Loading story…
Researchers reported that Palo Alto Networks Cortex XDR behavioral detection rules can be decrypted and analyzed, exposing how the product identifies malicious activity and creating a path for attackers to tune malware and tradecraft to avoid alerts. The reporting describes how BIOC rules, intended to be protected in encrypted form inside the agent, were reverse engineered to reveal internal detection logic, undermining the assumption that the ruleset is opaque to adversaries.
Technical analysis from InfoGuard Labs said the issue affected Cortex XDR Windows agent versions 8.7 and 8.8, where decryption keys could be derived from a hardcoded string and a plaintext Lua configuration file. After translating the proprietary rules into plaintext, researchers identified broad allowlist behavior, including a command-line exception containing \Windows\ccmcache, which reportedly bypassed a large share of behavioral detections and could be abused for stealthy execution and other malicious actions. This is not fluff: it is substantive security research with direct implications for endpoint detection evasion and defensive validation.
Get the actors, campaigns, and ATT&CK mapping behind it.
4 events from the most recent confirmed update back to the earliest known activity.
InfoGuard Labs' findings were publicly reported in mid-March 2026, detailing how encrypted BIOC rules could be decrypted and how embedded exceptions could be abused to evade behavioral detections. Coverage noted no cited widespread in-the-wild exploitation but warned that organizations relying on Cortex XDR could face increased evasion risk.
At the end of February 2026, Palo Alto Networks released a fix for the issue in Cortex XDR Agent 9.1 with Content version 2160. The remediation primarily removed the overly permissive global allowlists that enabled the bypass.
InfoGuard Labs reported the Cortex XDR BIOC rule design flaw and evasion technique to Palo Alto Networks. The disclosure occurred in July 2025, starting the vendor remediation process.
While analyzing Palo Alto Networks Cortex XDR Windows agent versions 8.7 and 8.8, InfoGuard Labs reverse-engineered the BIOC rule decryption process, recovered plaintext behavioral rules, and identified a hardcoded global allowlist tied to the command-line string "\Windows\ccmcache". The researchers showed this could be abused to suppress detections, including using ProcDump to dump LSASS memory without alerts.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Get the adversaries, campaigns, and ATT&CK mapping behind this technique, with detections ready to deploy.
3 references tracked. Mallory keeps watching after this page renders.
thecyberexpress.com
Open sourcecybersecuritynews.com
Open sourcelabs.infoguard.ch
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Multiple reports describe ways attackers or testers can **abuse trusted enterprise features** to evade controls. Researchers reported that *Palo Alto Networks Cortex XDR* **Live Terminal** can be repurposed as a stealthy **command-and-control (C2)** channel because its WebSocket-based protocol lacks command signing; an attacker who can intercept the initial WebSocket message can redirect an endpoint to an attacker-controlled server/tenant, leveraging the trusted `cortex-xdr-payload.exe` component to execute commands in a “living off the land” manner. Separately, a tutorial showed *Microsoft Defender for Cloud Apps* (reverse-proxy `*.mcas.ms`) download restrictions for unmanaged devices can be **bypassed by spoofing specific browser user-agent strings**, allowing direct access to services like Outlook/SharePoint and enabling successful downloads that would otherwise be blocked. Other material in the set covers adjacent but distinct execution and delivery risks rather than the same product-specific bypasses. **CVE-2026-27615** affects *ADB-Explorer* on Windows: allowing `ManualAdbPath` to be set to a **UNC path** in a settings file can lead to **remote code execution** by pointing the app to an attacker-controlled network share, fixed in Beta `0.9.26022`. Cofense also documented ongoing campaigns abusing **Windows File Explorer WebDAV** handling to deliver malware without a browser download flow, including use of `trycloudflare[.]com` tunnels to host WebDAV servers and multi-stage script chains to deliver RATs—highlighting a persistent social-engineering and delivery vector that can bypass some browser-centric controls.
Jun 29, 2026
Researchers at XM Cyber disclosed a macOS privilege-escalation technique that allows a standard, non-administrative user to disable enterprise security software and invoke privileged functions without administrator credentials or kernel exploits. The attack chain abuses legitimate macOS behavior by combining weakly validated XPC connections, malicious payload injection into Interface Builder NIB files, and a newly described misuse of the kernel code-signing trust cache, which can continue trusting an application's `CDHash` after a legitimately signed app has run. XM Cyber said it successfully used the method to silently unload or permanently deactivate **CrowdStrike Falcon Sensor**, **Kandji MDM**, and a third unnamed EDR product without triggering alerts. Kandji addressed the issue in an updated agent release and assigned **`CVE-2026-39118`**, CrowdStrike reportedly paid a bug bounty and added detections while disclosure continues, and another vendor is developing a patch; XM Cyber also warned that Apple does not plan to remediate the underlying macOS design issue, leaving software vendors to implement their own mitigations.
Jun 29, 2026
Sophos X-Ops reported that a threat actor built and tested an AI-assisted post-exploitation framework designed to evade endpoint detection and response tools, using a mix of malicious files, Cobalt Strike profiles, Python shellcode-injection scripts, a Telegram Bot API command-and-control channel, and a Cloudflare Worker redirector. Investigators found a supporting Git repository that automated Active Directory discovery and maintained a malware-testing lab with multiple virtual machines to evaluate bypass techniques against **Sophos**, **CrowdStrike**, and **Microsoft Defender** environments; many scripts appeared partly AI-generated and included Russian-language elements. The framework used a Python payload generator to create **Rust**- and **Go**-based payloads with encryption, evasion, and alternate execution methods, ultimately producing nearly 80 modules that tested more than 70 techniques. Sophos said the operators used tools including **Cursor**, **Claude Opus 4.5**, and **Model Context Protocol** to coordinate workflows, ingest public research, and map activity to `MITRE ATT&CK`, but found no clear evidence that AI independently invented new malware capabilities; the company also linked the development activity to known ransomware deployment and data-theft operations and urged organizations to maintain layered defenses including patching, MFA, passkeys, and strong EDR coverage.
Jun 29, 2026