Redefining Network Security for the Frontier AI Era

Palo Alto Networks has released PAN-OS 12.2 Ceres, a major update addressing three critical security challenges: AI-driven threats that bypass traditional defenses, rapidly increasing network traffic from AI workloads, and the need for a cryptographic reset due to shorter certificate lifecycles and quantum computing risks. The update includes over 55 innovations designed to shift the balance in favor of defenders against evolving attack methods. Among these, Advanced Virtual Patching uses Frontier AI to identify undisclosed vulnerabilities and deploy protections within hours, reducing exposure windows from an industry average of 55 days to near zero. The capability operates as a collaborative ecosystem, integrating with industry partners and vulnerability clearinghouses to accelerate threat remediation across enterprise and operational technology environments. This approach builds on Unit 42 research, which demonstrated AI’s ability to uncover thousands of unknown vulnerabilities in a short period, underscoring the need for rapid, coordinated protection measures.

To counter evasive attack techniques, Palo Alto Networks introduces Advanced IP Defense, a new solution with three capabilities aimed at preventing direct-to-IP attacks that bypass traditional perimeter defenses. These attacks often leverage proxy networks and residential IP addresses to conduct stealthy scanning and exploitation. The solution enhances detection and prevention by addressing gaps left by conventional IP reputation and blocklist methods, ensuring threats are intercepted before reaching internal networks. The update reflects the urgency of adapting defenses to match the speed and sophistication of modern adversaries, who increasingly weaponize AI to reduce attack lifecycles from months to minutes.

Palo Alto Networks is also launching six specialized AI-powered Network Security Agents through Strata Cloud Manager, designed to automate routine administrative tasks such as onboarding, configuration, threat assessment, and troubleshooting. These agents operate at machine speed, reducing human bottlenecks in threat response and allowing administrators to choose their level of oversight—human-in-the-loop, human-on-the-loop, or human-out-of-the-loop—for each workflow. The automation aims to alleviate operational fatigue while maintaining control over critical security decisions, enabling organizations to scale defenses in line with the velocity of AI-driven threats.

The PAN-OS 12.2 Ceres release expands the platform across five additional areas, including enhanced protections for data center cores, remote industrial sites, custom AI applications, and web browsers. The update emphasizes a prevention-first architecture, enabling organizations to stop threats before they escalate into weaponized attacks. Palo Alto Networks positions the release as a strategic response to the Frontier AI era, providing defenders with the speed, scale, and platform foundation needed to counter modern adversaries. Customers can access Advanced Virtual Patching and other innovations through a PAN-OS software upgrade, with persistent, automatic content updates to ensure continuous protection against emerging threats.