* [Blog](https://www2.paloaltonetworks.com/blog) * [Cloud Security](https://www2.paloaltonetworks.com/blog/cloud-security/) * [AI-SPM](https://www2.paloaltonetworks.com/blog/cloud-security/category/ai-spm/) * Why Are Software Supply C... # Why Are Software Supply Chains Under Constant Siege? [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2Fcloud-security%2Fsoftware-supply-chain-security-ai-risks-attacks-defense%2F) [](https://twitter.com/share?text=Why+Are+Software+Supply+Chains+Under+Constant+Siege%3F&url=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2Fcloud-security%2Fsoftware-supply-chain-security-ai-risks-attacks-defense%2F) [](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2Fcloud-security%2Fsoftware-supply-chain-security-ai-risks-attacks-defense%2F&title=Why+Are+Software+Supply+Chains+Under+Constant+Siege%3F&summary=&source=) [](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www2.paloaltonetworks.com/blog/cloud-security/software-supply-chain-security-ai-risks-attacks-defense/&ts=markdown) \[\](mailto:?subject=Why Are Software Supply Chains Under Constant Siege?) Link copied By [Cameron Hyde](https://www.paloaltonetworks.com/blog/author/cameron-hyde/?ts=markdown "Posts by Cameron Hyde") May 26, 2026 10 minutes [AI-SPM](https://www.paloaltonetworks.com/blog/cloud-security/category/ai-spm/?ts=markdown) [Application Security](https://www.paloaltonetworks.com/blog/cloud-security/category/application-security/?ts=markdown) [AppSec](https://www.paloaltonetworks.com/blog/cloud-security/category/appsec/?ts=markdown) [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown) [Software Supply Chain Security](https://www.paloaltonetworks.com/blog/cloud-security/category/software-supply-chain-security/?ts=markdown) Supply chain attacks are no longer rare events. They have become a persistent feature of modern software development. From malicious npm packages designed to steal credentials to poisoned updates shipped through trusted tools, recent incidents show how quickly a single compromised package can ripple across ecosystems. A more important question now emerges: Why are supply chain attacks increasingly happening? ## When Software Supply Chains Became the Attack Surface SolarWinds cyberattack forced the industry to confront an uncomfortable reality. Organizations could secure their own environments and still be compromised through a trusted vendor. A signed software update became the delivery mechanism, and trust itself became the vulnerability. At that moment, the software supply chain stopped being a dependency problem and became part of the attack surface. Then came Log4Shell, which exposed the scale of modern dependency risk. A single open-source library triggered a global operational crisis, disrupted production environments, and revealed how deeply embedded open-source components had become inside modern applications. Repeated attacks across npm and other package ecosystems have reinforced the same pattern ever since. Malicious packages, compromised maintainers and credential-based takeovers are no longer exceptional events. Open-source ecosystems have evolved from passive infrastructure into active targets. Together, these incidents changed how attacks operate. Malicious package publishing has become systematic. Typosquatting, dependency confusion and namespace abuse now function as reliable distribution mechanisms for malware. Maintainer compromise has become a repeatable entry point, with phishing campaigns and incidents like the XZ Utils backdoor bypassing review processes by hijacking trusted distribution paths. CI/CD pipelines have also become high-value targets. Once attackers compromise a build process, the risk rarely stays contained. Malicious code propagates downstream across every connected environment. Most importantly, trust no longer functions as a dependable security control. Verified publishers, popular packages and long-established projects have all been abused. Software supply chains are no longer just an attack vector. They're foundational infrastructure for modern intrusion campaigns. Then frontier AI entered the picture. ## Frontier AI Is Reshaping Both Sides of the Attack Surface ### AI Expands the Software Supply Chain and Introduces New Risks AI didn't just speed up development. It expanded what is considered part of the software supply chain. Modern software supply chains now include AI code assistants, models, prompts, retrieval pipelines, MCP servers and external tools. These systems no longer sit outside the production path as passive productivity layers. They shape how software gets written, assembled and deployed. Any system that generates code, selects dependencies, or interacts with repositories now creates a trust boundary security