https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 12 Aug 2026 18:30:50 +0000 https://vulnerability.circl.lu/sighting/206d724f-4e94-4f25-8d5e-017de5a8a364/export {"uuid": "206d724f-4e94-4f25-8d5e-017de5a8a364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msvpidxjor2h", "content": "Lazarus-linked hackers are exploiting Windows zero-day CVE-2026-68820 in Operation Dream Job to gain SYSTEM access, targeting defense, aerospace, and aviation firms with FudModule, Troy, and RelayShell. #Lazarus #NorthKorea #Windows0day", "creation_timestamp": "2026-08-12T18:00:26.473449Z"} {"uuid": "206d724f-4e94-4f25-8d5e-017de5a8a364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msvpidxjor2h", "content": "Lazarus-linked hackers are exploiting Windows zero-day CVE-2026-68820 in Operation Dream Job to gain SYSTEM access, targeting defense, aerospace, and aviation firms with FudModule, Troy, and RelayShell. #Lazarus #NorthKorea #Windows0day", "creation_timestamp": "2026-08-12T18:00:26.473449Z"} https://vulnerability.circl.lu/sighting/206d724f-4e94-4f25-8d5e-017de5a8a364/export Wed, 12 Aug 2026 18:00:26 +0000 https://vulnerability.circl.lu/sighting/3cb8795e-8048-4388-bcc8-7e2d8a488840/export {"uuid": "3cb8795e-8048-4388-bcc8-7e2d8a488840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://t.me/thehackernews/9793", "content": "\ud83d\udea8 Lazarus-linked attacks exploit a Windows zero-day for SYSTEM access.\n\nDream Job lures defense and aerospace targets with fake recruiter messages. One chain exploits CVE-2026-68820 for privilege escalation; another uses a trojanized PDF viewer to load the new Troy backdoor.\n\nSee how the attacks work: https://thehackernews.com/2026/08/lazarus-exploits-windows-zero-day-to.html", "creation_timestamp": "2026-08-12T18:00:03.830210Z"} {"uuid": "3cb8795e-8048-4388-bcc8-7e2d8a488840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://t.me/thehackernews/9793", "content": "\ud83d\udea8 Lazarus-linked attacks exploit a Windows zero-day for SYSTEM access.\n\nDream Job lures defense and aerospace targets with fake recruiter messages. One chain exploits CVE-2026-68820 for privilege escalation; another uses a trojanized PDF viewer to load the new Troy backdoor.\n\nSee how the attacks work: https://thehackernews.com/2026/08/lazarus-exploits-windows-zero-day-to.html", "creation_timestamp": "2026-08-12T18:00:03.830210Z"} https://vulnerability.circl.lu/sighting/3cb8795e-8048-4388-bcc8-7e2d8a488840/export Wed, 12 Aug 2026 18:00:03 +0000 https://vulnerability.circl.lu/sighting/f1d0cb9b-acfa-4674-83a9-1e840cee2b37/export {"uuid": "f1d0cb9b-acfa-4674-83a9-1e840cee2b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-68820", "type": "seen", "source": "https://bsky.app/profile/mentedehackers.bsky.social/post/3msvjuxzyhb2o", "content": "CISA ordena parchar vulnerabilidad de Windows explotada por Corea del Norte\n\nCISA da dos semanas a agencias federales para parchear CVE-2026-68820 en Winsock, fallo\u2026\n\nhttps://mentehackers.com/cisa-lazarus-cve-2026-68820-windows-parche-4435939e\n#Ciberseguridad #Tecnologia #MenteHackers", "creation_timestamp": "2026-08-12T16:20:07.688018Z"} {"uuid": "f1d0cb9b-acfa-4674-83a9-1e840cee2b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-68820", "type": "seen", "source": "https://bsky.app/profile/mentedehackers.bsky.social/post/3msvjuxzyhb2o", "content": "CISA ordena parchar vulnerabilidad de Windows explotada por Corea del Norte\n\nCISA da dos semanas a agencias federales para parchear CVE-2026-68820 en Winsock, fallo\u2026\n\nhttps://mentehackers.com/cisa-lazarus-cve-2026-68820-windows-parche-4435939e\n#Ciberseguridad #Tecnologia #MenteHackers", "creation_timestamp": "2026-08-12T16:20:07.688018Z"} https://vulnerability.circl.lu/sighting/f1d0cb9b-acfa-4674-83a9-1e840cee2b37/export Wed, 12 Aug 2026 16:20:07 +0000 https://vulnerability.circl.lu/sighting/db4f8c51-1f27-4cb5-9330-5d91fcd69e8e/export {"uuid": "db4f8c51-1f27-4cb5-9330-5d91fcd69e8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3msvjn34bwe26", "content": "Lazarus Group's \"Operation Dream Job\" is back, exploiting a Windows zero-day (CVE-2026-68820) to target defense firms. They're using a post-quantum rootkit to blind EDRs and telemetry, showing a terrifying leap in attack\u2026\n\nhttps://www.tpp.blog/1fdd4oh\n\n#cybersecurity #lazarusgroup #windowszeroday", "creation_timestamp": "2026-08-12T16:15:42.694431Z"} {"uuid": "db4f8c51-1f27-4cb5-9330-5d91fcd69e8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3msvjn34bwe26", "content": "Lazarus Group's \"Operation Dream Job\" is back, exploiting a Windows zero-day (CVE-2026-68820) to target defense firms. They're using a post-quantum rootkit to blind EDRs and telemetry, showing a terrifying leap in attack\u2026\n\nhttps://www.tpp.blog/1fdd4oh\n\n#cybersecurity #lazarusgroup #windowszeroday", "creation_timestamp": "2026-08-12T16:15:42.694431Z"} https://vulnerability.circl.lu/sighting/db4f8c51-1f27-4cb5-9330-5d91fcd69e8e/export Wed, 12 Aug 2026 16:15:42 +0000 https://vulnerability.circl.lu/sighting/4fe686d4-3fff-4b38-a6b2-f6ce838112a7/export {"uuid": "4fe686d4-3fff-4b38-a6b2-f6ce838112a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/jacobianeng.bsky.social/post/3msvj2iuusf2i", "content": "398 CVEs in this month's Microsoft Patch Tuesday, but exploitation status matters more than CVSS this round. CVE-2026-68820 in the WinSock driver (afd.sys) is being actively exploited for local privilege escalation to SYSTEM. SAP also shipped a CVSS 10 fix for Commerce Cloud. Patch order matters.", "creation_timestamp": "2026-08-12T16:05:18.792503Z"} {"uuid": "4fe686d4-3fff-4b38-a6b2-f6ce838112a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/jacobianeng.bsky.social/post/3msvj2iuusf2i", "content": "398 CVEs in this month's Microsoft Patch Tuesday, but exploitation status matters more than CVSS this round. CVE-2026-68820 in the WinSock driver (afd.sys) is being actively exploited for local privilege escalation to SYSTEM. SAP also shipped a CVSS 10 fix for Commerce Cloud. Patch order matters.", "creation_timestamp": "2026-08-12T16:05:18.792503Z"} https://vulnerability.circl.lu/sighting/4fe686d4-3fff-4b38-a6b2-f6ce838112a7/export Wed, 12 Aug 2026 16:05:18 +0000 https://vulnerability.circl.lu/sighting/46467e60-c244-4fb3-aa29-a850de6f303e/export {"uuid": "46467e60-c244-4fb3-aa29-a850de6f303e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msvj27osuf2f", "content": "Lazarus\u304cWindows\u30bc\u30ed\u30c7\u30a4\uff08CVE-2026-68820\uff09\u3092\u60aa\u7528\u3057\u3001\u9632\u885b\u4f01\u696d\u3092\u72d9\u3046\u300cOperation Dream Job\u300d\u3092\u5b9f\u65bd\u3002", "creation_timestamp": "2026-08-12T16:05:09.802458Z"} {"uuid": "46467e60-c244-4fb3-aa29-a850de6f303e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msvj27osuf2f", "content": "Lazarus\u304cWindows\u30bc\u30ed\u30c7\u30a4\uff08CVE-2026-68820\uff09\u3092\u60aa\u7528\u3057\u3001\u9632\u885b\u4f01\u696d\u3092\u72d9\u3046\u300cOperation Dream Job\u300d\u3092\u5b9f\u65bd\u3002", "creation_timestamp": "2026-08-12T16:05:09.802458Z"} https://vulnerability.circl.lu/sighting/46467e60-c244-4fb3-aa29-a850de6f303e/export Wed, 12 Aug 2026 16:05:09 +0000 https://vulnerability.circl.lu/sighting/96d6e6ba-e7f6-48fa-9016-63ab2bb45ed7/export {"uuid": "96d6e6ba-e7f6-48fa-9016-63ab2bb45ed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3msvhwp3go52y", "content": "Lazarus\u306e\u30cf\u30c3\u30ab\u30fc\u304c\u9632\u885b\u95a2\u9023\u4f01\u696d\u3092\u72d9\u3044Windows\u30bc\u30ed\u30c7\u30a4\u3092\u60aa\u7528\n\n\u5317\u671d\u9bae\u306e\u30cf\u30c3\u30ab\u30fc\u96c6\u56e3\u304c\u3001Windows\u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027(CVE-2026-68820)\u3092\u60aa\u7528\u3057\u3001Operation Dream