Feed›Vulnerability›Lazarus hackers exploited Windows zero-day to target defense...

VulnerabilityBleeping Computer

8.8 — CRITICAL

Lazarus hackers exploited Windows zero-day to target defense firms

📅 12 August 2026 at 15:38 UTC📰 Bleeping ComputerView original source ↗

North Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation Dream Job campaign. [...]

🤖 AI BriefingAuto-generated threat analysis

🔍Threat Overview

North Korean hackers exploited a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation Dream Job campaign, compromising at least one organization in France and using it for spear-phishing attacks on additional targets.

⚙️Technical Details

CVEs

CVE-2026-68820CVE-2025-49113

Affected Systems

Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21H2Microsoft Windows 10 22H2Microsoft Windows 11 23H2Debian Linux

Attack Vectors

LOCALNETWORK

💥Impact Assessment

Severity: Critical

🛡️Recommended Actions

1Apply the latest Windows security updates to prevent exploitation of CVE-2026-68820.

2Ensure Roundcube Webmail is updated to version 1.5.10 or later to patch CVE-2025-49113.

3Implement additional security controls, such as EDR telemetry and security product interference detection.

📦Affected Products

Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21H2Microsoft Windows 10 22H2Microsoft Windows 11 23H2Microsoft Windows 11 24H2Microsoft Windows 11 25H2Microsoft Windows 11 26H1Microsoft Windows Server 2012Microsoft Windows Server 2016

🔐NVD Verified DataVERIFIED

CVE-2026-68820 ↗CVSS 7 — HIGH

Attack Vector

LOCAL

Complexity

HIGH

Vector String

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416

Affected Products (CPE)

Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21H2Microsoft Windows 10 22H2Microsoft Windows 11 23H2