The useful question is what changes for users, developers or buyers, and whether the announcement stays industry context or becomes something people can actually use.

Palo Alto Networks is monitoring the Russia-Ukraine crisis and preparing for potential cyberattacks that could extend beyond Ukraine. The company will update a resource center with threat intelligence, research, and best practices to help customers mitigate risks. Organizations are advised to apply all available software patches, particularly for internet-facing systems like webmail and VPNs, to reduce exposure to vulnerabilities that may be exploited. The company emphasizes that attacks could involve ransomware or destructive malware disguised as ransomware, such as WhisperGate, and recommends designating incident response contacts and running scans for early threat detection.

The company highlights recent attacks using ransomware or destructive malware, including WhisperGate, which targets critical infrastructure. Palo Alto Networks offers proactive assessments, such as Ransomware Readiness Assessments, to identify weaknesses in response plans and ongoing indicators of compromise. Incident Response services from Unit 42 are available to investigate and remediate threats for organizations of any size, with urgent contact options provided for affected entities.

Palo Alto Networks has reinforced its product portfolio to address emerging threats. Threat Prevention now covers the OctoberCMS vulnerability CVE-2021-32648, exploited in WhisperGate attacks. WildFire has improved detection of WhisperGate and other malware families like HermeticWiper, while Advanced URL Filtering blocks new malicious domains and URLs. Cortex XDR has updated defenses to block newly discovered malware, including HermeticWiper, across cloud, networks, endpoints, and critical infrastructure.

Cortex Xpanse provides automated Attack Surface Management to inventory and secure internet-facing assets. Prisma Cloud CWP identifies outdated packages and known exploited vulnerabilities, while Prisma Cloud WAAS blocks OWASP Top 10 attacks and leverages virtual patching. Prisma Cloud CSPM detects indicators of compromise and prioritizes critical web-facing vulnerabilities using True Network Exposure. Customers can contact Unit 42 for assistance via regional hotlines or by submitting a form for further support.