<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 01 Sep 2026 16:43:44 +0000</lastBuildDate>
    <item>
      <title>f74d986c-1978-49b5-9f9e-358dc04037c3</title>
      <link>https://vulnerability.circl.lu/sighting/f74d986c-1978-49b5-9f9e-358dc04037c3/export</link>
      <description>{"uuid": "f74d986c-1978-49b5-9f9e-358dc04037c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mue52p5nug2x", "content": "Daily IT Security Digest \u2014 2026-08-31\n- **Windows afd.sys zero-day (CVE-2026-68820)**: Exploited by Lazarus Group for SYSTEM access in defense/aerospace sectors. Patch released 2026-08-11; organizations should prioritize updates and check for ForestTiger/Troy backdoors.", "creation_timestamp": "2026-08-31T05:05:48.288700Z"}</description>
      <content:encoded>{"uuid": "f74d986c-1978-49b5-9f9e-358dc04037c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mue52p5nug2x", "content": "Daily IT Security Digest \u2014 2026-08-31\n- **Windows afd.sys zero-day (CVE-2026-68820)**: Exploited by Lazarus Group for SYSTEM access in defense/aerospace sectors. Patch released 2026-08-11; organizations should prioritize updates and check for ForestTiger/Troy backdoors.", "creation_timestamp": "2026-08-31T05:05:48.288700Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f74d986c-1978-49b5-9f9e-358dc04037c3/export</guid>
      <pubDate>Mon, 31 Aug 2026 05:05:48 +0000</pubDate>
    </item>
    <item>
      <title>937a3ac8-5223-43f0-9a1b-2de6f2b901d7</title>
      <link>https://vulnerability.circl.lu/sighting/937a3ac8-5223-43f0-9a1b-2de6f2b901d7/export</link>
      <description>{"uuid": "937a3ac8-5223-43f0-9a1b-2de6f2b901d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "published-proof-of-concept", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-29T00:00:16.376203Z"}</description>
      <content:encoded>{"uuid": "937a3ac8-5223-43f0-9a1b-2de6f2b901d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "published-proof-of-concept", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-29T00:00:16.376203Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/937a3ac8-5223-43f0-9a1b-2de6f2b901d7/export</guid>
      <pubDate>Sat, 29 Aug 2026 00:00:16 +0000</pubDate>
    </item>
    <item>
      <title>0de94549-fcf4-4f2e-8084-d013b38ffa97</title>
      <link>https://vulnerability.circl.lu/sighting/0de94549-fcf4-4f2e-8084-d013b38ffa97/export</link>
      <description>{"uuid": "0de94549-fcf4-4f2e-8084-d013b38ffa97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mu4i4ooieh2q", "content": "\ud83d\udd34 CRITICAL: Microsoft Aug Patch Tuesday \u2014 421 CVEs fixed (62 Critical). WinSock zero-day CVE-2026-68820 (afd.sys use-after-free) actively exploited. Also: DNS Server RCE, QUIC RCE, TFTP RCE, HPC Pack RCE \u2014 all pre-auth, internet-facing. Prioritize patching. Src: SecurityWeek / BleepingComputer", "creation_timestamp": "2026-08-28T04:02:27.954046Z"}</description>
      <content:encoded>{"uuid": "0de94549-fcf4-4f2e-8084-d013b38ffa97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mu4i4ooieh2q", "content": "\ud83d\udd34 CRITICAL: Microsoft Aug Patch Tuesday \u2014 421 CVEs fixed (62 Critical). WinSock zero-day CVE-2026-68820 (afd.sys use-after-free) actively exploited. Also: DNS Server RCE, QUIC RCE, TFTP RCE, HPC Pack RCE \u2014 all pre-auth, internet-facing. Prioritize patching. Src: SecurityWeek / BleepingComputer", "creation_timestamp": "2026-08-28T04:02:27.954046Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0de94549-fcf4-4f2e-8084-d013b38ffa97/export</guid>
      <pubDate>Fri, 28 Aug 2026 04:02:27 +0000</pubDate>
    </item>
    <item>
      <title>781fa4f9-d116-4784-b3b1-b6e7b96ec79e</title>
      <link>https://vulnerability.circl.lu/sighting/781fa4f9-d116-4784-b3b1-b6e7b96ec79e/export</link>
