RUSSIA-LINKED APT28 ATTACKERS ALREADY ABUSING NEW MICROSOFT OFFICE ZERO-DAY

Summary from the TLDR InfoSec newsletter

APT28 is actively exploiting CVE-2026-21509, a Microsoft Office security feature-bypass zero-day, in phishing campaigns targeting Ukrainian government agencies and EU organizations.