Troy

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenAug 13, 2026
Last mentionedAug 17, 2026

Timeline

3 articles · newest first

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

Weekly recap: suspected China-nexus APT exploited VMware vCenter CVE-2026-59310, Lazarus used Windows zero-day CVE-2026-68820, and macOS flaw dropped Monero miners.

The Hacker NewsAug 17, 17:57 UTC · Aug 17, 2026Exploit / PoCExploitedCVE-2026-59310 CVE-2026-65400 CVE-2026-688203

Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

Lazarus exploits Windows AFD.sys zero-day CVE-2026-68820 in Operation Dream Job to deploy Troy backdoor at defense firms.

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2026Threat actorExploitedCVE-2026-68820 CVE-2025-491137 · 2 reads

North Korean Lazarus Group Uses Windows Zero

Check Point links Lazarus Group's Operation Dream Job to a new Windows zero-day, CVE-2026-68820, targeting defense workers with fake Lockheed Martin job offers.

Security AffairsAug 13, 07:05 UTC · Aug 13, 2026Threat actorExploitedCVE-2026-68820 CVE-2025-491133 · 1 read

Related CVEs

by mentions

CVE-2026-68820<1%7.0
Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
published Aug 11, 2026Microsoft Windows Ancillary Function Driver for WinSock (afd.sys)KEV
CVE-2025-4911399%8.8
Authenticated PHP Object Deserialization RCE in Roundcube Webmail
published Jun 2, 2025Roundcube WebmailKEVPoC ×2
CVE-2026-654002%9.8
Authentication Bypass in Apple macOS Screen Sharing
published Aug 6, 2026Apple macOS (Screen Sharing service)KEV
CVE-2026-593103%9.8
Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
published Jul 30, 2026Broadcom (VMware) vCenter ServerKEVRansomwarePoC ×2

Appears with

Troymalware · 3
Microsoftvendor · 3
Lazarus Groupthreat actor · 3
ForestTigermalware · 3
ForestTigerproduct · 3
RelayShellproduct · 2
Windowsproduct · 2
MISTPENmalware · 2
Check Pointvendor · 2
Lockheed Martinvendor · 2
Check Point Researchorganization · 2
RelayShellmalware · 2
FudModuleproduct · 2
MISTPENproduct · 2
Enveilvendor · 2
SecurityPDFproduct · 1

Entities are extracted by the model from each article. First seen Aug 13, 2026, last mentioned Aug 17, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.