teams must govern. AI-generated code shows the risk clearly. Models learn from large volumes of public code, which means they can reproduce secure and insecure patterns without understanding the difference. They don't know an organization's architecture, security requirements or threat model. As a result, they can introduce insecure defaults, from weak authentication to unsafe deserialization and poor cryptographic choices. Dependency risk adds another layer. AI assistants often recommend open-source packages to quickly move work forward, favoring convenience and popularity over security. Those packages can introduce deep transitive dependency chains that teams can't fully validate in real time. Some are outdated or vulnerable. Others lack reliable maintenance. In some cases, models suggest packages that don't exist, creating an opening for slopsquatting when attackers register those names and publish malicious code. Risk also extends beyond code generation. AI systems now interact with repositories, CI/CD pipelines, ticketing systems and external services across the development lifecycle. Prompts, plugins and integrations can all become entry points. If one is compromised, the impact can move through pipelines and into production. At the same time, AI increases development velocity. Teams ship more code more often, with less time for review. Dependency graphs grow deeper as validation windows shrink. The result is a larger, faster-moving supply chain where the same systems designed to accelerate development can continuously introduce risk. ### Attackers Now Operate at Machine Speed Everything AI gives developers, it also gives attackers. Attackers, however, don't face governance requirements, approval cycles or internal friction. They can leverage frontier models immediately, which gives them a structural speed advantage. Frontier systems such as Claude Mythos already show where attacks are headed --- vulnerability discovery, exploit generation, and multistep attack chaining with minimal human input. Attacks no longer need to unfold as discrete, human-led actions. They can become iterative processes that keep testing, refining and advancing until a path succeeds. Three shifts define the impact: * **Vulnerability discovery becomes continuous:** AI systems can scan codebases, dependencies and exposed services in parallel, turning periodic analysis into always-on discovery. * **Exploitation becomes adaptive:** Models can refine payloads based on feedback, retry failed attempts, and chain vulnerabilities without predefined exploit logic. * **Attacks become autonomous:** Agentic systems can persist, pivot and expand access across environments without human direction, continuing until they exhaust available paths. In the end, human-orchestrated campaigns become machine-driven attack processes that run continuously and at scale. Security teams still operate in discrete cycles --- find, patch, move on. The model assumes attackers operate the same way, but they don't. ## What Breaks and Why Supply chain attacks exploit the systems and relationships software organizations trust most. Open-source dependencies often become the first point of compromise because they're easy to publish, broadly trusted, and automatically pulled into builds and environments. A single malicious package or update can spread quickly without targeting victims directly. CI/CD pipelines and build systems are high-value targets because they determine how software gets built and released. Attackers compromise build-time tools and pipeline dependencies to inject malicious code into otherwise legitimate software artifacts before release. Maintainers and publishing accounts remain frequent targets because they sit at the source of trusted software distribution. Once compromised, attackers can push signed or seemingly legitimate updates that bypass many downstream security controls. Secrets and credentials become critical once attackers gain execution access. Tokens, API keys and service credentials often provide the fastest path into broader systems, environments and automation workflows. Developer environments also create common entry points because they contain source code, credentials and local build context, yet often lack the hardening and monitoring applied to production infrastructure. Attackers prioritize the places where trust is easiest to obtain, reuse, and scale. Once they have it, they use that trust to move across systems. ## What to Do When the Next Supply Chain Attack Hits Supply chain attacks don't give advance warning. By the time teams confirm one, exposure has usually spread across dependencies, pipelines and environments. The immediate priority is to stop further propagation and regain control over what gets