Russian-state hackers exploited Microsoft Office flaw CVE-2026-21509 to breach diplomatic and transport networks in at least nine countries, using fileless attacks and compromised government accounts, Trellix says. The campaign, linked to APT28 and Fancy Bear, delivered 29 phishing lures over 72 hours. Alphabet plans $175–$185 billion in AI infrastructure spending for 2026, more than double 2025, as Google Cloud backlog hits $240 billion.