{"uuid": "d2967c1b-1d8e-4c1c-8c19-bac4044b3d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3msx6fx5wra2v", "content": "Lazarus deployed a kernel rootkit via a Windows WinSock zero-day (CVE-2026-68820) before Microsoft patched it. 4th afd.sys 0-day exploited since 2022. Same actor. Patch now.\n\n\ud83c\uddec\ud83c\udde7 zurl.co/Za3Zl\n\ud83c\udde9\ud83c\uddea zurl.co/MYXqX \n\n#CyberSecurity #PatchTuesday #Lazarus", "creation_timestamp": "2026-08-13T08:00:12.084092Z"}