APT28 exploits Microsoft Office flaw in Operation Neusploit

Securityaffairs.Co •Pierluigi Paganini • February 3, 2026

Russia-linked APT28 is behind Operation Neusploit, exploiting a newly disclosed Microsoft Office vulnerability in targeted attacks. Russia-linked group APT28 (aka UAC-0001, aka Fancy Bear, Pawn Storm, Sofacy Group, Sednit, BlueDelta, and STRONTIUM) is behind Operation Neusploit, a campaign that exploits a newly disclosed Microsoft Office vulnerability. The APT28 group has been active since at least 2007 and it has targeted governments, militaries, and security organizations […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cyberattacks Target Ukraine and EU via Microsoft Office Vulnerability CERT-UA has reported a new wave of cyberattacks targeting Ukrainian government agencies and EU organizations, exploiting the Microsoft Office vulnerability CVE-2026-21509. Attackers are using malicious emails disguised as communications from the Ukrainian Hydrometeorological Center to gain access to victims' systems. 59 sources 50

Extracted Entities

APT28 exploits Microsoft Office flaw in Operation Neusploit

The full story

Extracted Entities

APT Groups (8)

Attack Types (1)

Campaigns (1)

Platforms (1)