What happened
Palo Alto Networks announced (Aug 20, 2026) 'Frontier Virtual Patching' as part of a new Advanced Threat Prevention Plus service in PAN-OS 12.2 Ceres, using its NOVA multi-agent vulnerability-discovery framework and Critical Defense Program disclosures to deliver pre-disclosure, vaulted network protections via Precision AI before official patches exist.
Why it matters
It directly targets the 'patch panic' created by AI-accelerated vulnerability discovery/exploitation (attackers weaponizing CVEs within 24 hours vs. 55-day average enterprise patch cycles), representing a major shift from reactive IPS to preemptive, AI-driven protection at machine speed.
Applicability
Enterprise network security teams and critical-infrastructure operators using Palo Alto NGFWs should evaluate Advanced Threat Prevention Plus and PAN-OS 12.2 upgrade paths now, especially for legacy/OT assets that cannot be patched quickly.