APT28 exploits Microsoft Office flaw in Operation Neusploit

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cyberattacks Target Ukraine and EU via Microsoft Office Vulnerability CERT-UA has reported a new wave of cyberattacks targeting Ukrainian government agencies and EU organizations, exploiting the Microsoft Office vulnerability CVE-2026-21509. Attackers are using malicious emails disguised as communications from the Ukrainian Hydrometeorological Center to gain access to victims' systems. 59 sources 50