<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 13 Aug 2026 22:52:48 +0000</lastBuildDate>
    <item>
      <title>af29f36f-c904-441b-a021-62ed657d7540</title>
      <link>https://vulnerability.circl.lu/sighting/af29f36f-c904-441b-a021-62ed657d7540/export</link>
      <description>{"uuid": "af29f36f-c904-441b-a021-62ed657d7540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3msyedzd7qk22", "content": "Lazarus hackers exploited Windows zero-day to target defense firms\n\nNorth Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation Dream Job campaign. [...]\n#hackernews #news", "creation_timestamp": "2026-08-13T19:19:08.739576Z"}</description>
      <content:encoded>{"uuid": "af29f36f-c904-441b-a021-62ed657d7540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3msyedzd7qk22", "content": "Lazarus hackers exploited Windows zero-day to target defense firms\n\nNorth Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation Dream Job campaign. [...]\n#hackernews #news", "creation_timestamp": "2026-08-13T19:19:08.739576Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/af29f36f-c904-441b-a021-62ed657d7540/export</guid>
      <pubDate>Thu, 13 Aug 2026 19:19:08 +0000</pubDate>
    </item>
    <item>
      <title>c67d1352-5902-445f-9744-de01f6255d7c</title>
      <link>https://vulnerability.circl.lu/sighting/c67d1352-5902-445f-9744-de01f6255d7c/export</link>
      <description>{"uuid": "c67d1352-5902-445f-9744-de01f6255d7c", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e9dce850-6228-407d-83ae-44d07d2b64be", "content": "", "creation_timestamp": "2026-08-13T18:00:02.225811Z"}</description>
      <content:encoded>{"uuid": "c67d1352-5902-445f-9744-de01f6255d7c", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e9dce850-6228-407d-83ae-44d07d2b64be", "content": "", "creation_timestamp": "2026-08-13T18:00:02.225811Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c67d1352-5902-445f-9744-de01f6255d7c/export</guid>
      <pubDate>Thu, 13 Aug 2026 18:00:02 +0000</pubDate>
    </item>
    <item>
      <title>e6c514a9-0ec9-4a45-aeb5-a795ae316403</title>
      <link>https://vulnerability.circl.lu/sighting/e6c514a9-0ec9-4a45-aeb5-a795ae316403/export</link>
      <description>{"uuid": "e6c514a9-0ec9-4a45-aeb5-a795ae316403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/ian-bishop.bsky.social/post/3msy7uuyf5c2h", "content": "Microsoft's August Patch Tuesday fixes 790 CVEs, including CVE-2026-68820, an actively exploited Windows AFD for WinSock flaw. 109 rated critical, 111 allow remote code execution.\n\nsecnewsheadlines.com?utm_source=b...", "creation_timestamp": "2026-08-13T17:59:09.029968Z"}</description>
      <content:encoded>{"uuid": "e6c514a9-0ec9-4a45-aeb5-a795ae316403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/ian-bishop.bsky.social/post/3msy7uuyf5c2h", "content": "Microsoft's August Patch Tuesday fixes 790 CVEs, including CVE-2026-68820, an actively exploited Windows AFD for WinSock flaw. 109 rated critical, 111 allow remote code execution.\n\nsecnewsheadlines.com?utm_source=b...", "creation_timestamp": "2026-08-13T17:59:09.029968Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e6c514a9-0ec9-4a45-aeb5-a795ae316403/export</guid>
      <pubDate>Thu, 13 Aug 2026 17:59:09 +0000</pubDate>
    </item>
    <item>
      <title>aba8b9c5-9367-4262-bc1f-b54f5ef7fec8</title>
      <link>https://vulnerability.circl.lu/sighting/aba8b9c5-9367-4262-bc1f-b54f5ef7fec8/export</link>
      <description>{"uuid": "aba8b9c5-9367-4262-bc1f-b54f5ef7fec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3msy2ei7xtk2g", "content": "CVE-2026-68820: Windows AFD.sys Zero-Day socprime.com/blog/cve-202...", "creation_timestamp": "2026-08-13T16:20:28.899027Z"}</description>
      <content:encoded>{"uuid": "aba8b9c5-9367-4262-bc1f-b54f5ef7fec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3msy2ei7xtk2g", "content": "CVE-2026-68820: Windows AFD.sys Zero-Day socprime.com/blog/cve-202...", "creation_timestamp": "2026-08-13T16:20:28.899027Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/aba8b9c5-9367-4262-bc1f-b54f5ef7fec8/export</guid>
