Filter generation in practice: from algorithms to LLMs
2026-11-01T20:51:47Z•e28ed0fe49c57b23afcb61812832c48061abf4407d504730d3acbd6e5e0d0a01
CVE-2022-21894CVE-2026-109618CVE-2026-109619AI securityAPTAPT41Baton DropBlackLotusBlackXIP camerasKasperskyKonnectivityKubernetesLazarusMacSyncNetamLoaderPHPUEFI bootkitcloud securitydenial of servicemacOS stealerremote code executiontenant isolation bypassthreat intelligencewatering hole
What happened
Kaspersky Securelist RSS feed covering security research from September–October 2026, including targeted attacks, malware campaigns, cloud isolation bypasses, vulnerable cameras, PHP remote-code-execution flaws, UEFI bootkits, AI security, and macOS information stealers. The most severe topics are critical PHP RCE vulnerabilities, the Kubernetes/cloud tenant-isolation bypass, and the BlackX UEFI bootkit exploiting Baton Drop (CVE-2022-21894).
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- kaspersky_securelist
- Record identifier
- e28ed0fe49c57b23afcb61812832c48061abf4407d504730d3acbd6e5e0d0a01
- Enrichment time
- 2026-11-01T20:51:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.