The latest update to Kaspersky Embedded Systems Security brings Full Disk Encryption management for Windows and introduces BadUSB protection for Linux-based platforms.
In the world of ATMs, retail terminals, ticket machines, and specialized smart medical devices, malicious actors don't need to penetrate a corporate network remotely: physical access lasting only a few seconds can result in devastating consequences. For instance, according to a global poll[1], one in ten companies experienced attacks via pluggable devices last year—a threat vector that is uniquely critical for embedded systems. The highest incident rates for these threats are currently found among government, defense, education, and healthcare organizations.
The new features of Kaspersky Embedded Systems Security (KESS), a solution designed specifically for standalone, fixed-function devices that frequently run on legacy software, directly address these active threats targeting Linux and Windows-based low-powered devices.
Strengthened data security through offline meddling prevention
By integrating Windows BitLocker management, Kaspersky Embedded Systems Security enables security teams to centrally enforce full-disk encryption alongside other security controls. Beyond protecting locally stored data, properly configured disk encryption helps prevent attackers with physical access from modifying the system drive while the device is offline—for example, to plant malicious software designed to interfere with future transactions.
Advanced device protection: neutralizing rogue peripherals
The update introduces BadUSB protection specifically optimized for Linux environments. The technology detects rogue USB peripherals that masquerade as standard Human Interface Devices (HID), such as keyboards or mice.
Once a malicious USB device attempts to mirror an authorized input peripheral, KESS intercepts it, preventing disruptive impacts including keylogging, malicious data input and Denial of Service (DoS) attacks engineered to disrupt local systems.
“For unattended embedded devices such as ATMs and payment terminals, physical access can give attackers an opportunity to connect a rogue USB peripheral or tamper with system storage offline. AI could help them analyze software and adapt their TTPs[2] during the attack course, making it all the more important to close off these routes,” says Oleg Gorobets, Corporate Cybersecurity Expert at Kaspersky. “The latest update to Kaspersky Embedded Systems Security strengthens protection against both threats. BadUSB protection for Linux helps stop devices masquerading as legitimate input peripherals, while BitLocker management for Windows protects system storage against unauthorized offline access and modification. These capabilities extend the product’s modular, multilayered architecture, that allows organizations to combine the exact security controls each device requires within its available computing resources.”
To learn more about Kaspersky Embedded Systems Security and its capabilities, please follow the link.
[1] The study was conducted by Kaspersky’s internal Market Research Center in August 2026, encompassing 1,900 interviews with IT security specialists and cybersecurity decision-makers across 18 countries: Brazil, China, Colombia, Egypt, France, Germany, India, Indonesia, Italy, Malaysia, Mexico, Russian Federation, Saudi Arabia, Spain, Thailand, Turkey, Vietnam, South Africa.
[2] Tactics, Techniques and Procedures
