Introducing Unit 42 Threat Intelligence: Know What Matters, Understand the Adversary, and Act Faster
Palo Alto Networks’ Unit 42 launches new threat intelligence services to help security teams prioritize relevant threats and respond faster by embedding frontline research into operational workflows.
Security teams face an overwhelming volume of threat data, much of which lacks relevance to their specific environments. Traditional models that rely on collecting more feeds and indicators often create additional work without improving defense. Adversaries now move faster, with Unit 42 observing attacks accelerating fourfold over the past year, leaving defenders with less time to respond. The new Unit 42 Threat Intelligence aims to address this gap by focusing on threats that directly impact an organization’s industry, technology stack, and observed attack patterns.
The offering includes two components: Cortex eXtended Threat Intelligence (Cortex XTI) and Unit 42 Threat Intel Services. Cortex XTI integrates Unit 42’s proprietary research into the Cortex platform, providing contextual threat intelligence tailored to each customer’s environment. This allows analysts to quickly identify relevant adversaries, campaigns, and exposures within their existing security operations workflows. The embedded intelligence supports faster transitions from awareness to prevention, detection, and response, reducing manual effort and improving efficiency.
Unit 42 Threat Intel Services provide direct access to Unit 42’s frontline analysts, who track active threat campaigns and real-world incidents. Customers receive tailored intelligence, proprietary research, and expert guidance based on current adversary activity, rather than generic automated signals. This human-in-the-loop approach ensures that intelligence is grounded in real attacks and actionable insights, helping organizations strengthen their defenses against targeted threats.
The new services leverage Palo Alto Networks’ visibility across over 70,000 customers, analyzing billions of daily events to identify nearly 9 million novel threats. However, the company emphasizes that scale alone does not constitute intelligence; the value lies in connecting global threat data to each customer’s specific environment. By highlighting which threats matter, why they matter, and what actions to take, Unit 42 Threat Intelligence aims to shift the focus from data collection to actionable defense.