Cortex XDR Live Terminal Vulnerability Enables C2 Exploitation

Research has revealed that attackers can exploit the Cortex XDR Live Terminal feature from Palo Alto Networks to establish command-and-control (C2) communications. This feature operates within a trusted endpoint detection and response (EDR) agent, allowing malicious traffic to bypass many enterprise security measures. Organizations utilizing Cortex XDR may be at risk of undetected cyber operations.