APT28 Exploits Microsoft Office Zero-Day in Operation Neusploit Targeting Ukraine
Russia's APT28 weaponized CVE-2026-21509 within three days of Microsoft's disclosure, deploying MiniDoor email stealers and PixyNetLoader against Ukraine, Slovakia, and Romania.