrowdStrike

Palo Alto product. Cortex XSIAM, Cortex XDR, and Unit 42

How Palo Alto wins. Unit 42 observed and published an actual agentic intrusion via PHP2Shell with ready-to-run XQL hunts and inline Threat IDs for the same CVEs.

Business outcome. Decisions based on observed attacks, not odds.

Technical outcome. Ready-to-run hunts plus inline Threat IDs for the same CVEs.

Competition · Oct 23, 2026Added Oct 24

CrowdStrike: Falcon Guardian deployed at hundreds of organizations

CrowdStrike said on Oct 23 that Falcon Guardian, launched Sept 1, is deployed at hundreds of organizations, citing 260+ AI services discovered at one organization, a prompt-injection taxonomy of 200+ techniques, 99% detection at one financial services customer, and findings flowing into Next-Gen SIEM.

Why it matters. CrowdStrike is building an AI-agent security story that competes with Prisma AIRS and Agentic Endpoint Security.

Seller use. Palo Alto covers AI use at the browser, network, endpoint, and agent gateway, with GA per-agent identity through Idira.

Competitor. CrowdStrike

Palo Alto product. Prisma AIRS, Idira Agent Identity Security, and Agentic Endpoint Security

How Palo Alto wins. Coverage across browser, network, endpoint, and agent gateway with GA per-agent identity, not just endpoint-centric AI controls.

Business outcome. One AI governance policy across every channel.

Technical outcome. Runtime AI protection plus per-agent identity and inline enforcement.

Competition · Oct 21, 2026Added Oct 24

SentinelOne expands PartnerOne for AI security and Autonomous SOC practices

At OneCon (Oct 21), SentinelOne added partner certifications for Prompt Security, Endpoint and Identity, AI SIEM, AI Data Pipelines, and Purple AI with Hyperautomation, plus an AI Recon Assessment service, an ASOC Data Strategy Assessment, and partner early access to Singularity ADR. LevelBlue, GuidePoint, and WWT are launch partners.

Why it matters. SentinelOne is recruiting partners to sell its new ASOC and AI-security stack.

Seller use. Palo Alto partners already hold XSIAM MSSP specializations and sell a GA agent-identity and AI-runtime stack today.

Competitor. SentinelOne

Palo Alto product. Cortex XSIAM and Prisma AIRS

How Palo Alto wins. Partners can sell production-proven XSIAM services and GA AI security now, rather than building a practice around a just-launched suite.

Business outcome. Partners deliver proven services sooner.

Technical outcome. One platform for SOC data, automation, and AI security.

Competition · Oct 23, 2026Added Oct 24

Microsoft details the LiteLLM 1.107.0 supply-chain compromise

Microsoft (Oct 23) analyzed malicious LiteLLM 1.107.0, published Oct 21 on PyPI and official container images. It plants cook.pth, cook.py, and sitecustomize.py so starting Python runs a credential stealer even without importing LiteLLM, targeting AI-tool, cloud, Git, SSH, and browser credentials and LiteLLM proxy database data, exfiltrating to www.litellm[.]dev. Guidance: find every copy (environments, caches, mirrors, lock files, images), don't run python or pip in a suspect environment, rebuild from verified artifacts, rotate credentials from a clean machine, hash-pin dependencies, and restrict egress. Microsoft provides Defender detections and hunting queries.

Why it matters. A compromised AI gateway exposes every model-provider and cloud key it holds; Microsoft is using it to showcase Defender.

Seller use. Position Prisma AIRS AI Gateway, Cortex Cloud supply-chain scanning, and XSIAM correlation of egress and credential misuse across non-Microsoft estates.

Competitor. Microsoft

Palo Alto product. Cortex Cloud, Cortex XSIAM, and Prisma AIRS

How Palo Alto wins. Covers the pipeline, the AI gateway, and SOC correlation across mixed estates, not only Defender-managed hosts.

Business outcome. A stolen AI gateway doesn't become a cloud-wide credential breach.

Technical outcome. Package provenance, runtime egress control, and identity correlation together.

Competition · Oct 22, 2026Added Oct 24

Wiz: ASPM in the AI Era Part 2 links code findings to exploitable cloud attack paths

Wiz (Oct 22) says Wiz Code normalizes, enriches (EPSS, CISA KEV), and deduplicates findings from its own and third-party scanners such as Snyk, Checkmarx, and Veracode, then uses the Wiz Security Graph to connect a code flaw to a running, internet-exposed workload as one attack path. Part 3 will cover remediation with the Wiz Green Agent.

Why it matters. Wiz is pushing deeper into ASPM, where Cortex Cloud competes on code-to-cloud context.

Seller use. Cortex Cloud did this for PHP2Shell this week, from repo to runtime, and adds runtime protection, XSIAM response, and NGFW virtual patching.

Competitor. Wiz

Palo Alto product. Cortex Cloud

How Palo Alto wins. Code-to-cloud prioritization plus runtime protection, SOC response in XSIAM, and inline virtual patching on NGFW.

