Right. So. I spent half of last week writing about APT28's Operation MacroMaze phishing circus and barely had time to finish my fourth coffee before Akamai dropped this particular turd in my inbox. APT28 — Russia's GRU-affiliated gift that keeps on giving — was out here quietly burning a zero-day in the MSHTML Framework, CVE-2026-21513, … Continue reading APT28 Burned CVE-2026-21513 Before Microsoft Even Knew It Was Open