Filter generation in practice: from algorithms to LLMs
2026-10-30T20:51:47Z•6c8f22c46ee426213567cdf3e8eb4ad2302ef455aa8d0ed1ea4a487ac1cd1ac4
CVE-2022-21894CVE-2026-109618CVE-2026-109619AI-securityAPTAPT41Baton-DropBlackLotusBlackXIP-camerasIoTKonnectivityKubernetesLazarusMacSyncNetamLoaderPHPPHP2ShellUEFI-bootkitcloud-securitydenial-of-serviceinformation-stealermacOSmalwareremote-code-executiontenant-isolationthreat-intelligence
What happened
Kaspersky Securelist RSS feed covering security research published in October 2026, including targeted APT activity, malware campaigns, UEFI bootkits, critical PHP remote-code-execution vulnerabilities, cloud tenant-isolation bypasses, IoT camera denial-of-service issues, macOS information stealers, and secure deployment of AI agents. Notable items include APT41-linked BlackX exploiting CVE-2022-21894, Lazarus Operation FlashHole, NetamLoader activity against government-customized Windows systems, and PHP2Shell exploitation involving CVE-2026-109618 and CVE-2026-109619.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- kaspersky_securelist
- Record identifier
- 6c8f22c46ee426213567cdf3e8eb4ad2302ef455aa8d0ed1ea4a487ac1cd1ac4
- Enrichment time
- 2026-10-30T20:51:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.