Business outcome. Fix what's exploitable first, then block it inline.

Technical outcome. Code-to-cloud context tied to SOC response.

Competition · Oct 23, 2026Added Oct 24

Datadog Agent 7.84.6 blocks compromised eMudhra intermediates (CVE-2026-115557)

Datadog Agent 7.84.6 (Oct 23) makes its embedded Python reject TLS chains containing compromised eMudhra intermediate CA keys regardless of trust store, backporting the CPython fix for CVE-2026-115557; on Windows, Python checks no longer trust those chains via the Windows certificate store. Fix: upgrade Agents and Cluster Agents to 7.84.6; separately, upgrade pip to 26.2.2+ and certifi to 2026.10.19.

Why it matters. Embedded trust stores in agents and apps don't update with the OS, which is the certificate-lifecycle gap NGTS addresses.

Seller use. Datadog patched its own agent; NGTS finds and replaces bad trust anchors across the whole estate.

Competitor. Datadog

Palo Alto product. Cortex XCOR and Next-Gen Trust Security in Strata Cloud Manager

How Palo Alto wins. Estate-wide trust-store inventory and reissue instead of one vendor agent at a time, with observability tied to the security platform.

Business outcome. Certificate incidents handled across the estate.

Technical outcome. Automated trust-store inventory and reissue.

Cortex · Oct 14, 2026Added Oct 14

XSIAM adds NIS2 and AI/SaaS compliance rules

XSIAM adds NIS2 and AI/SaaS compliance rules, plus a free Compliance module beta.

Why it matters. XSIAM is moving past alert handling into continuous posture and compliance for AI.

Seller use. bring this to GRC and CISO meetings: "your SOC platform can show AI and SaaS compliance drift, not just incidents."

Cortex · Oct 15, 2026Added Oct 15

Identity-aware data modeling (Oct 7)

The Kubernetes content pack added a modeling rule that maps identity fields alongside user fields, available from XSIAM 2.11.

Why it matters. Palo Alto is putting identity at the center of the data model as the CyberArk-based Idira identity line folds into Cortex.

Seller use. for cloud-native customers, show that Kubernetes activity ties back to a real identity in the investigation.

Cortex · Oct 15, 2026Added Oct 15

Agentic SOC positioning

An independent October 6 analysis calls XSIAM the fastest-growing product in Palo Alto's history and AgentiX the agentic layer that investigates and remediates under human-set guardrails. It also flags the usual objections: cost, concentration risk, and proving how autonomous "agentic" really is.

Seller use. get ahead of the autonomy question with a proof of value that measures the share of Tier-1 work closed before a human looks at it.

Cortex · Oct 15, 2026Added Oct 15

MDR delivery partner: Cyderes

Cyderes is now a premier delivery and implementation partner for XDR and XSIAM across the US, Canada, and UK/EMEA, offering fully managed or co-managed programs, with Idira on the identity side.

Seller use. for customers short on SOC staff, pair XSIAM with Cyderes as a managed path.

Cortex · Oct 15, 2026Added Oct 15

Heads-up: XSIAM/XSOAR advisory CVE-2026-0313

This is a command injection flaw in the OS Query content pack, versions 1.0.0 to 1.0.16. Only an authenticated admin can exploit it, and only when the SSH integration is set up. Palo Alto rates it Medium. The fix is to update the pack to 1.0.17 or later, or disable the OSQueryBasicQuery automation in the meantime.

Seller use. tell your XSIAM accounts before they hear it elsewhere; it's a content pack update, not a platform patch.

Cortex · Oct 14, 2026Added Oct 16

CVE-2026-0313: Patch Cortex XSIAM/XSOAR OS Query pack to 1.0.17

Command injection in OS Query content packs 1.0.0–1.0.16; authenticated admin with SSH integration. Medium severity; no known exploitation. Fix: pack 1.0.17+ or disable OSQueryBasicQuery.

Why it matters. Content-pack hygiene for XSIAM shops this week.

Seller use. Confirm OS Query pack ≥1.0.17; if you can't patch today, disable OSQueryBasicQuery.

Unit 42 · Oct 16, 2026Added Oct 17

Unit 42: top 5 initial access vectors for September 2026

Unit 42 ranked September's top initial access vectors: exploitation of public-facing applications, valid credentials and credential abuse (often chained with edge-service flaws), phishing and targeted social engineering, software supply chain compromise, and drive-by/watering-hole attacks.

Why it matters. The top two vectors are what XSIAM attack surface management and identity analytics are built to catch, and they match this week's PAN-OS management-interface story.

Seller use. Anchor an XSIAM proof of value on linking an exposed edge service and a suspicious login on the same asset in one case.

