Ars Technica
Microsoft releases urgent Office patch. Russian-state hackers pounce.

Russian-state hackers exploited a Microsoft Office vulnerability, tracked as CVE-2026-21509. They compromised devices in diplomatic and transport organizations across several countries. The hackers used advanced, encrypted exploits and backdoor implants to remain undetected.