Shadow Over MSHTML: How APT28 Exploited a Zero-Day Before Microsoft’s Patch

Russian-linked cyber espionage group APT28 weaponized a critical MSHTML vulnerability weeks before Microsoft’s official fix, raising alarms about evolving attack tactics.