Cortex · Oct 12, 2026Added Oct 17

Cortex XDR named a Leader in 2026 IDC MarketScape for Modern Endpoint Security for Enterprises

IDC named Palo Alto Networks a Leader, citing Cortex Agentic Endpoint Security's AI-native visibility, risk scoring, and enforcement over AI agents, agentic tools, and software supply chain risk on the endpoint. Palo Alto also cites SE Labs AAA, 100% total accuracy, 556 ransomware variants blocked, zero false positives. CrowdStrike and SentinelOne were also named Leaders.

Why it matters. Cortex XDR is the endpoint data foundation under XSIAM; governing AI agents on the device is the differentiator.

Seller use. Ask customers what their current EDR does about coding agents running on developer laptops; Cortex was recognized specifically for that.

Cortex · Oct 14, 2026Added Oct 14

AgentiX video: extend agents with Cortex MCP

AgentiX video: extend agents across a customer's AI tools with Cortex MCP.

Why it matters. Palo Alto wants XSIAM to be the data and action layer for any agent, including the customer's own.

Seller use. ask "which AI assistant does your team already use?" and show it working with Cortex data through MCP.

Cortex · Oct 15, 2026Added Oct 15

Background worth repeating

the AgentiX 1.4 release (July to September) added frontier models (Claude Sonnet 4.6, Claude Opus 4.8, and Gemini 3.5 Flash), a natural-language playbook builder in private preview, Extended Threat Intel powered by Unit 42, and FedRAMP Moderate and High for standalone AgentiX.

Unit 42 · Oct 15, 2026Added Oct 16

Unit 42 used AgentiX to investigate AI-powered Linux espionage (CL-UNK-1211)

Unit 42 published CL-UNK-1211: AI-assisted espionage against government Linux infrastructure. Cortex XDR/XSIAM blocked process-kill and anti-forensics; researchers used Cortex Agentic Assistant powered by AgentiX for natural-language investigation.

Why it matters. Primary-source proof that AgentiX is how Palo researchers work, not only a roadmap slide.

Seller use. Unit 42 just published how AgentiX helped investigate AI-accelerated Linux espionage—and Cortex XDR/XSIAM stopped agent-kill and anti-forensics. Agentic isn't slideware.

Cortex · Oct 1, 2026Added Oct 14

Cortex XCOR launches with an AI SRE agent

Context from Oct 1: Cortex XCOR launches with an AI SRE agent on Chronosphere observability.

Why it matters. Palo Alto is going after the observability budget (Datadog, Splunk) and wants one data layer for security and IT operations.

Seller use. open with the VP of Engineering or SRE lead about telemetry costs and time to resolve incidents, then connect it to XSIAM.

Strata · Oct 14, 2026Added Oct 14

NHS England selects Palo Alto Networks for Secure Boundary

NHS England picks Palo Alto Networks, with IBM, for its Secure Boundary programme.

Strata · Oct 14, 2026Added Oct 14

Advanced DNS Security is GA in Amazon Route 53 Resolver DNS Firewall

Advanced DNS Security is GA in Amazon Route 53 Resolver DNS Firewall.

Seller use. it's an easy first deal in AWS-heavy accounts.

Prisma · Oct 14, 2026Added Oct 14

Prisma AIRS red teaming adds multi-turn attacks

Prisma AIRS red teaming adds multi-turn attacks, including Crescendo and GOAT.

Why it matters. agent identity is where Prisma AIRS and Idira meet.

Seller use. ask "how do you know which agent did what, on whose behalf?"

Prisma · Oct 14, 2026Added Oct 14

Prisma Browser sends DNS to Advanced DNS Security over DoH

Prisma Browser sends DNS to Advanced DNS Security over DoH.

Prisma · Oct 15, 2026Added Oct 15

Analyst momentum (Oct 8 to 14)

Palo Alto was named a Leader in the 2026 IDC MarketScape for Worldwide SASE (Oct 14) and in the Forrester Wave for OT Security, Q3 2026. Gartner called it the "Company to Beat" in AI Security Platforms for the second year running.

Seller use. these make good third-party proof for SASE and OT conversations.

Prisma · Oct 15, 2026Added Oct 16

Prisma AIRS: Claude Enterprise runtime protection, MCP Guardrails, Smart Routing

Oct 15 release adds runtime protection in Claude Enterprise via inference hooks, AI Supply Chain Security across models/skills/MCP servers (3M+ artifacts pre-scanned), MCP Guardrails for bidirectional tool traffic, and Signals & Smart Routing to control AI spend.

Why it matters. Clearest secure-frontier-AI-at-work story of the week; ties Prisma AIRS to Anthropic's enterprise stack.

Seller use. Ask how they stop agents from leaking source code into Claude, and who controls which MCP tools each agent can call.

Strata · Oct 16, 2026Added Oct 17

New 5th-gen PA-Series hardware firewalls for AI scale and post-quantum security

Palo Alto added PA-5510/5520/5530 (100G), the PA-3500 campus series with custom ASICs, PA-1500 series with integrated switching and PoE (9 to 27 Gbps threat prevention, up to 724W PoE), PA-520-5G, and ruggedized PA-50R models; PA-7500 reaches up to 1.5 Tbps App-ID throughput. Quantum-resistant IPsec VPNs and zero-touch provisioning via Strata Cloud Manager. Available now.

