Tag

Palo Alto Networks

4 stories

Palo Alto Networks could pay $500 million for Clutch Security

Palo Alto Networks is in talks to acquire Clutch Security, a startup that secures AI agents’ access to company systems, for $500 million in cash plus additional milestone-based payouts. The discussion involves a three-year-old company that was last valued at $85 million after a $20 million Series A round in January 2025. Acquisition terms and valuation Clutch is currently approaching $10 million in annual recurring revenue, or ARR. If the…

Saugata DattaNov 6, 20262 min read29

Azure

Guardz and Palo Alto add Prisma Browser protection for small businesses

Guardz has integrated Prisma Browser for Business from Palo Alto Networks into its Agentic Workspace Security platform for managed service providers. The update links browser protection with email, identity, endpoint, data and user risk so small businesses can investigate and respond to threats across the workspace.Browser defense now covers phishing links, malware checks and browser-based AI useGuardz protects browser activity alongside email, identity and endpoint signals. A phishing email can…

Saugata DattaNov 3, 20262 min read94

Cybersecurity

Critical Brotli Flaw Hits PAN-OS Firewalls — Palo Alto Issues Workarounds and Hotfix Timeline

Palo Alto Networks has confirmed a serious vulnerability in the Brotli compression decoder that affects certain PAN-OS firewall deployments and the Prisma Cloud Application Security Transporter Client. Tracked as CVE-2026-111497 with a CVSS score of 9.2, the flaw can lead to out-of-bounds memory writes that may allow attackers to corrupt memory, expose sensitive data, crash services, or — in some circumstances — execute code without authentication. Palo Alto’s advisory, published…

Saugata DattaOct 27, 20263 min read154

Cybersecurity

Palo Alto GlobalProtect CVE-2026-0257: Active Exploitation and Urgent Steps for Defenders

Palo Alto Networks has warned that a recently patched authentication bypass in PAN-OS GlobalProtect, tracked as CVE-2026-0257, is now being actively exploited in the wild. The vulnerability allows attackers to bypass authentication controls and establish unauthorized VPN connections when devices are configured with specific authentication override cookie and certificate settings. Organizations running GlobalProtect should treat this as urgent: apply vendor patches, review configurations, and hunt for signs of exploitation immediately.…

Saugata DattaMay 31, 20264 min read332