Kaspersky KESS adds Windows BitLocker management and Linux BadUSB protection

Kaspersky is adding controls against physical-access attacks to Kaspersky Embedded Systems Security (KESS). Its Turkish bulletin dated November 12, 2026 describes centralized BitLocker full-disk encryption management for Windows and BadUSB protection for Linux systems, aimed at malicious peripherals that disguise themselves as keyboards or mice.

Physical access can bypass the need for a remote intrusion

ATMs, retail payment terminals, ticket machines and specialized connected medical devices do not always operate like conventional PCs. An attacker may be able to connect a peripheral or interfere with storage during brief physical access, without first breaking into the corporate network remotely. The announcement therefore treats physical attack paths as an additional concern alongside network security.

According to research Kaspersky says it conducted in August 2026, roughly one in ten participating companies experienced attacks through pluggable devices during the preceding year. The bulletin identifies government, defense, education and healthcare as the groups with the highest incidence. This is a finding from the vendor's own research, not an independent measurement of attacks across all businesses.

Centralized BitLocker controls for Windows

KESS is designed for standalone, fixed-function Windows and Linux equipment with limited computing resources, often running older software. The Windows addition allows security teams to manage full-disk encryption policies centrally together with other security controls.

Kaspersky says properly configured encryption helps protect locally stored data and prevents a physically present attacker from changing the system drive while a device is offline. One target scenario is the installation of malware intended to interfere with the terminal's subsequent transactions. This part of the announcement concerns Windows BitLocker management; it does not announce the same encryption-management feature for Linux.

Linux protection against USB devices posing as input hardware

The Linux BadUSB feature is intended to identify rogue USB peripherals presenting themselves as standard Human Interface Devices (HID). Such hardware can try to appear to the operating system as a legitimate keyboard or mouse.

The company says KESS blocks those impersonation attempts to help prevent keylogging, malicious input and denial-of-service attacks designed to disrupt a local system. The announcement should not be interpreted as a guarantee that every USB device or every physical attack will be neutralized. Its stated scope is BadUSB protection optimized for Linux environments.

Combining controls within the device's resources

Oleg Gorobets, Kaspersky's corporate cybersecurity expert, points to unattended ATMs and payment terminals as equipment where physical access can permit a rogue peripheral connection or offline storage modification. He says attackers could also use artificial intelligence to analyze software and adapt their tactics, techniques and procedures, increasing the importance of closing these entry points.

Gorobets describes the Linux and Windows additions as complementary defenses against different attack paths. Kaspersky presents them as extensions to a modular, multilayered architecture in which an organization can combine the controls a particular device needs within its available computing resources. These are the manufacturer's product statements, not results from an independent performance or security test.

A discrepancy in the research country list

The Turkish bulletin says Kaspersky's internal Market Research Center interviewed 1,900 IT security specialists and cybersecurity decision-makers in August 2026 across 18 countries. However, its list contains 19: Germany, the United States, Brazil, China, Indonesia, France, South Africa, India, Spain, Italy, Colombia, Malaysia, Mexico, Egypt, the Russian Federation, Saudi Arabia, Thailand, Türkiye and Vietnam.

The English official announcement dated November 11 lists 18 countries and does not include the United States. We therefore flag the discrepancy rather than treating US participation as established. Both the vendor origin of the research and the difference between the two footnotes should be considered when interpreting the findings.

About the company

Founded in 1997, Kaspersky operates in cybersecurity and digital privacy. It says it has protected more than one billion devices to date and serves millions of individuals and approximately 200,000 business customers. Its portfolio includes personal-device protection, enterprise security products and services, and solutions for critical infrastructure and public-sector systems. The company also includes its Cyber Immune approach among the technologies it offers against evolving threats.

Sources: Kaspersky's Turkish press bulletin, November 12, 2026; official Kaspersky announcement, November 11.

Dji Banner Inside Article - 728x90