Russian-state hackers, identified as APT28, exploited a Microsoft Office vulnerability, CVE-2026-21509, within 48 hours of a security update, compromising devices in diplomatic, maritime, and transport organizations across several countries. The attack used encrypted exploits and payloads executed in memory to evade detection. The campaign began on January 28, targeting organizations in nine countries, including Poland, Slovenia, and Ukraine, affecting defense ministries, transportation operators, and diplomatic entities.
Learn more on this news by visiting us at: https://greyjournal.net/news/