The statistics compiled from detection alerts* within Kaspersky Anti Targeted Attack (KATA) reveal the hacking tools most often used for lateral movement across enterprise infrastructures, highlighting the pressing need for reliable network security solutions to protect corporate environments.
Recent investigations into cyber-espionage groups show that attackers increasingly avoid detectable malware, choosing instead to blend into legitimate corporate network traffic. By weaponizing dual-use tools and administrative utilities already present in the system, they move laterally across the domain undetected to harvest credentials and locate high-value assets. In this era of silent intrusion, Kaspersky shares insights into the most frequently used hacking tools to help organizations defend their networks.
For a decade, KATA, Kaspersky’s mature NDR solution, has been delivering comprehensive anti-APT protection. It features advanced threat detection, in-depth network traffic analysis, and centralized incident response to ensure full visibility across the entire network. Equipped with nearly 12,500 network detection rules in its database, KATA detects an average of 312,705 potential attacks daily.
Read more…
Source: Kaspersky
Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox
Related:
- Rogue AI agent engages ‘Skynet mode’ to search the internet for exposed LLMs to hijack and run malware attacks
October 26, 2026
Researchers uncovered an autonomous AI attack campaign that hijacks exposed AI agents and infrastructure. The malicious “Skynet” agent deployed cryptominers, stole credentials, and recruited new AI systems autonomously. Security teams are urged to secure AI endpoints, restrict permissions, and protect high-value API keys. Read more… Source: TechRadar News Sign up for the Cyber Security Review Newsletter The latest cyber security news ...
- Patient records exposed in Quest breach
October 26, 2026
Quest Diagnostics has confirmed that an unauthorized party accessed a system healthcare providers use to order laboratory tests and view results, affecting personal information and patient records. Quest is a major US laboratory testing company whose services help healthcare professionals diagnose and monitor medical conditions. Those services range from routine laboratory testing to specialized testing in ...
- A 16-year-old bug could be putting millions of routers at risk — despite Broadcom saying it patched the issue years ago
October 26, 2026
A Broadcom WPS flaw dating back to at least 2010 lets attackers within Wi-Fi range run code on routers without the password. Broadcom told the researcher it replaced the code from 2018, but declined to assign a CVE, calling the software obsolete. Changing your Wi-Fi password won’t help, and disabling WPS may not either; firmware updates or ...
- Experts reveal another major PHP2Shell bug — and it’s not getting an emergency patch this time
October 26, 2026
PHP disclosed a new RCE vulnerability, but exploitation requires a rare and specific configuration setup. Unlike php2shell, the flaw will be fixed in the next regular release rather than an emergency patch. Researchers say php2shell attacks remain limited so far, though widespread patching is still urgently needed. Read more… Source: TechRadar News Sign up for the Cyber Security Review Newsletter The ...
- France moves to suspend social media accounts promoting protest violence
October 23, 2026
Representatives from Google, Reddit and Discord also attended a meeting at the Prime Minister’s office on Wednesday, where an agreement was reached to improve the handling of potentially illegal content. Under the arrangements, a dedicated Interior Ministry team, working alongside the PHAROS online reporting service, will coordinate urgent alerts. Platforms have agreed to prioritise requests from the ...
- Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise
October 22, 2026
The bad week for cybersecurity just got worse for thousands more companies, who were spied on by Chinese hackers following the breach of IT management and remote access giant ConnectWise. Security researchers at Microsoft say the China state-aligned hackers broke into ConnectWise’s cloud backup service and stole application credentials that are used to establish data links ...