Inside the Fix: Analysis of In-the-Wild Exploit of CVE-2026-21513#CVE_2026_21513 #APT28 https://www.akamai.com/blog/security-research/2026/feb/inside-the-fix-cve-2026-21513-mshtml-exploit-analysis
Operation MacroMaze: new APT28 campaign using basic tooling and legit infrastructure#APT28 https://lab52.io/blog/operation-macromaze-new-apt28-campaign-using-basic-tooling-and-legit-infrastructure/