APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch Tuesday
Published: (March 2, 2026 at 05:36 AM EST)
1 min read
Source: The Hacker News
Source: The Hacker News
A recently disclosed security flaw patched by Microsoft may have been exploited by the Russia‑linked state‑sponsored threat actor known as APT28, according to new findings from Akamai.
The vulnerability in question is CVE‑2026‑21513 (CVSS score: 8.8), a high‑severity security feature bypass affecting the MSHTML Framework.
“Protection mechanism failure in MSHTML Framework allows an unauthorized …”
Source: Akamai research