Why it matters. Gives sellers a hardware refresh motion with a PQC and AI-traffic story plus branch and OT consolidation.

Seller use. Target end-of-life refreshes and retail or branch estates: replace firewall, access switch, and PoE injector with one box managed from Strata Cloud Manager.

Strata · Oct 16, 2026Added Oct 17

Federal PQC Migration Plan template for OMB M-26-15 (plans due Oct 22)

Palo Alto published a fillable PQC Migration Plan template covering all nine required elements of OMB M-26-15; federal civilian agencies must submit plans by October 22, 2026. Milestones include TLS 1.3 by Jan 2, 2030, ML-KEM for high-value assets by Dec 31, 2030, and ML-DSA/SLH-DSA signatures by Dec 31, 2031. Quantum-Safe Security (FedRAMP Moderate) supports discovery and CBOM generation.

Why it matters. A hard federal deadline days away, with a ready-made Palo Alto asset.

Seller use. Send the template to every federal civilian account Monday; position M-26-15 as the blueprint for commercial critical infrastructure.

Strata · Oct 15, 2026Added Oct 15

Founding partner in Anthropic's Critical Infrastructure Defense Program (Oct 8)

The program brings Claude models, on-site engineers, and threat research to defenders of power, water, manufacturing, and transportation systems. CrowdStrike is also a founding partner, so this doesn't set Palo Alto apart from them.

Seller use. for utilities and manufacturers, pair it with the Forrester OT Leader result.

Prisma · Oct 15, 2026Added Oct 15

Ignite on Tour Seoul (Oct 14)

President BJ Jenkins gave the keynote under the theme "Frontier AI Defense," presenting Prisma AIRS, Cortex, and Idira. The Unit 42 stat to reuse: time from compromise to data theft fell from 4.8 hours in 2024 to 1.2 hours in 2026.

Cortex · Oct 15, 2026Added Oct 15

Executive visibility

CEO Nikesh Arora talked AI agent guardrails on CNBC (Oct 12) and wrote in Fortune (Oct 13). CIO Meerah Rajavel was on CNBC Squawk Box Asia (Oct 14) about AI defenses and human oversight.

Cortex · Oct 15, 2026Added Oct 15

Arora share-forward contract (Oct 12)

Arora's trust entered a prepaid variable forward contract on up to 500,000 shares, receiving about $147M upfront. He keeps ownership and voting rights until it settles in 2029, so this is not an outright sale. Expect customers who follow the stock to ask about it.

Cortex · Oct 15, 2026Added Oct 15

Market jitters (Oct 14)

Palo Alto stock fell about 4% after a report that OpenAI is in early talks to buy Trail of Bits, a firm that finds vulnerabilities in open-source code. Even after the drop, the shares are up about 105% this year.

Seller use. frontier labs are both partners and possible rivals. Arora's line from the last earnings call was that OpenAI, Anthropic, and Google are "coming to the table" as partners.

Cortex · Oct 16, 2026Added Oct 17

CFO Dipak Golechha: security will limit AI adoption; platformization debate is over

In a TI Inside (Brazil) interview, the CFO said security, not compute or talent, will limit enterprise AI adoption; Palo Alto has held 2,000+ Frontier AI Defense customer meetings since Mythos; mean time to detect and respond to new threats is under one minute across 1M+ new daily attacks; Palo Alto has under 10% share by volume but about 40% of public cybersecurity market cap.

Why it matters. Executive framing for the autonomous SOC and platform pitch.

Seller use. Open executive meetings with 'AI adoption will be limited by security,' then show sub-minute response with XSIAM.

Strata · Oct 15, 2026Added Oct 15

PAN-OS release notes were updated for 10.2, 11.1, and 11.2 (Oct 13 to 14), along with Strata Cloud Manager.

PAN-OS release notes were updated for 10.2, 11.1, and 11.2 (Oct 13 to 14), along with Strata Cloud Manager.

Strata · Oct 15, 2026Added Oct 15

Device telemetry turns on automatically for eligible NGFWs in three waves: Oct 19 (Australia, South Korea, South Africa, Indonesia), Oct 21 (Europe), and Oct 26 (everyone else). Settings move to the Hub. Give privacy-sensitive accounts a heads-up.

Device telemetry turns on automatically for eligible NGFWs in three waves: Oct 19 (Australia, South Korea, South Africa, Indonesia), Oct 21 (Europe), and Oct 26 (everyone else). Settings move to the Hub. Give privacy-sensitive accounts a heads-up.

