Developing3 outlets · over 7 hours
Lazarus Exploits Windows Zero-Day in Defense Attacks
Lazarus Group exploited Windows zero-day CVE-2026-68820, a use-after-free in AFD.sys, to gain SYSTEM privileges and deploy the FudModule rootkit and new Troy backdoor. The Operation Dream Job campaign targeted defense and aerospace firms in France, Germany, Brazil, and India, using compromised Roundcube servers with RelayShell webshells.