Post #7263 196 Mar 1, 2026, 08:05 UTC 🔗Ссылка:https://labs.infoguard.ch/posts/abusing_cortex_xdr_live_response_as_c2/ InfoGuard Labs Abusing Cortex XDR Live Terminal as a C2 - InfoGuard Labs The Cortex XDR agent includes an incident response feature called "Live Terminal", which attackers can abuse as a C2.