Filter generation in practice: from algorithms to LLMs
2026-10-31T08:51:46Z•f1df5c5a6c8278a83042ffc2190cb1c417d466c260c05e5c35f8b31931a57b7a
CVE-2022-21894CVE-2026-109618CVE-2026-109619APTAsiaBaton-DropBlackLotusBlackXCrossWeb EXIP-cameraIntelbrasKonnectivityKubernetesLazarusMacSyncNetamLoaderPHP2ShellUEFI-bootkitcloud-isolation-bypasscross-tenant-compromisecryptocurrency-targetingdenial-of-servicegovernment-targetingmacOS-stealerremote-code-executiontargeted-attackthreat-intelligencewatering-hole
What happened
Kaspersky Securelist feed covering recent threat intelligence, including targeted APT activity, malware campaigns, cloud and device vulnerabilities, UEFI bootkits, critical PHP RCEs, Lazarus operations, warehouse security, and a macOS stealer. The highest-impact items include cross-tenant cloud isolation bypasses, critical PHP remote code execution vulnerabilities, an exploited UEFI bootkit vulnerability, and attacks against government and diplomatic organizations.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- kaspersky_securelist
- Record identifier
- f1df5c5a6c8278a83042ffc2190cb1c417d466c260c05e5c35f8b31931a57b7a
- Enrichment time
- 2026-10-31T08:51:46Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.