Unit 42 · Oct 14, 2026Added Oct 16

Unit 42 PEERSTITCH: memory-resident FortiGate implant after FortiManager compromise

CL-STA-0954: FortiManager exploited via CVE-2024-47575, material for 500+ FortiGates stolen, PEERSTITCH ARM64 memory-only implant deployed.

Why it matters. One compromised Fortinet management plane cascaded to hundreds of firewalls.

Seller use. Ask how they isolate management planes and rotate trust material, then position PAN platform plus Xpanse.

Strata · Oct 15, 2026Added Oct 17

CVE-2026-0320 and CVE-2026-0321: two more PAN-OS bugs fixed by the same upgrade

CVE-2026-0320 is an authenticated admin command injection to root via the management interface (CVSS-B 8.6). CVE-2026-0321 is an unauthenticated DoS via dataplane traffic that can push the firewall into maintenance mode (CVSS-B 8.7; Panorama not affected). No known exploitation; fixed versions match CVE-2026-0322 (e.g., 12.2.4, 11.2.16).

Why it matters. One upgrade closes all three PAN-OS advisories from this week.

Seller use. Use the three-in-one fix to get change control moving on the CVE-2026-0322 upgrade.

Strata · Oct 17, 2026Added Oct 17

CVE-2026-0307: GlobalProtect app privilege-escalation fixes; 6.0.15 still pending (ETA Oct 29)

Local privilege escalation to SYSTEM (Windows) or root (macOS, Linux) in the GlobalProtect app, first published Sept 9. Advisory updated Oct 17 to add build numbers: 6.3.3-h16 is 6.3.3-1199 (Windows, macOS), 6.3.3-h15 is 6.3.3-c63 (Linux), 6.2.8-h15 is 6.2.8-1084. 6.0.15 for Windows, macOS, and Linux still shows ETA Oct 29. Fix requires upgrading both GlobalProtect and PAN-OS. CVSS-B 8.5 (CVSS-BT 5.9), no known exploitation.

Why it matters. Correction: fixes are not yet complete for 6.0.x; 6.0.15 is still pending.

Seller use. Tell 6.0.x customers to plan for the Oct 29 build or move to a fixed 6.2 or 6.3 build now, and upgrade PAN-OS as well.

Competition · Oct 15, 2026Added Oct 15

CrowdStrike: Anthropic program partner (Oct 8) and IDC MarketScape endpoint Leader (Oct 7). Its agentic SOC launch from Fal.Con in September is still the main story.

Charlotte AI runs multiple agents on one investigation with shared context, Onum-based data pipelines claim up to 50% lower storage costs, and Charlotte Agentic SOAR adds two-way MCP.

Competitor. CrowdStrike

Palo Alto product. XSIAM with AgentiX.

How Palo Alto wins. XSIAM brings SIEM, XDR, SOAR, exposure management, and cloud into one data model, and now adds XCOR observability. CrowdStrike's story still starts at the endpoint sensor.

Business outcome. one SOC platform contract instead of separate SIEM, SOAR, and EDR deals.

Technical outcome. AgentiX agents act across 1,100+ integrations, not only data collected by Falcon.

Competition · Oct 15, 2026Added Oct 15

SentinelOne: $1.25B 0% convertible note offering (Oct 14), with proceeds partly set aside for possible acquisitions, plus an IDC endpoint Leader result and a SIEM award.

a war chest for share buybacks and "potential acquisitions," which makes an AI SIEM or data deal possible.

Competitor. SentinelOne

Palo Alto product. XSIAM and Cortex XDR.

How Palo Alto wins. Palo Alto already has the scale and the integrated platform that SentinelOne is raising money to build.

Business outcome. less roadmap risk and less vendor churn for the customer.

Technical outcome. one platform that already covers SIEM, SOAR, ASM, and observability.

Competition · Oct 15, 2026Added Oct 15

Microsoft: the Integrated SOC (ISOC) in Defender preview (announced Sept 23; Sentinel customers can start migrating Nov 15), plus Defender for Endpoint discovery of local AI agents and MCP servers (doc update Oct 9).

SIEM, XDR, threat intel, and AI bundled for E5 and E7 customers, plus an inventory of AI agents and MCP servers on endpoints.

Competitor. Microsoft

Palo Alto product. XSIAM, and Prisma AIRS for agent security.

How Palo Alto wins. XSIAM is open to non-Microsoft sources, and Prisma AIRS Agent Identity controls what agents can do at run time, not just where they are installed.

Business outcome. avoids lock-in to a single vendor's licensing.

Technical outcome. per-agent identity and MCP tool-level policy, compared with Microsoft's discovery-only inventory.

Competition · Oct 12, 2026Added Oct 15

Google SecOps ATI curated rules migrate to GTI_IOC feed

Applied Threat Intelligence curated rules now match the GTI_IOC feed starting Oct 12; legacy Mandiant IOC feeds deprecated. Custom rules must migrate. Response Health Hub remains the October automation highlight.

Why it matters. Google is consolidating intel feeds while still emphasizing playbook health dashboards over agentic builders.

