How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia

Kaspersky Securelist RSS intelligence covering multiple 2026 threat reports, including APT41’s BlackX UEFI bootkit exploiting Baton Drop (CVE-2022-21894), critical PHP remote-code-execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619), Lazarus watering-hole activity, ransomware abuse of Active Directory Group Policy, torrent-delivered malware, APT campaigns, macOS stealer activity, and new backdoors using MQTT and Matrix communications. The collection includes active exploitation, persistence, C2 abuse, and targeted campaigns against diplomatic, aviation, financial, and enterprise604?