Troy

Mentions · 7d0
Mentions · 30d0
All mentions4
First seenAug 12, 2026
Last mentionedAug 17, 2026

Timeline

4 articles · newest first

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

Weekly recap: suspected China-nexus APT exploited VMware vCenter CVE-2026-59310, Lazarus used Windows zero-day CVE-2026-68820, and macOS flaw dropped Monero miners.

The Hacker NewsAug 17, 17:57 UTC · Aug 17, 2026Exploit / PoCExploitedCVE-2026-59310 CVE-2026-65400 CVE-2026-688203

Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

Lazarus exploits Windows AFD.sys zero-day CVE-2026-68820 in Operation Dream Job to deploy Troy backdoor at defense firms.

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2026Threat actorExploitedCVE-2026-68820 CVE-2025-491137 · 2 reads

North Korean Lazarus Group Uses Windows Zero

Check Point links Lazarus Group's Operation Dream Job to a new Windows zero-day, CVE-2026-68820, targeting defense workers with fake Lockheed Martin job offers.

Security AffairsAug 13, 07:05 UTC · Aug 13, 2026Threat actorExploitedCVE-2026-68820 CVE-2025-491133 · 1 read

Lazarus hackers pair fake job offers with Windows zero-day exploit

Lazarus' Operation Dream Job targets the defense sector with fake job offers, a Windows LPE zero-day (CVE-2026-68820), and new Troy and RelayShell backdoors.

Help Net SecurityAug 12, 00:00 UTC · Aug 12, 2026Threat actorExploitedCVE-2026-68820 CVE-2025-491133 · 2 reads

Related CVEs

by mentions

CVE-2026-68820<1%7.0
Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
published Aug 11, 2026Microsoft Windows Ancillary Function Driver for WinSock (afd.sys)KEV
CVE-2025-4911399%8.8
Authenticated PHP Object Deserialization RCE in Roundcube Webmail
published Jun 2, 2025Roundcube WebmailKEVPoC ×2
CVE-2026-654002%9.8
Authentication Bypass in Apple macOS Screen Sharing
published Aug 6, 2026Apple macOS (Screen Sharing service)KEV
CVE-2026-593103%9.8
Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
published Jul 30, 2026Broadcom (VMware) vCenter ServerKEVRansomwarePoC ×2

Appears with

Microsoftvendor · 4
ForestTigerproduct · 3
Windowsproduct · 3
RelayShellmalware · 3
Troyproduct · 3
Lazarus Groupthreat actor · 3
Check Pointvendor · 3
MISTPENmalware · 3
ForestTigermalware · 3
FudModulemalware · 2
Lockheed Martinvendor · 2
Enveilorganization · 2
FudModuleproduct · 2
Lockheed Martinorganization · 2
SecurityPDFproduct · 2
Enveilvendor · 2

Entities are extracted by the model from each article. First seen Aug 12, 2026, last mentioned Aug 17, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.