Strategic PartnersIssue 092 records
Palo Alto Networks
No Palo Alto Networks blog, press release or security advisory dated Nov. 7 appeared after the published Nov. 6 edition. Two Nov. 6 items that were not yet archived are newly filed. Computer Weekly interviewed CIO Meerah Rajavel, who said two-thirds of the vulnerabilities Palo Alto has uncovered with frontier AI models had never been disclosed as CVEs and that attack-path chaining, not merely finding bugs, was the larger surprise from Project Glasswing access to Claude Mythos Preview; she also described Prisma AIRS artefact checks, LLM gateways and MCP proxies, while warning that AI security fails if the zero-trust and endpoint base layer is weak. Separately, Unit 42 used Cortex Xpanse on Nov. 5–6 to identify over 5,000 internet-exposed devices from manufacturers listed in a CERT-FR advisory after European supermarket refrigeration attacks (about 700 French stores on Oct. 11–12 and 100–115 locations across at least 10 additional countries on Nov. 1–2) and medical-facility impact without evidence of spoiled blood products. A companion Nov. 5 CISA/FBI/HHS/USDA/DOT fact sheet was inspected as context but is not a Palo Alto evaluation. Unconfirmed Clutch and Beacon talks had no confirmation, and no new independent Prisma AIRS or Cortex benchmark appeared.
- Evidence records
- 2
- Cross-source patterns
- 1
- Evidence classes
- 1 independent reporting1 vendor claim
- Outcomes
- 1 mixed1 cautionary
- Source freshness
- 2 new this fortnight
- Research completed
- 2026-11-08
Choose a role to see its takeaway beside every record in the ledger.
Patterns across the evidence
Synthesis · Lighthouse Advisory interpretation
Nov. 6 vendor interview and Unit 42 research both argue defenders cannot rely on known-CVE patching alone
Computer Weekly reports CIO Meerah Rajavel saying two-thirds of vulnerabilities Palo Alto found with frontier AI had no CVE and that some business-critical systems cannot take rolling updates, making virtual patching and attack-surface visibility necessary. The same day's Unit 42 post measures over 5,000 internet-exposed refrigeration-related devices and recommends Frontier Virtual Patching plus exposure discovery after attacks that abused unpatched or weakly configured controllers. Interpretation: both items point to compensating network and exposure controls for systems that will not be patched quickly, without independently proving those controls would have stopped the cited attacks.
Operating questionHow will the organization find exposures that have no CVE and virtually shield internet-reachable or unpatchable systems before an attacker changes them?
Supporting evidenceComputer Weekly / Informa TechTarget (interview with Palo Alto Networks CIO Meerah Rajavel)Palo Alto Networks Unit 42
Evidence ledger
Full record · every source keeps its link and limitations
Computer Weekly: Palo Alto Networks CIO says two-thirds of flaws found with frontier AI had no CVE and that attack-path chaining is the bigger surprise
On Nov. 6, 2026 Computer Weekly published an interview with Palo Alto Networks CIO Meerah Rajavel, conducted on the sidelines of Singapore International Cyber Week the previous month. Rajavel said two-thirds of the vulnerabilities Palo Alto has uncovered using frontier AI models had never been disclosed as CVEs, so organisations can no longer simply prioritise which known flaws to patch first. She said Palo Alto was a launch partner of Anthropic's Project Glasswing, which provided access to the unreleased Claude Mythos Preview model, and that 'the thing that shocked us was how good it was in devising attack paths' by chaining vulnerabilities. She said the company has seen a threefold rise in attackers launching AI-enabled or autonomous attacks in the past few months; cited a Unit 42 investigation in which an attacker used AI agents to string together over 50 techniques and breach a complex enterprise network in under 10 hours; and cited Unit 42's 2026 Global incident response report that the fastest cases needed only 72 minutes from first access to data exfiltration. She argued some business-critical or older systems cannot take rolling updates, making virtual patching, zero trust and attack-surface management necessary; described Prisma AIRS (spelled 'Prisma Airs' in the article) as checking agent artefacts for goal tampering and conducting continuous red teaming; and said Palo Alto routes LLM interactions through a gateway and uses MCP proxies so agents do not connect to MCP servers directly. She warned that 'AI security is sitting on top of the base layer' of zero trust and endpoint security. She said Singapore's Cyber Security Agency has written to boards of critical information infrastructure owners urging them to review defences in light of frontier AI — a statement the article does not independently document.
