Offline tampering now harder to pull off
Kaspersky Embedded Systems Security now manages Windows BitLocker centrally. This lets teams enforce full-disk encryption on devices that often sit unattended. Properly set up encryption stops attackers who gain brief physical access from altering the drive while the machine is powered down, a tactic used to plant malware for later use.
BadUSB protection reaches Linux platforms
The release adds BadUSB detection for Linux-based systems. It spots rogue USB sticks that pretend to be keyboards or mice. Once identified, the tool blocks the device before it can log keystrokes, inject commands or launch denial-of-service attacks. One in ten firms reported pluggable-device incidents last year, with government, defence, healthcare and education sectors hit hardest.
Quote from the company
“For unattended embedded devices such as ATMs and payment terminals, physical access can give attackers an opportunity to connect a rogue USB peripheral or tamper with system storage offline. AI could help them analyse software and adapt their TTPs during the attack course, making it all the more important to close off these routes,” says Oleg Gorobets, Corporate Cybersecurity Expert at Kaspersky.
Who this update actually helps
The changes suit organisations running large numbers of legacy embedded devices that cannot be patched easily. They add to the product’s modular design so teams can pick only the controls their hardware can support. We cover Kaspersky’s consumer VPN offering at our VPN hub if you are comparing personal privacy tools instead.