      <description>{"uuid": "781fa4f9-d116-4784-b3b1-b6e7b96ec79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-28T00:00:53.024566Z"}</description>
      <content:encoded>{"uuid": "781fa4f9-d116-4784-b3b1-b6e7b96ec79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-28T00:00:53.024566Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/781fa4f9-d116-4784-b3b1-b6e7b96ec79e/export</guid>
      <pubDate>Fri, 28 Aug 2026 00:00:53 +0000</pubDate>
    </item>
    <item>
      <title>921b1612-c7e7-49cd-9598-0f11d058fb6a</title>
      <link>https://vulnerability.circl.lu/sighting/921b1612-c7e7-49cd-9598-0f11d058fb6a/export</link>
      <description>{"uuid": "921b1612-c7e7-49cd-9598-0f11d058fb6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-27T12:00:10.294869Z"}</description>
      <content:encoded>{"uuid": "921b1612-c7e7-49cd-9598-0f11d058fb6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-27T12:00:10.294869Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/921b1612-c7e7-49cd-9598-0f11d058fb6a/export</guid>
      <pubDate>Thu, 27 Aug 2026 12:00:10 +0000</pubDate>
    </item>
    <item>
      <title>231d2a0b-e803-4ebb-a815-f9e3115666d6</title>
      <link>https://vulnerability.circl.lu/sighting/231d2a0b-e803-4ebb-a815-f9e3115666d6/export</link>
      <description>{"uuid": "231d2a0b-e803-4ebb-a815-f9e3115666d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mu22zka2jf2v", "content": "Daily IT Security Digest \u2014 2026-08-27\nMastodon](https://infosec.exchange/@offseq/117092687906166890))\n\n## 2. CVE-2026-68820: Lazarus Group Exploits Windows afd.sys Zero-Day\n\nA critical zero-day vulnerability in Windows afd.sys is being weaponized by the North Korean Lazarus Group to gain", "creation_timestamp": "2026-08-27T05:02:44.621047Z"}</description>
      <content:encoded>{"uuid": "231d2a0b-e803-4ebb-a815-f9e3115666d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mu22zka2jf2v", "content": "Daily IT Security Digest \u2014 2026-08-27\nMastodon](https://infosec.exchange/@offseq/117092687906166890))\n\n## 2. CVE-2026-68820: Lazarus Group Exploits Windows afd.sys Zero-Day\n\nA critical zero-day vulnerability in Windows afd.sys is being weaponized by the North Korean Lazarus Group to gain", "creation_timestamp": "2026-08-27T05:02:44.621047Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/231d2a0b-e803-4ebb-a815-f9e3115666d6/export</guid>
      <pubDate>Thu, 27 Aug 2026 05:02:44 +0000</pubDate>
    </item>
    <item>
      <title>0a575d4e-d08d-4f71-9f5b-30007ec95794</title>
      <link>https://vulnerability.circl.lu/sighting/0a575d4e-d08d-4f71-9f5b-30007ec95794/export</link>
      <description>{"uuid": "0a575d4e-d08d-4f71-9f5b-30007ec95794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mtyieunn4k26", "content": "\ud83d\udea8 Alerta mundial CVE-2026-68820: El exploit zero-day en Windows AFD.sys usado por el grupo Lazarus www.newstecnicas.com/2026/08/aler...", "creation_timestamp": "2026-08-26T13:56:25.656923Z"}</description>
      <content:encoded>{"uuid": "0a575d4e-d08d-4f71-9f5b-30007ec95794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mtyieunn4k26", "content": "\ud83d\udea8 Alerta mundial CVE-2026-68820: El exploit zero-day en Windows AFD.sys usado por el grupo Lazarus www.newstecnicas.com/2026/08/aler...", "creation_timestamp": "2026-08-26T13:56:25.656923Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0a575d4e-d08d-4f71-9f5b-30007ec95794/export</guid>
      <pubDate>Wed, 26 Aug 2026 13:56:25 +0000</pubDate>
    </item>
    <item>
      <title>e23f48c0-4a80-4107-a020-47d1bb957d9e</title>
      <link>https://vulnerability.circl.lu/sighting/e23f48c0-4a80-4107-a020-47d1bb957d9e/export</link>
