North Korean Lazarus Group Uses Windows Zero
Check Point links Lazarus Group's Operation Dream Job to a new Windows zero-day, CVE-2026-68820, targeting defense workers with fake Lockheed Martin job offers.
84
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenAug 12, 2026
- Last mentionedAug 13, 2026
Timeline
2 articles · newest firstLazarus hackers pair fake job offers with Windows zero-day exploit
Lazarus' Operation Dream Job targets the defense sector with fake job offers, a Windows LPE zero-day (CVE-2026-68820), and new Troy and RelayShell backdoors.
82
Related CVEs
by mentions- CVE-2025-4911399%8.8Authenticated PHP Object Deserialization RCE in Roundcube Webmail
- CVE-2026-68820<1%7.0Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
Appears with
- Microsoftorganization · 2
- MISTPENmalware · 2
- FudModulemalware · 2
- Microsoftvendor · 2
- RelayShellmalware · 2
- Troymalware · 2
- Check Pointvendor · 2
- Lockheed Martinorganization · 2
- Windowsproduct · 2
- ESETorganization · 1
- RelayShellproduct · 1
- SecurityPDFproduct · 1
- Lazarus Grouporganization · 1
- CERT-UAvendor · 1
- Operation Dream Joborganization · 1
- Sandwormthreat actor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.