Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO

Kaspersky Securelist threat intelligence feed covering ransomware abuse of Active Directory Group Policy, torrent-delivered malware, APT campaigns, backdoors, rootkits, industrial control system threats, Android proxy botnets, and quarterly vulnerability and exploit activity. The entries describe campaigns and malware affecting enterprises, aviation, fintech, industrial environments, automotive head units, and Russian organizations. No specific CVE identifiers are provided in the feed metadata.