Why it matters, evidence and limitations
- Why it matters
- Rajavel explicitly frames the problem for critical-infrastructure operators (automatic containment with a human fixing the root cause) and notes a Singapore government board-level push on frontier AI, which is transferable as an international signal rather than a U.S. mandate. Interpretation: state, local, public-health and higher-education teams that cannot patch legacy or safety-critical systems quickly, and that are connecting coding or operations agents to MCP servers, can use this interview as a discovery prompt for unpatchable assets, AI inventories and gateway controls. The two-thirds, threefold and 72-minute figures are vendor-attributed and should not be treated as SLED-measured outcomes. Transferability limits: the interview is global/APAC commentary, not a U.S. agency evaluation of Prisma AIRS.
- Evidence and measured results
- Opened the full Computer Weekly article dated 6 Nov 2026 1:45. Recorded attributed claims, product descriptions, the Glasswing/Mythos context, the Unit 42 case and report citations, virtual-patching and MCP-proxy guidance, the base-layer caution, and the CSA Singapore statement. No methods table or independent dataset is provided.
- Limitations and uncertainty
- Independent reporting of vendor claims, not an audit. Quantitative figures are unsourced beyond attribution to Rajavel or Unit 42. Interview date is 'last month' (October 2026) at SICW; publication date is Nov. 6. Prisma product name is informal in the article. CSA board letter is not linked. No SLED customer results.
Unit 42: Cortex Xpanse found over 5,000 internet-exposed refrigeration-related devices on Nov. 5–6 after European supermarket and medical-facility attacks
On Nov. 6, 2026 Unit 42 published an overview of cyberattacks that set European refrigeration controllers to defrost mode, causing hundreds of supermarkets to discard spoiled food. The first wave, overnight Oct. 11–12, 2026, primarily targeted approximately 700 supermarkets in France. A second wave, overnight Nov. 1–2, 2026, expanded across at least 10 additional countries and affected over 100–115 retail locations. French authorities disclosed that refrigeration systems used by medical facilities were impacted; Unit 42 says there is no evidence blood products were spoiled. Public reporting cited temperatures as high as 50°C (122°F) and fires in some cases. Initial access remains unconfirmed, with speculation about vulnerable software and manufacturer default credentials. Using Cortex Xpanse from Nov. 5–6, 2026, Unit 42 identified over 5,000 internet-exposed devices manufactured by companies listed in a CERT-FR advisory the previous month, and explicitly warned that those counts do not mean the devices ran exploitable software. France-exposed device counts declined from 1,853 (Oct. 1–15) to 558 (Oct. 16–31) to 316 (Nov. 1–6). Nov. 3 Telegram claims of responsibility by NoName057(16) and Z-Pentest are unverified. Unit 42 cites a Nov. 5 CISA advisory warning of authentication bypass, arbitrary code injection and weak configurations. The post then recommends Cortex Xpanse, Device Security, Frontier Virtual Patching with Advanced Threat Prevention, and Unit 42 Continuous Frontier AI Defense, among other paid services. No evidence is offered that these products prevented the European incidents.
Why it matters, evidence and limitations
- Why it matters
- U.S. SLED operators of school-nutrition warehouses, public-hospital and public-health vaccine or blood storage, correctional kitchens and municipal emergency food stocks use the same class of industrial refrigeration and cold-chain monitors. Interpretation: the transferable lesson is internet exposure of controller panels and weak credentials, not a claim that Palo Alto tooling was present in the European incidents. The opened CISA/FBI/HHS/USDA/DOT Nov. 5 fact sheet, cited in summary by Unit 42, independently urges U.S. owners to remove public internet exposure and to protect necessary remote access with a firewall or edge device. Transferability limits: the attacks and Xpanse snapshots are European; manufacturer lists come from CERT-FR; U.S. agencies issued companion guidance rather than confirming identical U.S. victims in this Unit 42 text.
- Evidence and measured results
- Opened the full Unit 42 article, including the attack timeline, medical-facility caveat, Xpanse country snapshot and France trend figures, unverified attribution, CISA citation and product-recommendation section. Independently opened the Nov. 5 CISA fact sheet and a Nov. 6 Help Net Security report to verify that a U.S. joint advisory exists; those pages are not the basis of this resource's Xpanse numbers.
- Limitations and uncertainty
- Vendor research plus public reporting. Xpanse figures count manufacturer-listed internet-exposed devices, not confirmed vulnerable or compromised systems. Root cause unconfirmed. Hacktivist attribution unverified. Product section is marketing. France exposure decline is not attributed to Palo Alto customers. Medical impact is stated without evidence of spoiled blood products; more specific EFS figures from other outlets were not used here.
How to read this edition
Source findings, measured results and limitations come from the cited publications. Patterns, operating questions, role takeaways and implementation considerations are Lighthouse Advisory interpretation, stated as questions to validate locally rather than guaranteed outcomes. Vendor and operator claims are labeled as claims. Full research method.
- Independent reporting
- Independent reporting with attributable sources but without a formal evaluation design.
- Vendor claim
- A supplier-provided assertion that has not been upgraded to independent evidence.