> Russian state hackers exploit new Microsoft Office flaw in attacks on Ukraine, EU

Ukraine’s computer emergency response team, CERT-UA, said attackers began abusing the flaw — tracked as CVE-2026-21509 — shortly after Microsoft disclosed it in early January.