CRITICALZero Day
Global

Lazarus hackers exploited Windows zero-day to target defense firms

·Source: BleepingComputer

Updated:

Executive Summary

North Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation Dream Job campaign. [...]

Analysis

North Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation Dream Job campaign. [...]

Indicators of Compromise (1)

CVE (1)
CVE-2026-68820
NVDMITRE CVE
Source Attribution

Originally published by BleepingComputer on Aug 12, 2026.

Related Threats

CRITICALZero Day

Lazarus Exploited a Windows Zero-Day: Inside CVE-2026-68820 and AFD.sys

[object Object]

CVE-2026-68820
r/cybersecurity
CRITICALVulnerability

CVE-2026-68820 is in KEV. Here Is What CISA BOD 26-04 Actually Requires Now

Executive Summary CVE-2026-68820 is an actively exploited Windows vulnerability listed in CISA’s Known Exploited Vulnerabilities (KEV) Catalog, with a remediation deadline as suggested by CISA BOD 26-04. CISA BOD 26-04 introduces risk-based remediation timelines ranging from 3 to 14 days, increasing the pressure on teams to move quickly from patch availability to verified remediation. Installing [

CVE-2026-68820
Qualys Blog
CRITICALZero Day

Patch Tuesday August 2026: A zero-day WinSock driver hole under exploit, and a maximum severity SAP vulnerability

A currently exploited zero-day elevation of privilege vulnerability that needs to be patched in a Windows driver for WinSock is the highlight of the 398 fixes issued today in Microsoft’s August Patch Tuesday releases. The hole is in Windows’ Ancillary Function Driver for WinSock ( CVE-2026-68820 ), which, according to Todd Schell , principal product manager at Ivanti, has been a recurring target f

CVE-2026-68820CVE-2026-58231
CSO Online