Seller use. Contrast AgentiX natural-language playbook builder and governed autonomy with Google's health-hub monitoring.

Competitor. Google

Palo Alto product. XSIAM and AgentiX

How Palo Alto wins. AgentiX builds and runs automation, not only reports on playbook health.

Business outcome. Fewer automation engineers needed to keep the SOC running.

Technical outcome. Natural-language playbook generation plus governed autonomous actions.

Competition · Oct 15, 2026Added Oct 15

Wiz: AI SAST in public preview for Wiz Code (Oct 6), with Red Agent and Green Agent to validate and fix findings.

AI code scanning tied to cloud context on the Wiz Security Graph, plus agents that test exploitability and drive fixes.

Competitor. Wiz

Palo Alto product. Cortex Cloud for application security and posture, with Prisma AIRS for AI apps.

How Palo Alto wins. Cortex Cloud findings go straight into the XSIAM SOC for runtime response, so code-to-cloud risk reaches the people who respond to incidents.

Business outcome. one team and one platform from code risk to incident response.

Technical outcome. code, cloud, and runtime findings correlated with SOC detections in one data layer.

Competition · Oct 15, 2026Added Oct 15

Datadog: cross-cluster queries over customer-hosted (BYOC) logs for people and AI agents (Oct 9), Incident Response in FedRAMP High (Oct 8), and security-log routing to Exabeam (Oct 5).

features that make Datadog data easier for AI agents to query, and federal incident response.

Competitor. Datadog

Palo Alto product. Cortex XCOR.

How Palo Alto wins. XCOR brings Chronosphere's telemetry cost controls and AI root-cause analysis on one data foundation with XSIAM, plus automated migration off legacy tools.

Business outcome. lower observability spend as telemetry grows.

Technical outcome. AI Investigations and XCOR Operator for faster root cause, using OpenTelemetry collection.

Competition · Oct 15, 2026Added Oct 15

Splunk (Cisco): recap of the .conf26 agentic SOC on Enterprise Security 8.7 (Oct 8), with a triage agent and humans approving decisions.

ES 8.7 as one workspace for detection, investigation, and response, plus an "Agentic SOC Workforce" (triage, guided response, malware reversing).

Competitor. Splunk (Cisco)

Palo Alto product. XSIAM with AgentiX, and XCOR against Splunk Observability.

How Palo Alto wins. Splunk still leans on humans to make the call, while AgentiX offers adjustable autonomy and native endpoint, network, and cloud data.

Business outcome. replace Splunk license and ingest costs with one platform.

Technical outcome. Chronosphere's telemetry pipeline cuts data volume by 30% or more before it's stored.

Competition · Oct 5, 2026Added Oct 16

CrowdStrike Falcon Data Security for SaaS GA for Microsoft 365

Generally available discovery and classification of sensitive data in SharePoint, OneDrive, and Copilot with Microsoft Sensitivity Labels and JIT privileged access; findings feed Falcon Next-Gen SIEM.

Why it matters. CrowdStrike is pushing DSPM into M365 while still leading with endpoint-centric agentic SOC.

Seller use. Contrast Prisma AIRS runtime agent controls and XSIAM's unified SOC data model against SaaS labeling alone.

Competitor. CrowdStrike

Palo Alto product. XSIAM with AgentiX, Prisma AIRS, and Cortex Cloud

How Palo Alto wins. XSIAM unifies SIEM, XDR, SOAR, exposure, and cloud; Prisma AIRS governs agent and MCP actions at runtime.

Business outcome. One SOC and AI-security platform contract instead of separate EDR, DSPM, and CNAPP deals.

Technical outcome. AgentiX agents act across 1,100+ integrations with governed autonomy.

Competition · Oct 14, 2026Added Oct 16

SentinelOne uses OpenAI Daybreak to cut malware RE from weeks to hours

OpenAI Daybreak produces human-level reverse-engineering output in roughly eight hours versus 4–6 weeks for SentinelOne researchers; pairs with the $1.25B convertible note war chest.

Why it matters. Vendor research acceleration is not the same as governed agentic response on customer telemetry.

Seller use. Position AgentiX investigation plus Unit 42 XTI as customer-side capacity, not only a vendor lab speedup.

Competitor. SentinelOne

Palo Alto product. XSIAM, AgentiX, and Cortex XDR

How Palo Alto wins. Palo Alto ships agentic investigation and Unit 42 Extended Threat Intel inside the platform customers run.

Business outcome. Less roadmap and acquisition risk for the customer.

Technical outcome. Governed AgentiX investigation and response on the customer's own telemetry.

Competition · Oct 14, 2026Added Oct 16

Wiz AI Agents available in Wiz for Gov at FedRAMP High

Green, Blue, and Red AI Agents now run in Wiz's FedRAMP High environment for remediations, SOC triage, and runtime attack-path analysis.