      <description>{"uuid": "e23f48c0-4a80-4107-a020-47d1bb957d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtxkkmqflx2k", "content": "Daily IT Security Digest \u2014 2026-08-26\nCVE-2026-68820: Lazarus Group Exploits Windows afd.sys Zero-Day\n\nA critical zero-day vulnerability in Windows afd.sys is being exploited by the North Korean Lazarus Group to gain SYSTEM-level access, specifically targeting defense and aerospace organizations.", "creation_timestamp": "2026-08-26T05:02:44.589616Z"}</description>
      <content:encoded>{"uuid": "e23f48c0-4a80-4107-a020-47d1bb957d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtxkkmqflx2k", "content": "Daily IT Security Digest \u2014 2026-08-26\nCVE-2026-68820: Lazarus Group Exploits Windows afd.sys Zero-Day\n\nA critical zero-day vulnerability in Windows afd.sys is being exploited by the North Korean Lazarus Group to gain SYSTEM-level access, specifically targeting defense and aerospace organizations.", "creation_timestamp": "2026-08-26T05:02:44.589616Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e23f48c0-4a80-4107-a020-47d1bb957d9e/export</guid>
      <pubDate>Wed, 26 Aug 2026 05:02:44 +0000</pubDate>
    </item>
    <item>
      <title>33258726-9144-4962-af1d-c2d4b260f474</title>
      <link>https://vulnerability.circl.lu/sighting/33258726-9144-4962-af1d-c2d4b260f474/export</link>
      <description>{"uuid": "33258726-9144-4962-af1d-c2d4b260f474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99686", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-68820_Mass_Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a maxprog-svg\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-25 17:59:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-68820 \u2014 Mass Exploit Framework Edition.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-26T00:00:07.534990Z"}</description>
      <content:encoded>{"uuid": "33258726-9144-4962-af1d-c2d4b260f474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99686", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-68820_Mass_Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a maxprog-svg\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-25 17:59:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-68820 \u2014 Mass Exploit Framework Edition.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-26T00:00:07.534990Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/33258726-9144-4962-af1d-c2d4b260f474/export</guid>
      <pubDate>Wed, 26 Aug 2026 00:00:07 +0000</pubDate>
    </item>
    <item>
      <title>31a93413-bc24-4377-b0a2-14b9e83b4a8b</title>
      <link>https://vulnerability.circl.lu/sighting/31a93413-bc24-4377-b0a2-14b9e83b4a8b/export</link>
      <description>{"uuid": "31a93413-bc24-4377-b0a2-14b9e83b4a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99686", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-68820_Mass_Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a maxprog-svg\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-25 17:59:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-68820 \u2014 Mass Exploit Framework Edition.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-25T22:00:03.528385Z"}</description>
      <content:encoded>{"uuid": "31a93413-bc24-4377-b0a2-14b9e83b4a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99686", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-68820_Mass_Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a maxprog-svg\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-25 17:59:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-68820 \u2014 Mass Exploit Framework Edition.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-25T22:00:03.528385Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/31a93413-bc24-4377-b0a2-14b9e83b4a8b/export</guid>
      <pubDate>Tue, 25 Aug 2026 22:00:03 +0000</pubDate>
    </item>
  </channel>
</rss>
