IT threat evolution in Q3 2026. Non-mobile statistics
2026-11-10T08:51:47Z•565489a6070bb0b89e97c77f4ad8e18c7f5feccaf55daa8a9a68178defb50d57
AI-assisted-attacksAPTIP-camerasIoT-securityKubernetesNetamLoaderOT-securityProxmoxSharePointStorm-2603ToolShellVMware-ESXicloud-isolationcontainer-securitydenial-of-servicefileless-malwaregovernment-targetingmachine-learningmalware-statisticspost-exploitationransomwaresocial-engineeringthreat-landscapevirtualization-security
What happened
Kaspersky Securelist reporting from late October through November 2026 covers major cyberthreat developments, including Q3 malware statistics across desktop, IoT, and mobile platforms; ransomware and misconfiguration risks in ESXi and Proxmox virtualization; a fileless Storm-2603 SharePoint breach involving ToolShell; AI-assisted automated post-exploitation; the NetamLoader framework targeting a government-customized Windows 10 environment in Asia; a denial-of-service vulnerability affecting Intelbras IP cameras; and a cloud tenant-isolation bypass involving Kubernetes, Konnectivity, and an R
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- kaspersky_securelist
- Record identifier
- 565489a6070bb0b89e97c77f4ad8e18c7f5feccaf55daa8a9a68178defb50d57
- Enrichment time
- 2026-11-10T08:51:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.