Why it matters. Wiz is selling AI-APP to public sector; Palo must answer with FedRAMP-ready Cortex plus SOC join.

Seller use. Show Cortex Cloud findings flowing into XSIAM and Prisma AIRS for agent/MCP runtime control.

Competitor. Wiz

Palo Alto product. Cortex Cloud and Prisma AIRS, with findings into XSIAM

How Palo Alto wins. Code-to-cloud risk reaches the SOC in XSIAM; Prisma AIRS covers agent identity and MCP at the gateway.

Business outcome. One team and one platform from code risk to incident response.

Technical outcome. Code, cloud, and runtime findings correlated with SOC detections in one data layer.

Competition · Oct 15, 2026Added Oct 16

Datadog Scout 1.0 powers Bits Investigation for SRE alerts

Scout 1.0 is an SRE-specialized model that matches frontier models on Datadog's AlertEval benchmark at 3–8× lower inference cost; closed preview for Bits Investigation.

Why it matters. Direct shot at the observability/SRE budget XCOR is after.

Seller use. Open with telemetry cost and MTTR, then show XCOR on the same foundation as XSIAM.

Competitor. Datadog

Palo Alto product. Cortex XCOR

How Palo Alto wins. XCOR brings Chronosphere cost controls and AI RCA on one data foundation with XSIAM.

Business outcome. Lower observability spend with security and SRE on shared data.

Technical outcome. AI Investigations and XCOR Operator using OpenTelemetry collection.

Competition · Oct 14, 2026Added Oct 16

Splunk October Enterprise advisories plus .conf26 agentic SOC

SVD-2026-1001 and related October advisories require upgrades to 10.4.3 / 10.2.7 / 10.0.10 / 9.4.15 and limits.conf hardening; ES 8.7 agentic SOC still has humans approving decisions.

Why it matters. Patch burden plus human-gated agentic SOC keeps displacement conversations open.

Seller use. Lead with ingest cost and autonomy proof-of-value versus Splunk's approve-every-decision model.

Competitor. Splunk (Cisco)

Palo Alto product. XSIAM with AgentiX, and XCOR against Splunk Observability

How Palo Alto wins. AgentiX offers adjustable autonomy with native endpoint, network, and cloud data.

Business outcome. Replace Splunk license and ingest costs with one platform.

Technical outcome. Chronosphere pipeline cuts data volume; AgentiX closes more Tier-1 work without a human in the loop.

Competition · Oct 15, 2026Added Oct 16

Microsoft Project Perception agentic SOC (Limited Public Preview)

Red/blue/green specialized agents in Defender for expose–investigate–remediate under human guardrails; marketed as AI that acts vs Security Copilot AI that assists; invitation-only Limited Public Preview.

Why it matters. Direct narrative competitor to XSIAM autonomous SOC in Microsoft-heavy accounts.

Seller use. Ask preview eligibility, which domains agents can see, and who approves high-impact actions. Contrast with XSIAM GA multi-vendor autonomy.

Competitor. Microsoft

Palo Alto product. XSIAM with AgentiX

How Palo Alto wins. XSIAM is GA autonomy across heterogeneous estates, not Microsoft-first signals; Perception is invitation-only.

Business outcome. Vendor-neutral autonomous SOC for best-of-breed telemetry.

Technical outcome. Cross-domain correlation and response without Defender-only scaffolding.

Competition · Oct 13, 2026Added Oct 17

CrowdStrike helped the FBI disrupt FAMOUS CHOLLIMA laptop farms

CrowdStrike Counter Adversary Operations provided intelligence that helped the FBI disrupt U.S. laptop farms used by North Korean IT workers in late September; victims spanned aerospace, energy, finance, healthcare, cybersecurity, and defense.

Why it matters. CrowdStrike is using threat-intel credibility to sell its platform, while adding partner segmentation (ColorTokens) through its marketplace.

Seller use. Show XSIAM correlating identity, endpoint, and network signals in one case to catch fake remote-worker schemes.

Competitor. CrowdStrike

Palo Alto product. Unit 42, Cortex XDR, and XSIAM identity analytics and ITDR

How Palo Alto wins. XSIAM correlates identity, endpoint, and network signals in one data model; segmentation is native via NGFW and Prisma Access rather than a marketplace add-on.

Business outcome. Fewer vendors and contracts across threat intel, detection, and segmentation.

Technical outcome. Identity and endpoint anomalies land in one XSIAM case.

Competition · Oct 13, 2026Added Oct 17

SentinelOne research on BYOVD EDR killers; OneCon next week

SentinelOne argued defenders should enforce driver-signing trust and revocation over blocklists, finding 36% of LOLDrivers samples absent from the default Windows blocklist and 22% loading with HVCI enabled (one June 2026 pull). OneCon runs Oct 20 to 22. No new product launch this week.

Why it matters. Expect agentic SOC announcements at OneCon; EDR-tamper resistance is the battleground.