built, trusted and shipped. Most incidents fall into one of three patterns: a newly disclosed open-source vulnerability, a malicious package introduced into a dependency chain, or the compromise of a trusted tool or maintainer. The response model stays largely consistent across all three: identify exposure, contain spread, remove the source of risk, and harden the path it used. ### When a New Open-Source Vulnerability Is Disclosed * Run an SCA scan to identify every instance of the affected package, including transitive dependencies across services, pipelines and artifacts. * Apply temporary mitigations, such as WAF rules, when immediate upgrades aren't possible. * Upgrade all occurrences to the fixed version across manifests and lockfiles. * Rebuild and redeploy affected artifacts to ensure clean dependency resolution. * Review logs for exploitation attempts during the exposure window. * Rotate credentials if there's any indication of compromise. ### When a Malicious Package Is Introduced into a Dependency Chain * Check whether the malicious package appears in any manifest, artifact or lockfile, including files such as package.json, requirements.txt or pom.xml. * Remove the package and perform a clean install from a trusted lockfile. * Rotate secrets, tokens and API keys accessible from affected CI/CD systems and developer machines. * Scan developer workstations for persistence artifacts in common system and application directories. * Enforce lockfile integrity in CI pipelines. * Disable install-time scripts where applicable. * Review CI/CD logs for unexpected outbound network activity during the exposure window. ### When a Trusted Tool or Maintainer Is Compromised * Verify whether the affected tool appears in a known-safe version across all environments. * Remove or downgrade compromised versions immediately. * Pin GitHub Actions to immutable references, such as commit hashes, instead of mutable version tags. * Rotate secrets, tokens and credentials accessible from affected CI/CD systems and developer environments. * Search developer machines for persistence artifacts in system and application storage locations. * Rebuild container images created in pipelines that used the compromised tool. * Audit CI/CD pipeline logs for unexpected commands, network connections or file access during the exposure window. ## How to Safeguard Your Software Supply Chain The attack surface is interconnected. The defense has to be as well. ### Protect Your Runtime Insecure code will reach production, whether it comes from a vulnerability in the backlog or a newly disclosed zero-day. When attackers target those gaps, teams need to detect and respond to malicious activity in real time. Runtime protection limits exploitation across exposed applications, workloads and services. ### Prevent Insecure Code and Exposed Secrets from Reaching Production Most supply chain risk enters through dependencies, build inputs, and credentials. Open-source packages and transitive dependencies need continuous SCA analysis before they reach builds. Secrets also need continuous scanning across repositories, pipelines and developer environments because exposed credentials often provide the fastest path from initial access to broader compromise. ### Secure the Ecosystem That Writes, Builds and Ships Code Modern software development now depends on a connected ecosystem of IDEs, source control platforms, CI/CD pipelines, build systems, registries, developer identities and AI coding agents. Together, these systems determine what reaches production. If any part of the chain is compromised, trusted software can be modified before deployment. ### Use Agentic AI to Reduce Response Time Attackers already operate at a pace manual remediation can't match. Agentic systems can help identify exploitable exposure, prioritize what matters, and take corrective actions such as opening pull requests, rotating credentials or removing compromised dependencies. The goal is to shrink the window between exposure and remediation. ## Cortex Cloud Supply Chain Security Supply chain attacks don't stay in one layer of the stack, so neither can defense. Cortex^®^ Cloud brings what runs, what's built, and how software gets delivered together in a single data lake, helping teams understand and act on exposures before attackers exploit them. * **Gain complete visibility across the AI-powered software supply chain:** Every package, pipeline, CI/CD tool, identity, secret, AI coding agent and workload across the SDLC is mapped in a single view from code to cloud. * **Prioritize what's exploitable:** Focus on issues that are reachable and exposed in runtime, instead of treating all high-severity findings as equal risk. * **Remediate at scale:** Agentic workflows can block