Deploying AI agents securely: how Kaspersky products mitigate AI threats
2026-10-26T20:51:46Z•ecf2f7ae1b07b42450396ff67b4ca5e82960b4808dcb6f927b4d98fc5305251f
CVE-2022-21894CVE-2026-109618CVE-2026-109619APT41Active DirectoryBaton DropBlackLotusBlackXC2GhostContainerGroup PolicyLazarusMQTTMacSyncMovieReaperNightEaglePAYLOAD ransomwarePHPRDPToy GhoulsUEFI bootkitmacOS stealerremote code executionsupply chainwatering hole
What happened
Kaspersky Securelist feed covering October–September 2026 cyberthreat reporting, including a BlackX UEFI bootkit attributed to APT41 exploiting Baton Drop (CVE-2022-21894), critical PHP RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), Lazarus activity, ransomware abuse of Active Directory Group Policy, macOS information-stealing malware, torrent-delivered Trojans, and multiple APT backdoors and campaigns.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- kaspersky_securelist
- Record identifier
- ecf2f7ae1b07b42450396ff67b4ca5e82960b4808dcb6f927b4d98fc5305251f
- Enrichment time
- 2026-10-26T20:51:46Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.