[REVISION HISTORY]

Cybersecurity industry AI defense and vulnerability trends

Updated 19 times since CLSTR started tracking revisions of this situation.

What changed

2026-10-21 06:07 UTC → 2026-10-22 16:13 UTC · added ~~removed~~

Cybersecurity firms are expanding capabilities to address threats posed by artificial intelligence. Fortinet has acquired Virtue AI to integrate runtime protection into its FortiAIGate platform, bolstering its ‘Security for AI’ strategy to protect against risks like prompt injection and model poisoning. Palo Alto Networks has pursued an aggressive acquisition strategy and launched the Frontier AI Critical Defense Program to protect critical infrastructure. This program utilizes proactive ‘virtual patches’ at the network layer to neutralize vulnerabilities, bridging the gap between rapid AI-accelerated attacks and traditional software patching cycles. Palo Alto Networks has also entered a multi-year global alliance with NTT DATA, targeting $1 billion in joint business by 2029. To further its AI-driven security, the company recently acquired Console, an AI-native platform specializing in IT service management and automation. This acquisition, valued at approximately $500 million, aims to enhance the agentic AI capabilities of the Cortex platform, enabling a “software-as-an-agent” model where security teams use natural language to automate remediation and investigate alerts. To counter attackers who have reduced attack cycles by nearly 97 percent, Palo Alto Networks’ Unit 42 launched Continuous Frontier AI Defense. This subscription service uses a multi-model approach—combining frontier models like Anthropic’s Claude Mythos 5 and OpenAI’s GPT-5. 6-Cyber with open-weight models—to simulate attacker behavior and provide prioritized remediation. The increasing complexity of AI-driven attacks has become a major tailwind for the sector, driving significant stock growth for both Palo Alto Networks and Fortinet. However, the industry faces immediate technical risks. Palo Alto Networks recently disclosed a high-severity zero-day vulnerability (CVE-2026-0322) in its PAN-OS firewall software. The code injection flaw allows authenticated attackers to execute arbitrary code with root privileges. The US Cybersecurity and Infrastructure Security Agency (CISA) has added the flaw to its Known Exploited Vulnerabilities catalog, noting evidence of active exploitation. ~~Additionally, Fortinet is facing active exploitation of CVE-2025-61624, a path-traversal vulnerability affecting several FortiOS-related products.~~

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.