Hello all,
maybe i am to stupid but i have problems with understanding from the PAN-SA-2023-0002 Informational Bulletin: Impact of Rorschach Ransomware Article (https://security.paloaltonetworks.com/PAN-SA-2023-0002).
It's about:
„>= Agents with CU-240 or a later content update on Windows“
However, our content version is 910-49625
Furthermore, the FAQ also states the following:
"Q. Are Cortex XDR customers at risk for this ransomware? Palo Alto Networks has verified that Cortex XDR 7.7, and newer versions, with content update version 240 (released November, 2021), and later content updates, detect and block the ransomware. A new content update will be released next week to detect and prevent the usage of this DLL side-loading technique."
So is the ransomware being detected and blocked now, but there won't be a Cortex XDR Dump Service Tool fix via content update until next week?
Sorry but i don't get it.
Maybe someone can help me with whis to understand.
BR
Sascha
... View more