10-28-2025 11:59 AM - edited 10-28-2025 12:58 PM
Welcome to the CDSS Monthly Newsletter
The Cloud-Delivered Security Services (CDSS) Monthly Newsletter brings you the latest updates, insights, and innovations from Palo Alto Networks’ cloud-powered security platform. Each month, we spotlight key product releases, upcoming events, technical tips, and best practices across our Advanced Core Subscriptions — Advanced Threat Prevention, Advanced WildFire, Advanced URL Filtering, Advanced DNS Security, and Device Security.
Our goal is to help you stay informed, connected, and empowered to get the most from your CDSS investments. Whether you’re a customer, partner, or security practitioner, the newsletter keeps you up to date on how Palo Alto Networks continues to deliver industry-leading threat prevention, AI-driven detection, and unified protection across networks, users, and devices.
Together, we’re shaping the future of cloud-delivered security, one step at a time.
What’s New In CDSS
New Precision AI Pro Bundle
We are officially announcing the End-of-Sale for the legacy Precision AI Network Security Bundle SKUs (PAN-PA-XXXX-BND-CORESEC), formerly known as the Precision AI Network Security Bundle, effective December 31, 2025, for Commercial and March 31, 2026, for Public Sector. Active contracts will remain in effect until the end of their term. The new Precision AI Pro Bundle now includes Device Security, delivering unified protection for managed and unmanaged devices across your network. This enhancement strengthens visibility, compliance, and risk management, ensuring every device connecting to your environment is secure.
Enterprise Secure Access (ESA) with Strata Cloud Manager Pro (SCM Pro)
We have announced the End-of-Sale of the current Enterprise Support Agreement (ESA) for all commercial customers, effective November 1, 2025. This transition introduces the new Enterprise Support Agreement Pro (ESA Pro), which now includes Strata Cloud Manager (SCM) to provide unified visibility, proactive health monitoring, and simplified troubleshooting. Existing ESA customers will not be automatically migrated to ESA Pro, but can continue accessing SCM Pro through the ELA add-on. Public Sector GOV ESA SKUs and ESA add-on SKUs remain unaffected by this change.
Threat Intelligence & Insights
Our recent Unit 42 research revealed that code assistants powered by large language models (LLMs) can be manipulated through malicious URLs, prompt injections, and compromised web content, leading to unsafe or hidden code suggestions. These findings highlight the importance of securing every web interaction developers make. Advanced URL Filtering (AURL) helps mitigate this risk by detecting and blocking malicious or manipulated URLs in real time—preventing these threats from ever reaching users or integrated AI systems.
Read more from Unit 42’s latest research here
Critical Threat Alerts
"Shai-Hulud" Worm and the NPM Supply Chain Attack
Palo Alto Networks investigated a widespread and active software supply chain attack targeting the Node Package Manager (npm) ecosystem via a novel, self-replicating worm dubbed "Shai-Hulud." This attack represents a significant escalation in supply chain threats, combining credential theft with automated propagation.
The Shai-Hulud attack is a multi-stage, self-propagating NPM supply chain worm that begins with credential theft via phishing. The worm then publishes poisoned package versions with an obfuscated payload that aggressively harvests sensitive data, including cloud credentials, using tools like TruffleHog. It exfiltrates secrets by committing them publicly to a "Shai-Hulud" GitHub repository. It automatically achieves exponential growth by using the victim's stolen NPM token to infect and republish all their other maintained packages.
Detection by CDSS subs:
VT analysis of IOCs listed in the unit42 blog shows the earliest appearance of the attack was 9/15/2025. Timeline of detections by CDSS is given below:
Latest Product Updates Across CDSS Core Subscriptions
Advanced URL Filtering
Advanced DNS Security
Advanced Threat Prevention
Advanced Wildfire
Device Security
Tips & Best Practices
“Adopt a layered defense approach to stay ahead of attackers.”
Modern threats rarely rely on a single tactic. Attackers use multi-stage techniques like phishing, credential theft, lateral movement, and data exfiltration. Relying solely on one tool or signature-based detection isn’t enough today. Implementing defense in-depth, combining threat prevention, advanced analytics, and continuous monitoring across endpoints, networks, and the cloud, ensures that if one layer is bypassed, the others still protect you.
Best Practice: Integrate solutions that share intelligence and work together across the attack surface. Palo Alto Networks' core Cloud Delivered Security Services, including Advanced Threat Prevention, Advanced WildFire, Advanced URL Filtering, and Advanced DNS Security, work in unison to detect and block malicious activity in real time. Together, they provide unified visibility, coordinated protection, and faster response to today’s most advanced and evasive threats.
Did You Know? Threat Facts & Insights
In 2025, the projected annual global cost of ransomware damage is estimated to reach $57 billion, which is roughly $156 million per day or $2,400 every second.
Upcoming Events In CDSS
Ignite on Tour – One Day. Big Impact.
Join us for an exclusive one-day event designed for cybersecurity leaders, practitioners, and influencers. Dive into the future of defense as we uncover how AI-driven strategies, threat intelligence, and platform-driven security are reshaping the cyber landscape. With keynote insights, breakout sessions, and peer networking, you’ll leave empowered to build resilience and stop tomorrow’s threats today. Register now for the virtual event.
FUEL Spark Event: Inside the Threat Landscape (A Cybersecurity Roundtable)
Join us for an exclusive in-person FUEL User Group event in Dallas. Hear from cybersecurity experts as they break down the latest threat trends, share what attackers are doing today and discuss practical ways to strengthen your defenses. This interactive roundtable is a great opportunity to network with peers and gain actionable insights for your security strategy.
Sign up here.
Explore More Cloud-Delivered Security Services Resources
Stay Protected with Cloud-Delivered Security Services
Palo Alto Networks Cloud-Delivered Security Services (CDSS) provides comprehensive protection for the modern threat landscape. Powered by Precision AI and industry-leading threat intelligence, CDSS secures your users, devices, and data wherever they connect—detecting and stopping advanced threats before they can cause harm.
For more information about CDSS, contact your Palo Alto Networks representative to learn how our solutions protect you from today’s most sophisticated threats and emerging attacks.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
