SecurityPDF

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenAug 12, 2026
Last mentionedAug 15, 2026

Timeline

2 articles · newest first

Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

Lazarus exploits Windows AFD.sys zero-day CVE-2026-68820 in Operation Dream Job to deploy Troy backdoor at defense firms.

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2026Threat actorExploitedCVE-2026-68820 CVE-2025-491137 · 2 reads

Lazarus hackers pair fake job offers with Windows zero-day exploit

Lazarus' Operation Dream Job targets the defense sector with fake job offers, a Windows LPE zero-day (CVE-2026-68820), and new Troy and RelayShell backdoors.

Help Net SecurityAug 12, 00:00 UTC · Aug 12, 2026Threat actorExploitedCVE-2026-68820 CVE-2025-491133 · 2 reads

Related CVEs

by mentions

CVE-2025-4911399%8.8
Authenticated PHP Object Deserialization RCE in Roundcube Webmail
published Jun 2, 2025Roundcube WebmailKEVPoC ×2
CVE-2026-68820<1%7.0
Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
published Aug 11, 2026Microsoft Windows Ancillary Function Driver for WinSock (afd.sys)KEV

Appears with

RelayShellmalware · 2
MISTPENmalware · 2
Roundcubeproduct · 2
Troymalware · 2
Windowsproduct · 2
Microsoftvendor · 2
Check Pointvendor · 2
ESETorganization · 1
UAC-0145threat actor · 1
Enveilvendor · 1
defense sectorvictim · 1
RelayShellproduct · 1
CERT-UAvendor · 1
APT44threat actor · 1
CERT-UAorganization · 1
ForestTigermalware · 1

Entities are extracted by the model from each article. First seen Aug 12, 2026, last mentioned Aug 15, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.