Threats & Adversaries · APT / Espionage
Russia-linked APT28 weaponised CVE-2026-21509 against targets in Central and Eastern Europe. China-linked Lotus Blossom compromised the Notepad++ supply chain.
1 source · Mar 2
Known exploited · CISA KEV
CVSS 7.8 HIGH: reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a… EPSS 73% (99th percentile).
CISA federal remediation date Feb 16 · date passed
CERT-EU Threat Intelligence
Cyber Brief 26-03 - February 2026
originalCERT-EU Threat Intelligence
Cyber Brief 26-02 - January 2026
originalPart of the PlainSec briefing for 2026-03-03
Every edition of this story: State-Linked Campaigns Hit Notepad++ and AI Ecosystems