builds, rotate credentials, open pull requests and isolate workloads as soon as malicious or vulnerable activity is detected. ## Learn More Trust in software artifacts isn't binary. It depends on how they're built, what they rely on, and how they move through the supply chain. [Request a demo](https://start.paloaltonetworks.com/cortex-cloud-appsec-demo.html) to discover how Cortex Cloud can protect your software supply chain. *** ** * ** *** ## Related Blogs ### [AI Security](https://www.paloaltonetworks.com/blog/cloud-security/category/ai-security/?ts=markdown), [Application Security](https://www.paloaltonetworks.com/blog/cloud-security/category/application-security/?ts=markdown), [AppSec](https://www.paloaltonetworks.com/blog/cloud-security/category/appsec/?ts=markdown), [CIEM](https://www.paloaltonetworks.com/blog/cloud-security/category/ciem-2/?ts=markdown), [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [Identity Security](https://www.paloaltonetworks.com/blog/cloud-security/category/identity-security/?ts=markdown), [Supply Chain Security](https://www.paloaltonetworks.com/blog/cloud-security/category/supply-chain-security/?ts=markdown) [#### Introducing Cortex Cloud 2.1](https://www2.paloaltonetworks.com/blog/cloud-security/visibility-governance-automation/) ### [Application Security](https://www.paloaltonetworks.com/blog/cloud-security/category/application-security/?ts=markdown), [AppSec](https://www.paloaltonetworks.com/blog/cloud-security/category/appsec/?ts=markdown), [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [Supply Chain Security](https://www.paloaltonetworks.com/blog/cloud-security/category/supply-chain-security/?ts=markdown) [#### Bitwarden CLI Impersonation Attack Steals Cloud Credentials and Spreads Across npm Supply Chains](https://www2.paloaltonetworks.com/blog/cloud-security/bitwardencli-supply-chain-attack/) ### [Application Security](https://www.paloaltonetworks.com/blog/cloud-security/category/application-security/?ts=markdown), [AppSec](https://www.paloaltonetworks.com/blog/cloud-security/category/appsec/?ts=markdown), [ASPM](https://www.paloaltonetworks.com/blog/cloud-security/category/aspm/?ts=markdown), [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [DevSecOps](https://www.paloaltonetworks.com/blog/cloud-security/category/devsecops/?ts=markdown) [#### Level Up Your AppSec Team with an Agentic Workforce](https://www2.paloaltonetworks.com/blog/cloud-security/cloud-security-appsec-agent-aspm/) ### [Application Security](https://www.paloaltonetworks.com/blog/cloud-security/category/application-security/?ts=markdown), [AppSec](https://www.paloaltonetworks.com/blog/cloud-security/category/appsec/?ts=markdown), [ASPM](https://www.paloaltonetworks.com/blog/cloud-security/category/aspm/?ts=markdown), [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [Partners](https://www.paloaltonetworks.com/blog/cloud-security/category/partners/?ts=markdown) [#### Palo Alto Networks and Veracode: Unifying Application Security from Code to Cloud](https://www2.paloaltonetworks.com/blog/cloud-security/application-security-veracode-partnership/) ### [Application Security](https://www.paloaltonetworks.com/blog/cloud-security/category/application-security/?ts=markdown), [AppSec](https://www.paloaltonetworks.com/blog/cloud-security/category/appsec/?ts=markdown), [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [Partners](https://www.paloaltonetworks.com/blog/cloud-security/category/partners/?ts=markdown) [#### How Cortex Cloud and Semgrep Are Redefining AI-Driven Application Security](https://www2.paloaltonetworks.com/blog/cloud-security/application-security-semgrep-partnership/) ### [AI Security](https://www.paloaltonetworks.com/blog/cloud-security/category/ai-security/?ts=markdown), [AI-SPM](https://www.paloaltonetworks.com/blog/cloud-security/category/ai-spm/?ts=markdown), [CIEM](https://www.paloaltonetworks.com/blog/cloud-security/category/ciem-2/?ts=markdown), [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [Data Security](https://www.paloaltonetworks.com/blog/cloud-security/category/data-security/?ts=markdown), [DSPM](https://www.paloaltonetworks.com/blog/cloud-security/category/dspm/?ts=markdown) [#### Dissecting Shadow AI to Illuminate Hidden Footprints in Your Workloads](https://www2.paloaltonetworks.com/blog/cloud-security/shadow-ai-workloads/) ### Subscribe to Cloud Security Blogs! Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more. ![spinner](https://www2.paloaltonetworks.com/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up Please enter a valid email. By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder. This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. {#footer} {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language