      <pubDate>Thu, 13 Aug 2026 16:20:28 +0000</pubDate>
    </item>
    <item>
      <title>3ef52a96-3313-4f98-a835-fec404973431</title>
      <link>https://vulnerability.circl.lu/sighting/3ef52a96-3313-4f98-a835-fec404973431/export</link>
      <description>{"uuid": "3ef52a96-3313-4f98-a835-fec404973431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3msxza4crdd2i", "content": "\ud83d\udce2 Lazarus Group exploite un zero-day Windows (CVE-2026-68820) via de fausses offres d'emploi\n\nCet article documente une nouvelle vague de la campagne Operation Dream Job, attribu\u00e9e au groupe nord-cor\u00e9en Lazarus, ciblant les\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#LazarusGroup #ZeroDay #Cyberveille", "creation_timestamp": "2026-08-13T16:00:07.120361Z"}</description>
      <content:encoded>{"uuid": "3ef52a96-3313-4f98-a835-fec404973431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3msxza4crdd2i", "content": "\ud83d\udce2 Lazarus Group exploite un zero-day Windows (CVE-2026-68820) via de fausses offres d'emploi\n\nCet article documente une nouvelle vague de la campagne Operation Dream Job, attribu\u00e9e au groupe nord-cor\u00e9en Lazarus, ciblant les\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#LazarusGroup #ZeroDay #Cyberveille", "creation_timestamp": "2026-08-13T16:00:07.120361Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3ef52a96-3313-4f98-a835-fec404973431/export</guid>
      <pubDate>Thu, 13 Aug 2026 16:00:07 +0000</pubDate>
    </item>
    <item>
      <title>bf03efa1-82c6-422b-9cb8-d8a7bb258444</title>
      <link>https://vulnerability.circl.lu/sighting/bf03efa1-82c6-422b-9cb8-d8a7bb258444/export</link>
      <description>{"uuid": "bf03efa1-82c6-422b-9cb8-d8a7bb258444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3msxqw2zosh2v", "content": "Amerikaanse overheidsinstantie CISA voegt actief misbruikte Windows-kwetsbaarhei\n\nDe U.S. Cybersecurity and Infrastructure Security Agency (CISA) heeft op 11 augustus 2026 de kwetsbaarheid CVE-2026-68820 toegevoegd aan de catalogus van bekende ge\u00ebxploiteerde kwetsbaarheden. Deze kwetsbaarhei...", "creation_timestamp": "2026-08-13T13:31:19.958578Z"}</description>
      <content:encoded>{"uuid": "bf03efa1-82c6-422b-9cb8-d8a7bb258444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3msxqw2zosh2v", "content": "Amerikaanse overheidsinstantie CISA voegt actief misbruikte Windows-kwetsbaarhei\n\nDe U.S. Cybersecurity and Infrastructure Security Agency (CISA) heeft op 11 augustus 2026 de kwetsbaarheid CVE-2026-68820 toegevoegd aan de catalogus van bekende ge\u00ebxploiteerde kwetsbaarheden. Deze kwetsbaarhei...", "creation_timestamp": "2026-08-13T13:31:19.958578Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bf03efa1-82c6-422b-9cb8-d8a7bb258444/export</guid>
      <pubDate>Thu, 13 Aug 2026 13:31:19 +0000</pubDate>
    </item>
    <item>
      <title>01d94a7b-e9bd-4387-adac-b59835d7ca29</title>
      <link>https://vulnerability.circl.lu/sighting/01d94a7b-e9bd-4387-adac-b59835d7ca29/export</link>
      <description>{"uuid": "01d94a7b-e9bd-4387-adac-b59835d7ca29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3msxqpxz2ps2h", "content": "(CISA TS-SOC) CVE-2026-68820 \u2013 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free\u00a0Vulnerability\n\nSeverity: HIGH Impact Summary: Allows an authorized attacker to elevate privileges locally via a use-after-free vulnerability in the Windows Ancillary\u2026\n\nhttps://thecybermind.co/join", "creation_timestamp": "2026-08-13T13:27:55.358679Z"}</description>
