▣ IT SECURITY · — · rss

Kaspersky Securelist

Fetch interval: 12h

Items

Trust

80/100

Last activity

7/10/2026

Open original site ↗RSS ↗

Threat landscape for industrial automation systems. Q1 2026

This report contains industrial threat statistics for Q1 2026, including industrial threat distribution by type, source, region and industry.

borderlinecybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist4d07/06

When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website

The OAuth 2.0 Device Authorization Grant specification was designed to streamline authentication for Smart TVs, IoT devices, and printers. Today, threat actors are weaponizing it.

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist7d07/03

Armored Likho digging a snake pit: inside the covert BusySnake Stealer campaign

An inside look at the active Armored Likho APT campaign. The attackers are using spear-phishing, AI-generated loaders, and a new Python-based tool, BusySnake Stealer, to target organizations in Russia, Kazakhstan, and Brazil.

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist8d07/02

Missed incidents, persistent threats, and response gaps: Insights from compromise assessment projects

Kaspersky Compromise Assessment specialists analyze trends from the service's 2025 projects and provide tips on how to enhance your organization's security.

borderlinecybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist9d07/01

The SOC Files: ScreenConnect masked as freeware. An inside look at a large-scale campaign

Kaspersky experts have uncovered a malicious network infrastructure for delivering AsyncRAT. The Trojan is dropped via compromised ScreenConnect software. In this post, we break down the infection chain and analyze the C2 infrastructure.

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist10d06/30

ToddyCat: your hidden email assistant. Part 2

An in-depth analysis of Umbrij, a new tool used by the ToddyCat APT group to compromise corporate email communications in Gmail. The attack targeted OAuth authorization tokens, allowing threat actors to gain access to Google services.

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist11d06/29

The Gentlemen are knocking: сustom backdoors and evolving tactics

Kaspersky researchers analyze incidents related to The Gentlemen RaaS group, disclose their tools and TTPs, and find a new ransomware variant.

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist14d06/26

Beware of the license manager: how a Schneider Electric software vulnerability puts industrial facilities at risk

Analysis of CVE-2024-2658 as found in Schneider Electric's Floating License Manager. Discover how this FlexNet Publisher vulnerability potentially allows attackers to escalate to NT AUTHORITY\SYSTEM privileges and expand their foothold; learn how to mitigate the risk.

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist15d06/25

Inside the 2026 SMB threat landscape: From phishing and scams to fake AI tools

Kaspersky researchers analyze the threat landscape for SMBs in 2026: the rise of attacks involving fake AI tools, phishing schemes, and data sold on the dark web.

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist16d06/24

StrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoader

Kaspersky researchers analyze a new global campaign dubbed StrikeShark that delivers Cobalt Strike Beacon via custom SharkLoader malware.

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist18d06/22

A VBScript campaign distributed through WhatsApp deploying RMM software

A Kaspersky researcher analyzes a global malicious campaign that distributes VBS scripts via WhatsApp delivering a UEMS RMM agent through a multi-stage infection chain.

borderlinecybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist24d06/16

Dozens of malicious wallpapers found on Steam Workshop: gamers’ accounts at risk

Since late 2025, malware has been spreading rapidly through the Steam Workshop, the gaming platform's built-in service for players to create and share custom content. The attackers are primarily targeting gamers in China and Russia.

off-topiccybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist32d06/08

From cause to cash: a cross-border look at hacktivist activity

Hacktivist outfits, namely 4BID, Hakerskii Kit, and C.A.S., are now targeting organizations across Kazakhstan, the UAE, Egypt, and Syria.

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist37d06/03

Argamal: Malware hidden in hentai games

Kaspersky researchers analyze new Argamal RAT distributed via infected hentai games and allowing the attacker to control the target machine.

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist38d06/02

Wardriving assessment across Mexico: Preparing for the 2026 World Cup

In the lead-up to the 2026 FIFA World Cup, Kaspersky GReAT experts conducted a wardriving assessment in Mexico City, Monterrey, and Guadalajara to evaluate Wi-Fi hotspot security configurations and potential exposure risks.

borderlinecybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist39d06/01

Containers on fire: from container escapes to supply chain attacks

We break down the primary attack vectors in containerized environments: exposed secrets, privilege misconfigurations, API compromise, and supply chain attacks.

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist39d06/01

OpenClaw: risks for agent users and how to mitigate them

Researching OpenClaw vulnerabilities, malicious skills and other security issues with the popular agent, and providing tips on how to mitigate them.

