{"uuid": "985bed72-3efc-4ce9-8693-112d0d46b9f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://t.me/pphm_HackerNews/2612", "content": "\ud83d\udd34 North Korean Lazarus Group Uses Windows Zero-Day in Operation Dream Job\n\nLazarus targets defense professionals with fake Lockheed Martin jobs, exploiting a Windows zero-day to deploy backdoors and evade security controls.\n\nCheck Point Research has uncovered a new wave of Operation Dream Job, the long-running North Korean campaign that lures defense and aerospace professionals with convincing fake job offers. This iteration is more dangerous than previous versions: it includes a previously unknown Windows vulnerability now patched as CVE-2026-68820, a newly documented backdoor called Troy, and command infrastructure built almost entirely from legitimate servers the attackers didn\u2019t build, they hijacked them. Targets confirmed in France, Germany, Brazil, and India.", "creation_timestamp": "2026-08-23T00:00:47.921260Z"}