Russian-state hackers exploited a critical Microsoft Office vulnerability to compromise devices inside diplomatic, maritime, and transport organizations in more than half a dozen countries. The threat group, tracked under names including APT28, Fancy Bear, Sednit, Forest Blizzard, and Sofacy, moved on the flaw tracked as CVE-2026-21509 less than 48 hours