NSFOCUS Monthly APT Insights – January 2026

NSFOCUS Fuying Lab’s January 2026 APT report summarizes 26 APT incidents across East Asia, South Asia, and Eastern Europe, with spear-phishing as the primary intrusion vector and government/military organizations as main targets; it calls out APT28’s Operation Neusploit exploiting Microsoft Office zero-day CVE-2026-21509 in the wild and emphasizes rapid exploitation, observed malware loaders, and the need for patching and increased monitoring.