Lazarus hackers exploited Windows zero-day to target defense firms

By Bill Toulas

AI Summary

North Korea's Lazarus Group exploited Windows zero-day CVE-2026-68820 as part of Operation Dream Job to deploy the previously unknown ForestTiger backdoor against defense and aerospace companies in France, Germany, Brazil, and India. CISA issued a two-week remediation deadline for federal agencies. Check Point Research attributed the campaign, which used fake job offer lures targeting IT professionals.

Read full article → https://www.bleepingcomputer.com/news/security/laz…

Relevance score: 91.0/100

# More from August 13

1
Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days BleepingComputer
3
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations The Hacker News
4
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access The Hacker News
5
Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws The Hacker News
6
Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS The Hacker News
7
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code The Hacker News
8
Sandworm hackers target IT pros with trojanized WireGuard VPN client BleepingComputer
9
DeadLock ransomware uses blockchain to resist infrastructure takedown BleepingComputer
10
Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA Dark Reading