Reports
AI-generated structured vendor updates
Active Exploitation of CVE-2026-0257: GlobalProtect VPN Authentication Bypass Threatens Enterprise Networks
Palo Alto Networks confirms active exploitation of CVE-2026-0257 in GlobalProtect VPN. Attackers exploit shared certificates between HTTPS and authentication override to forge cookies, impersonating admins. CISA added to KEV. Urgent upgrade or dedicated cookie encryption certificate recommended.
Palo Alto Acquires Portkey: The Battle for AI Agent Security Control Plane Begins
Palo Alto Networks acquires Portkey, an AI Gateway pioneer, integrating it into Prisma AIRS. Portkey provides a centralized control plane for managing and securing autonomous AI agents, processing trillions of tokens monthly. This signals a fundamental shift from perimeter defense to an AI transaction-level control plane.
Palo Alto GlobalProtect VPN 0-Day Under Active Exploit: Gateway RCE Exposes Remote Access Risks
A critical unauthenticated remote code execution vulnerability in Palo Alto Networks GlobalProtect VPN is under active exploitation. This flaw directly compromises the VPN gateway, a key enterprise remote access component, exposing networks to potential takeover. Urgent patching and log review are mandated for all affected organizations.
PANW Acquires IBM QRadar SaaS: SIEM Ecosystem Consolidates, Cortex Platform Locks In Enterprises
Palo Alto Networks acquires IBM's QRadar SaaS security operations assets, aiming to migrate customers to Cortex XSIAM. IBM Consulting will assist deployments, and PANW becomes IBM's internal security standard. The SIEM market now sees Splunk under Cisco, QRadar under PANW, squeezing independent vendors.
Palo Alto Networks Acquires IBM QRadar SaaS: Forcing SIEM Ecosystem Shift to AI-Native XSIAM
Palo Alto Networks acquires IBM QRadar SaaS assets to migrate legacy SIEM customers to its Cortex XSIAM AI-native security platform. IBM exits security products, pivoting to consulting and managed services. The move accelerates SIEM market consolidation, squeezing standalone SIEM vendors like SentinelOne and challenging CrowdStrike's differentiation.
Palo Alto Networks Idira: Democratizing Privilege Control, AI Agent Identity as New Control Plane
Palo Alto Networks launches Idira, an identity security platform built on CyberArk PAM, extending privileged access control to every human, machine, and AI agent identity. Core features include Zero Standing Privilege (ZSP), JIT permissions, and an AI engine for automatically discovering hidden entitlements and recommending least privilege. Idira becomes PANW's third core platform alongside Strata and Cortex.
CISA Agentic AI Security Deployment Guide: Government Framework Reshapes Enterprise AI Procurement Standards
...
In-depth Analysis of CISA Agentic AI Security Guidelines
CISA released the world's first Agentic AI security deployment guidelines on May 1, 2026, marking a critical transition from theoretical discussions to mandatory compliance requirements.
Palo Alto Cortex Cloud 2.0: AI Autonomous Security Workforce Leads Paradigm Shift
Palo Alto Networks released Cortex Cloud 2.0 featuring AI agent workforces AgentiX in cloud security operations. AI agents trained on 1.2 billion real-world responses autonomously investigate and resolve complex security issues reducing cloud risk remediation from days to minutes.
Palo Alto Cortex Cloud 2.0: AI Autonomous Security Workforce Leads Cloud Security Paradigm Shift
Palo Alto Networks released Cortex Cloud 2.0, featuring AI agent workforces (AgentiX) in cloud security operations. AI agents trained on 1.2 billion real-world responses autonomously investigate and resolve complex security issues, reducing cloud risk remediation from days to minutes. The redesigned Cloud Command Center unifies multi-cloud visualization, while the ASPM module shifts security remediation left to the development stage, 10x faster than production remediation.
Palo Alto Acquires Portkey: Capturing AI Agent Security Control Plane
The Portkey acquisition represents Palo Alto's latest move in 'platform consolidation' strategy. Unlike CrowdStrike's 'best-of-breed' approach, Palo Alto is continuously acquiring to complete its AI security capability matrix. Post-acquisition, Palo Alto will possess a complete platform covering network, cloud, endpoint, security operations, and AI security.
Palo Alto Deepens Google Cloud Partnership: $2.4B Deal to Co-Build AI Security
Palo Alto deepens Google Cloud partnership with $2.4B Marketplace bookings. Four integrations: Prisma AIRS protects Vertex AI and Agent Engine, VM-Series firewall deep integration, Prisma SASE coordination, Google Cloud Interconnect. Palo Alto signs new multi-year deal migrating internal workloads to Google Cloud. 99% of surveyed enterprises experienced AI infrastructure attacks.
Palo Alto Scaling AI Agents Framework: Enterprise AI Deployment Guide
Palo Alto releases Scaling AI Agents with Confidence framework providing security guidance for enterprise AI scale deployment. Framework addresses three major challenges: Shadow AI detection, non-human identity governance, security-speed tradeoffs. Provides three-layer architecture: integrated ecosystem + joint engineering + proven scale. Includes four-step security maturity path: discovery-evaluation, protection-monitoring, governance-optimization.
Palo Alto Scaling AI Agents Framework
Palo Alto releases Scaling AI Agents with Confidence framework for enterprise AI scale deployment security.
Palo Alto Deepens Google Cloud Partnership
Palo Alto deepens Google Cloud partnership with $2.4B Marketplace bookings.
Palo Alto Launches Unit 42 Frontier AI Defense: Three-Pillar Frontier AI Defense Solution
Palo Alto launches Unit 42 Frontier AI Defense powered by latest AI models. Three core components: 1) Frontier AI Exposure Analysis identifies most exploitable vulnerabilities; 2) Autonomous Security Blueprint defines modernization roadmap; 3) Agentic Defense Transformation implements security transformation. Includes 6 months free Cortex XDR, Xpanse, and Koi access.
Palo Alto Launches Frontier AI Alliance: Accenture, Deloitte, IBM, NTT DATA, PwC Unite Against AI Threats
Palo Alto launches Frontier AI Alliance with Accenture, Deloitte, IBM, NTT DATA, and PwC. Alliance addresses security threats from frontier models like Anthropic Mythos, providing pre-validated AI Defense Blueprint enabling enterprises to transition from high-risk to secure posture in weeks. Partners offer specialized prompting engineering and remediation capabilities.
Palo Alto Launches Frontier AI Alliance: Top Consulting Firms Unite Against AI Threats
Palo Alto launches Frontier AI Alliance with Accenture, Deloitte, IBM, NTT DATA, and PwC to address AI security threats.
Palo Alto Unit 42 Frontier AI Defense
Palo Alto launches Unit 42 Frontier AI Defense with three core components.
Palo Alto Networks Acquires Koi for AI Endpoint Security
Palo Alto acquires endpoint security startup Koi, focusing on Agentic AI development environment security. CEO calls it solving the ultimate insider threat of AI era.