Seller use. Lead with Cortex XDR anti-tampering proof and XSIAM cross-domain detection when an endpoint goes quiet.

Competitor. SentinelOne

Palo Alto product. Cortex XDR and XSIAM

How Palo Alto wins. Cortex XDR holds SE Labs anti-tampering certification and blocked agent-kill attempts in Unit 42's CL-UNK-1211 case; XSIAM adds AgentiX-driven response.

Business outcome. Lower risk of a silent EDR outage before ransomware.

Technical outcome. Tamper-resistant agent plus cross-domain detection.

Competition · Oct 16, 2026Added Oct 17

Microsoft and NVIDIA publish open-weight model risk guidance

Risk Management for Open-Weight Models in Enterprise introduces a five-category taxonomy (Cybersecurity, Data Protection, Content, Human-AI Interaction, Bias) grounded in ISO and NIST AI RMF, mapped to evaluations, pointing to Microsoft Foundry. Covers the model layer; runtime, harness, and application layers come later.

Why it matters. Microsoft is shaping the AI risk vocabulary around Foundry.

Seller use. Position Prisma AIRS as already covering model scanning, red teaming, and runtime enforcement across clouds and model providers.

Competitor. Microsoft

Palo Alto product. Prisma AIRS

How Palo Alto wins. Prisma AIRS scans models, red-teams, and enforces at runtime across clouds and model providers, covering the runtime and agent layers Microsoft says are still to come.

Business outcome. One AI security control plane regardless of model or cloud.

Technical outcome. Model scanning plus runtime and MCP enforcement, not only evaluations.

Competition · Oct 14, 2026Added Oct 17

Wiz Code ingests third-party AppSec scanners for ASPM

Wiz added managed connectors for Snyk, Checkmarx, GitHub Advanced Security, and others plus SARIF ingestion, correlating repositories to images and running workloads with per-repo scanner coverage views.

Why it matters. Wiz is extending from cloud posture into application security posture.

Seller use. Show Cortex Cloud code-to-cloud findings flowing straight into XSIAM for runtime response.

Competitor. Wiz

Palo Alto product. Cortex Cloud ASPM and XSIAM

How Palo Alto wins. Cortex Cloud links code to cloud and sends findings into the XSIAM SOC, making exploitable code risk an incident workflow rather than another dashboard.

Business outcome. One platform from code risk to incident response.

Technical outcome. Code-to-runtime findings correlated with SOC detections in one data layer.

Competition · Oct 16, 2026Added Oct 17

Google launches Wiz Runtime Sensor add-on for GKE (preview)

A first-party managed GKE add-on brings Wiz eBPF runtime threat detection to Standard and Autopilot clusters with automated lifecycle management, credential security, and fleet-wide policy enforcement.

Why it matters. Google is making Wiz the default runtime sensor inside its own cloud.

Seller use. Position Cortex Cloud runtime security with XSIAM for multicloud consistency and no hyperscaler lock-in.

Competitor. Google

Palo Alto product. Cortex Cloud runtime security with XSIAM

How Palo Alto wins. Cortex Cloud covers runtime across AWS, Azure, GCP, and on-prem and feeds XSIAM.

Business outcome. No hyperscaler lock-in for runtime security.

Technical outcome. Consistent runtime detection and response across clouds and Kubernetes distributions.

Competition · Oct 14, 2026Added Oct 17

Splunk adds MCP Server, Agent Skills, splunkctl, and Agentic SDK

Splunk released tools that let customers' own agents query and operate Splunk (MCP Server, 30+ Agent Skills, open-source splunkctl CLI, Agentic Splunk SDK), with an app-dev agent harness in controlled availability and human approval for consequential actions. Separately, SVD-2026-1006 pre-announces Oct 21 advisories with fixes in Enterprise 10.4.4, 10.2.8, 10.0.11, 9.4.16 and SOAR 8.7.0.

Why it matters. Splunk is opening its data to build-your-own agents rather than shipping prebuilt SOC agents.

Seller use. Contrast AgentiX prebuilt, governed agents that act with Splunk's do-it-yourself agent tooling, and note another Splunk patch cycle Oct 21.

Competitor. Splunk

Palo Alto product. XSIAM with AgentiX and Cortex MCP; Cortex XCOR vs Splunk Observability

How Palo Alto wins. AgentiX ships prebuilt, governed agents that take action; Cortex MCP covers bring-your-own-LLM.

Business outcome. Faster time to value than build-your-own agent projects.

Technical outcome. Prebuilt agents that act, not just MCP access to search.

Unit 42 · Oct 14, 2026Added Oct 14

Unit 42 NOVA finds 14,000+ open-source zero-days

Unit 42 NOVA finds 14,000+ open-source zero-days with frontier AI.

Unit 42 · Oct 14, 2026Added Oct 14

Unit 42 reports Web3 blockchain C2 in cloud supply-chain attacks

Unit 42: Web3 blockchain C2 used in cloud supply-chain attacks.