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist42d05/29

What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant

What are the main risks for container environments: vulnerabilities, supply chain attacks, configuration errors; how to improve container security and how Kaspersky Container Security with the KIRA AI assistant can help.

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist43d05/28

Pirates in the crosshairs: how one cybercrime gang has been infecting book, movie, and TV show fans for years

Our experts continue to track attacks targeting consumers of pirated content, both books and movies. 2026 saw the discovery of new target sites with tens of millions of visitors, while the miner gained a RAT module.

borderlinecybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist49d05/22

Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload

Cloud Atlas attacks the public sector and diplomatic structures of Russia and Belarus, using ReverseSocks, SSH, and Tor for persistence in infected systems and its new tool, PowerCloud.

borderlinecybersecurity

Kaspersky Securelist51d05/20

How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102)

We explain how a flaw in ExifTool allows attackers to compromise macOS systems via a malicious image (CVE-2026-3102).

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist53d05/18

IT threat evolution in Q1 2026. Mobile statistics

This report contains mobile threat statistics for Q1 2026, along with noteworthy discoveries and quarterly trends: new versions of SparkCat and Triada.

borderlinecybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist53d05/18

IT threat evolution in Q1 2026. Non-mobile statistics

The report presents key trends and statistics on malware that targeted personal computers running Windows and macOS, as well as Internet of Things (IoT) devices, during Q1 2026.

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist57d05/14

Kimsuky targets organizations with PebbleDash-based tools

Kaspersky researchers analyze a range of new PebbleDash-based tools used in recent Kimsuky campaigns and reveal their connection to the AppleSeed malware cluster.

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist59d05/12

State of ransomware in 2026

Kaspersky researchers are sharing insights into the main ransomware trends for 2026: EDR killers on the rise, switching from data encryption to data leaks, and more.

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist63d05/08

CVE-2025-68670: discovering an RCE vulnerability in xrdp

During a security assessment of Kaspersky USB Redirector, we discovered CVE-2025-68670: a pre-auth RCE in the xrdp server component. Project maintainers promptly patched the vulnerability.

cybersecurity · government-security · unknown-it-category-15

Kaspersky Securelist64d05/07

Exploits and vulnerabilities in Q1 2026

This report provides statistical data on published vulnerabilities and exploits we researched during Q1 2026. It also includes summary data on the use of C2 frameworks in APT attacks.

cybersecurity · government-security · unknown-it-category-15

Trust

Reputable· 80/100

Recent crawls

5/24/26, 12:42 AM	ok	0/10
5/24/26, 12:42 AM	ok	0/10
5/23/26, 11:09 PM	ok	0/10
5/23/26, 11:09 PM	ok	0/10
5/23/26, 11:02 PM	ok	0/10
5/23/26, 11:02 PM	ok	0/10
5/23/26, 12:42 PM	ok	0/10
5/23/26, 12:42 PM	ok	0/10
5/23/26, 6:53 AM	ok	0/10
5/23/26, 6:53 AM	ok	0/10

Health checks

7/10/26, 3:23 AMOK221 ms

7/10/26, 2:23 AMOK251 ms

7/10/26, 1:23 AMOK211 ms

7/10/26, 12:23 AMOK207 ms

7/9/26, 11:23 PMOK202 ms

7/9/26, 10:23 PMOK189 ms

7/9/26, 9:23 PMOK195 ms

7/9/26, 8:23 PMOK195 ms

7/9/26, 7:23 PMOK268 ms

7/9/26, 6:23 PMOK188 ms

7/9/26, 5:23 PMOK199 ms

7/9/26, 4:23 PMOK205 ms

7/9/26, 3:23 PMOK259 ms

7/9/26, 2:23 PMOK203 ms

7/9/26, 1:23 PMOK200 ms

7/9/26, 12:23 PMOK260 ms

7/9/26, 11:23 AMOK228 ms

7/9/26, 10:23 AMOK223 ms

7/9/26, 9:23 AMOK209 ms

7/9/26, 8:23 AMOK235 ms

7/9/26, 7:23 AMOK197 ms

7/9/26, 6:23 AMOK211 ms

7/9/26, 5:23 AMOK203 ms

7/9/26, 4:23 AMOK206 ms

7/9/26, 3:23 AMOK233 ms

7/9/26, 2:23 AMOK199 ms

7/9/26, 1:23 AMOK217 ms

7/9/26, 12:23 AMOK255 ms

7/8/26, 11:23 PMOK190 ms

7/8/26, 10:23 PMOK249 ms