APT28 Exploits Microsoft Office CVE-2026

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cyberattacks Target Ukraine and EU via Microsoft Office Vulnerability CERT-UA has reported a new wave of cyberattacks targeting Ukrainian government agencies and EU organizations, exploiting the Microsoft Office vulnerability CVE-2026-21509. Attackers are using malicious emails disguised as communications from the Ukrainian Hydrometeorological Center to gain access to victims' systems. 59 sources 50