Umbra

Umbra Umbra is an experimental remotely controllable LKM rootkit for kernels 4.x and 5.x up to 5.7 which opens a network backdoor that can spawn reverse shells to remote hosts, launch malware remotely and much more. The rootkit is still under development, although the features listed below are...

Informational: Cortex XDR Agent: Proof of Concept (PoC) Reduces Effectiveness of Anti-Ransomware Protection Module

The Palo Alto Networks Product Security Assurance team is aware of a specifically crafted proof of concept PoC that reduces the effectiveness of the Cortex XDR agent Anti-Ransomware endpoint protection module. The specific technique used in the PoC does not impact behavioral threat protection,...