APT28 Turned a Fresh Office Bug on Ukraine Within Days, CERT-UA Says
CERT-UA says APT28 sent Office documents exploiting CVE-2026-21509 to Ukrainian government bodies and EU organizations days after Microsoft disclosed the flaw, planting a Covenant implant that talks through Filen.