APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch Tuesday

AI Summary

APT28 exploited CVE-2026-21513, an MSHTML Framework security feature bypass vulnerability with CVSS score 8.8, before Microsoft's February 2026 Patch Tuesday according to Akamai research. The Russia-linked group's use of this zero-day demonstrates continued sophisticated targeting capabilities and highlights the critical need for rapid patch deployment.

Read full article → https://thehackernews.com/2026/03/apt28-tied-to-cv…

Relevance score: 88.0/100

# More from March 03

1
Google addresses actively exploited Qualcomm zero-day in fresh batch of 129 Android vulnerabilities CyberScoop
2
CyberStrikeAI tool adopted by hackers for AI-powered attacks BleepingComputer
3
30 Alleged Members of 'The Com' Arrested in Project Compass Dark Reading
5
Cyber Command disrupted Iranian comms, sensors, top general says
6
New Chrome Vulnerability Let Malicious Extensions Escalate Privileges via Gemini Panel The Hacker News
7
North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for Cross-Platform RAT The Hacker News
8
Fake Google Security site uses PWA app to steal credentials, MFA codes BleepingComputer
9
University of Hawaiʻi Cancer Center confirms data leak following ransomware attack
10
US-Israel and Iran Trade Cyberattacks: Pro-West Hacks Cause Disruption as Tehran Retaliates SecurityWeek