      <content:encoded>{"uuid": "01d94a7b-e9bd-4387-adac-b59835d7ca29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3msxqpxz2ps2h", "content": "(CISA TS-SOC) CVE-2026-68820 \u2013 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free\u00a0Vulnerability\n\nSeverity: HIGH Impact Summary: Allows an authorized attacker to elevate privileges locally via a use-after-free vulnerability in the Windows Ancillary\u2026\n\nhttps://thecybermind.co/join", "creation_timestamp": "2026-08-13T13:27:55.358679Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/01d94a7b-e9bd-4387-adac-b59835d7ca29/export</guid>
      <pubDate>Thu, 13 Aug 2026 13:27:55 +0000</pubDate>
    </item>
    <item>
      <title>7a1dc003-4cff-4337-bb6f-2f5ec7c86391</title>
      <link>https://vulnerability.circl.lu/sighting/7a1dc003-4cff-4337-bb6f-2f5ec7c86391/export</link>
      <description>{"uuid": "7a1dc003-4cff-4337-bb6f-2f5ec7c86391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3msxppqj33v2x", "content": "A Windows zero-day fixed by Microsoft $MSFT this week was already exploited by North Korean hackers to plant kernel-mode rootkits. CVE-2026-68820 lets a low-privileged local attacker escalate to SYSTEM via a flaw in the WinSock driver, part of Operation Dream Job. Source: The Hacker News.", "creation_timestamp": "2026-08-13T13:09:53.414002Z"}</description>
      <content:encoded>{"uuid": "7a1dc003-4cff-4337-bb6f-2f5ec7c86391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3msxppqj33v2x", "content": "A Windows zero-day fixed by Microsoft $MSFT this week was already exploited by North Korean hackers to plant kernel-mode rootkits. CVE-2026-68820 lets a low-privileged local attacker escalate to SYSTEM via a flaw in the WinSock driver, part of Operation Dream Job. Source: The Hacker News.", "creation_timestamp": "2026-08-13T13:09:53.414002Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7a1dc003-4cff-4337-bb6f-2f5ec7c86391/export</guid>
      <pubDate>Thu, 13 Aug 2026 13:09:53 +0000</pubDate>
    </item>
    <item>
      <title>358bcbf1-7b17-440c-9f0a-6553289ae3d6</title>
      <link>https://vulnerability.circl.lu/sighting/358bcbf1-7b17-440c-9f0a-6553289ae3d6/export</link>
      <description>{"uuid": "358bcbf1-7b17-440c-9f0a-6553289ae3d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "MISP/108882d1-4b07-4166-bc3e-ad99465e0526", "content": "", "creation_timestamp": "2026-08-13T12:15:06.052657Z"}</description>
      <content:encoded>{"uuid": "358bcbf1-7b17-440c-9f0a-6553289ae3d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "MISP/108882d1-4b07-4166-bc3e-ad99465e0526", "content": "", "creation_timestamp": "2026-08-13T12:15:06.052657Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/358bcbf1-7b17-440c-9f0a-6553289ae3d6/export</guid>
      <pubDate>Thu, 13 Aug 2026 12:15:06 +0000</pubDate>
    </item>
    <item>
      <title>3daf50ce-76f5-4759-9f4a-79280c082025</title>
      <link>https://vulnerability.circl.lu/sighting/3daf50ce-76f5-4759-9f4a-79280c082025/export</link>
      <description>{"uuid": "3daf50ce-76f5-4759-9f4a-79280c082025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/veltiosihello.bsky.social/post/3msxkut6zva2l", "content": "Microsoft's August Patch Tuesday fixes a zero-day in the WinSock driver (CVE-2026-68820) already under active exploit. Unauthorized privilege escalation to SYSTEM. That's the gap every SME leaves open with break-fix thinking. It doesn't have to be that way.\n\nhttps://s.veltiosisolutions.com/9OfDc", "creation_timestamp": "2026-08-13T11:43:15.410297Z"}</description>
      <content:encoded>{"uuid": "3daf50ce-76f5-4759-9f4a-79280c082025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/veltiosihello.bsky.social/post/3msxkut6zva2l", "content": "Microsoft's August Patch Tuesday fixes a zero-day in the WinSock driver (CVE-2026-68820) already under active exploit. Unauthorized privilege escalation to SYSTEM. That's the gap every SME leaves open with break-fix thinking. It doesn't have to be that way.\n\nhttps://s.veltiosisolutions.com/9OfDc", "creation_timestamp": "2026-08-13T11:43:15.410297Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3daf50ce-76f5-4759-9f4a-79280c082025/export</guid>
      <pubDate>Thu, 13 Aug 2026 11:43:15 +0000</pubDate>
    </item>
  </channel>
</rss>
