Threat landscape for industrial automation systems. Q2 2026

Kaspersky Securelist RSS collection covering Q2 2026 threat reporting and multiple August 2026 investigations. Topics include industrial-control-system threats, software and AI-framework vulnerabilities, Android head-unit malware forming an ad and proxy botnet, HoneyMyte’s CoolClient kernel rootkit, Armored Likho espionage targeting Telegram, Head Mare exploitation of unpatched TrueConf servers, CAV3RN’s cloud and DNS-based C2, mobile and desktop malware trends, and adversary-in-the-middle phishing using legitimate cloud platforms to bypass MFA. The document is a collection of threat reports;.