<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-13T22:52:47.366889+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/af29f36f-c904-441b-a021-62ed657d7540/export</id>
    <title>af29f36f-c904-441b-a021-62ed657d7540</title>
    <updated>2026-08-13T22:52:47.393452+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "af29f36f-c904-441b-a021-62ed657d7540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3msyedzd7qk22", "content": "Lazarus hackers exploited Windows zero-day to target defense firms\n\nNorth Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation Dream Job campaign. [...]\n#hackernews #news", "creation_timestamp": "2026-08-13T19:19:08.739576Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/af29f36f-c904-441b-a021-62ed657d7540/export"/>
    <published>2026-08-13T19:19:08.739576+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c67d1352-5902-445f-9744-de01f6255d7c/export</id>
    <title>c67d1352-5902-445f-9744-de01f6255d7c</title>
    <updated>2026-08-13T22:52:47.395699+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c67d1352-5902-445f-9744-de01f6255d7c", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e9dce850-6228-407d-83ae-44d07d2b64be", "content": "", "creation_timestamp": "2026-08-13T18:00:02.225811Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c67d1352-5902-445f-9744-de01f6255d7c/export"/>
    <published>2026-08-13T18:00:02.225811+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e6c514a9-0ec9-4a45-aeb5-a795ae316403/export</id>
    <title>e6c514a9-0ec9-4a45-aeb5-a795ae316403</title>
    <updated>2026-08-13T22:52:47.395826+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e6c514a9-0ec9-4a45-aeb5-a795ae316403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/ian-bishop.bsky.social/post/3msy7uuyf5c2h", "content": "Microsoft's August Patch Tuesday fixes 790 CVEs, including CVE-2026-68820, an actively exploited Windows AFD for WinSock flaw. 109 rated critical, 111 allow remote code execution.\n\nsecnewsheadlines.com?utm_source=b...", "creation_timestamp": "2026-08-13T17:59:09.029968Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e6c514a9-0ec9-4a45-aeb5-a795ae316403/export"/>
    <published>2026-08-13T17:59:09.029968+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aba8b9c5-9367-4262-bc1f-b54f5ef7fec8/export</id>
    <title>aba8b9c5-9367-4262-bc1f-b54f5ef7fec8</title>
    <updated>2026-08-13T22:52:47.395929+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aba8b9c5-9367-4262-bc1f-b54f5ef7fec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3msy2ei7xtk2g", "content": "CVE-2026-68820: Windows AFD.sys Zero-Day socprime.com/blog/cve-202...", "creation_timestamp": "2026-08-13T16:20:28.899027Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aba8b9c5-9367-4262-bc1f-b54f5ef7fec8/export"/>
    <published>2026-08-13T16:20:28.899027+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3ef52a96-3313-4f98-a835-fec404973431/export</id>
    <title>3ef52a96-3313-4f98-a835-fec404973431</title>
    <updated>2026-08-13T22:52:47.396025+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3ef52a96-3313-4f98-a835-fec404973431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3msxza4crdd2i", "content": "\ud83d\udce2 Lazarus Group exploite un zero-day Windows (CVE-2026-68820) via de fausses offres d'emploi\n\nCet article documente une nouvelle vague de la campagne Operation Dream Job, attribu\u00e9e au groupe nord-cor\u00e9en Lazarus, ciblant les\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#LazarusGroup #ZeroDay #Cyberveille", "creation_timestamp": "2026-08-13T16:00:07.120361Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3ef52a96-3313-4f98-a835-fec404973431/export"/>
    <published>2026-08-13T16:00:07.120361+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bf03efa1-82c6-422b-9cb8-d8a7bb258444/export</id>
    <title>bf03efa1-82c6-422b-9cb8-d8a7bb258444</title>
    <updated>2026-08-13T22:52:47.396125+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bf03efa1-82c6-422b-9cb8-d8a7bb258444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3msxqw2zosh2v", "content": "Amerikaanse overheidsinstantie CISA voegt actief misbruikte Windows-kwetsbaarhei\n\nDe U.S. Cybersecurity and Infrastructure Security Agency (CISA) heeft op 11 augustus 2026 de kwetsbaarheid CVE-2026-68820 toegevoegd aan de catalogus van bekende ge\u00ebxploiteerde kwetsbaarheden. Deze kwetsbaarhei...", "creation_timestamp": "2026-08-13T13:31:19.958578Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bf03efa1-82c6-422b-9cb8-d8a7bb258444/export"/>
    <published>2026-08-13T13:31:19.958578+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/01d94a7b-e9bd-4387-adac-b59835d7ca29/export</id>
    <title>01d94a7b-e9bd-4387-adac-b59835d7ca29</title>
    <updated>2026-08-13T22:52:47.396221+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "01d94a7b-e9bd-4387-adac-b59835d7ca29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3msxqpxz2ps2h", "content": "(CISA TS-SOC) CVE-2026-68820 \u2013 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free\u00a0Vulnerability\n\nSeverity: HIGH Impact Summary: Allows an authorized attacker to elevate privileges locally via a use-after-free vulnerability in the Windows Ancillary\u2026\n\nhttps://thecybermind.co/join", "creation_timestamp": "2026-08-13T13:27:55.358679Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/01d94a7b-e9bd-4387-adac-b59835d7ca29/export"/>
    <published>2026-08-13T13:27:55.358679+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7a1dc003-4cff-4337-bb6f-2f5ec7c86391/export</id>
    <title>7a1dc003-4cff-4337-bb6f-2f5ec7c86391</title>
    <updated>2026-08-13T22:52:47.396317+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7a1dc003-4cff-4337-bb6f-2f5ec7c86391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3msxppqj33v2x", "content": "A Windows zero-day fixed by Microsoft $MSFT this week was already exploited by North Korean hackers to plant kernel-mode rootkits. CVE-2026-68820 lets a low-privileged local attacker escalate to SYSTEM via a flaw in the WinSock driver, part of Operation Dream Job. Source: The Hacker News.", "creation_timestamp": "2026-08-13T13:09:53.414002Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7a1dc003-4cff-4337-bb6f-2f5ec7c86391/export"/>
    <published>2026-08-13T13:09:53.414002+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/358bcbf1-7b17-440c-9f0a-6553289ae3d6/export</id>
    <title>358bcbf1-7b17-440c-9f0a-6553289ae3d6</title>
    <updated>2026-08-13T22:52:47.396409+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "358bcbf1-7b17-440c-9f0a-6553289ae3d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "MISP/108882d1-4b07-4166-bc3e-ad99465e0526", "content": "", "creation_timestamp": "2026-08-13T12:15:06.052657Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/358bcbf1-7b17-440c-9f0a-6553289ae3d6/export"/>
    <published>2026-08-13T12:15:06.052657+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3daf50ce-76f5-4759-9f4a-79280c082025/export</id>
    <title>3daf50ce-76f5-4759-9f4a-79280c082025</title>
    <updated>2026-08-13T22:52:47.396499+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3daf50ce-76f5-4759-9f4a-79280c082025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/veltiosihello.bsky.social/post/3msxkut6zva2l", "content": "Microsoft's August Patch Tuesday fixes a zero-day in the WinSock driver (CVE-2026-68820) already under active exploit. Unauthorized privilege escalation to SYSTEM. That's the gap every SME leaves open with break-fix thinking. It doesn't have to be that way.\n\nhttps://s.veltiosisolutions.com/9OfDc", "creation_timestamp": "2026-08-13T11:43:15.410297Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3daf50ce-76f5-4759-9f4a-79280c082025/export"/>
    <published>2026-08-13T11:43:15.410297+00:00</published>
  </entry>
</feed>
