Security News APT28 Uses Microsoft Office CVE-2026-21509 in Espionage-Focused Malware Attacks TheHackerNews Daniel Bender 03 Feb 2026 APT28 exploited a Microsoft Office flaw to deliver MiniDoor and Covenant Grunt malware in targeted attacks across Ukraine and Eastern Europe.