Deploying AI agents securely: how Kaspersky products mitigate AI threats
2026-10-27T08:51:45Z•4b26d008f67bf9ca697568c0e7b86eff5589816390f4af5eba6525eb055ab944
CVE-2022-21894CVE-2026-109618CVE-2026-109619AI securityAPT41Active DirectoryBaton DropBlackLotusBlackXC2 infrastructureElementGroup Policy ObjectsLazarusMQTTPHPPHP2ShellRDPSolana blockchainUEFI bootkitbackdoormacOS infostealerransomwareremote code executionsupply chaintorrent malwarewarehouse securitywatering-hole attack
What happened
Kaspersky Securelist feed covering emerging cyber threats, including APT campaigns, UEFI bootkit deployment, critical PHP remote-code-execution vulnerabilities, ransomware abuse of Active Directory Group Policy, macOS infostealers, torrent-delivered malware, and backdoors using legitimate cloud or messaging infrastructure. The highest-impact items involve BlackX exploiting Baton Drop (CVE-2022-21894), PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619), and attacks targeting enterprise and diplomatic environments.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- kaspersky_securelist
- Record identifier
- 4b26d008f67bf9ca697568c0e7b86eff5589816390f4af5eba6525eb055ab944
- Enrichment time
- 2026-10-27T08:51:45Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.