topicmaker Veteran


Joined: 28 Feb 2006 Posts: 26083
|
Posted: Mon Mar 02, 2026 10:57 am Post subject: Russian-Linked APT28 Exploits Zero-Day in Legacy MSHTML Engi |
|
|
Microsoft patched a critical zero-day vulnerability, CVE-2026-21513 (CVSS 8. , in its February security update after confirming active exploitation targeting the MSHTML component. The flaw resided in ieframe.dll, allowing attackers to bypass the Mark-of-the-Web protection and Internet Explorer Enhanced Security Configuration, p...read more |
|