Job\u30ad\u30e3\u30f3\u30da\u30fc\u30f3\u306e\u4e00\u74b0\u3068\u3057\u3066\u9632\u885b\u30bb\u30af\u30bf\u30fc\u4f01\u696d\u3092\u6a19\u7684\u306b\u3057\u3066\u3044\u305f\u3053\u3068\u304c\u5206\u304b\u308a\u307e\u3057\u305f\u3002 Microsoft\u306f\u4eca\u6708\u306ePatch Tuesday\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0\u3067\u3053\u306e\u6b20\u9665\u3092\u4fee\u6b63\u3057\u3001\u65e2\u306b\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa...", "creation_timestamp": "2026-08-12T15:45:17.721580Z"} {"uuid": "96d6e6ba-e7f6-48fa-9016-63ab2bb45ed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3msvhwp3go52y", "content": "Lazarus\u306e\u30cf\u30c3\u30ab\u30fc\u304c\u9632\u885b\u95a2\u9023\u4f01\u696d\u3092\u72d9\u3044Windows\u30bc\u30ed\u30c7\u30a4\u3092\u60aa\u7528\n\n\u5317\u671d\u9bae\u306e\u30cf\u30c3\u30ab\u30fc\u96c6\u56e3\u304c\u3001Windows\u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027(CVE-2026-68820)\u3092\u60aa\u7528\u3057\u3001Operation Dream Job\u30ad\u30e3\u30f3\u30da\u30fc\u30f3\u306e\u4e00\u74b0\u3068\u3057\u3066\u9632\u885b\u30bb\u30af\u30bf\u30fc\u4f01\u696d\u3092\u6a19\u7684\u306b\u3057\u3066\u3044\u305f\u3053\u3068\u304c\u5206\u304b\u308a\u307e\u3057\u305f\u3002 Microsoft\u306f\u4eca\u6708\u306ePatch Tuesday\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0\u3067\u3053\u306e\u6b20\u9665\u3092\u4fee\u6b63\u3057\u3001\u65e2\u306b\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa...", "creation_timestamp": "2026-08-12T15:45:17.721580Z"} https://vulnerability.circl.lu/sighting/96d6e6ba-e7f6-48fa-9016-63ab2bb45ed7/export Wed, 12 Aug 2026 15:45:17 +0000 https://vulnerability.circl.lu/sighting/5ed623f9-e4a2-4e67-b792-d46ed91052cc/export {"uuid": "5ed623f9-e4a2-4e67-b792-d46ed91052cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3msvhkjhcxk22", "content": "North Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation Dream Job campaign.", "creation_timestamp": "2026-08-12T15:38:28.953596Z"} {"uuid": "5ed623f9-e4a2-4e67-b792-d46ed91052cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3msvhkjhcxk22", "content": "North Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation Dream Job campaign.", "creation_timestamp": "2026-08-12T15:38:28.953596Z"} https://vulnerability.circl.lu/sighting/5ed623f9-e4a2-4e67-b792-d46ed91052cc/export Wed, 12 Aug 2026 15:38:28 +0000 https://vulnerability.circl.lu/sighting/63009a03-1ab1-43ac-9032-e44be1535962/export {"uuid": "63009a03-1ab1-43ac-9032-e44be1535962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/tugate.ch/post/3msvfxorkj32i", "content": "Microsoft lan\u00e7a atualiza\u00e7\u00e3o de emerg\u00eancia para corrigir a CVE-2026-68820, uma falha de gravidade elevada no controlador Ancillary Function para WinSock. A vulnerabilidade, que afeta diversas vers\u00f5es do Windows, j\u00e1 est\u00e1 a ser explorada em ataques reais. \ud83d\udea8\n\n#falha #lan #microsoft #windows ", "creation_timestamp": "2026-08-12T15:10:06.469604Z"} {"uuid": "63009a03-1ab1-43ac-9032-e44be1535962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/tugate.ch/post/3msvfxorkj32i", "content": "Microsoft lan\u00e7a atualiza\u00e7\u00e3o de emerg\u00eancia para corrigir a CVE-2026-68820, uma falha de gravidade elevada no controlador Ancillary Function para WinSock. A vulnerabilidade, que afeta diversas vers\u00f5es do Windows, j\u00e1 est\u00e1 a ser explorada em ataques reais. \ud83d\udea8\n\n#falha #lan #microsoft #windows ", "creation_timestamp": "2026-08-12T15:10:06.469604Z"} https://vulnerability.circl.lu/sighting/63009a03-1ab1-43ac-9032-e44be1535962/export Wed, 12 Aug 2026 15:10:06 +0000 https://vulnerability.circl.lu/sighting/d4b4d426-35b4-411b-a61b-d6ba464fd5ee/export {"uuid": "d4b4d426-35b4-411b-a61b-d6ba464fd5ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3msvft4elpw22", "content": "Microsoft patches actively exploited Windows zero-day (CVE-2026-68820) used by Lazarus Group. The bug allows SYSTEM-level access and was used in the 'Operation Dream Job' campaign to deploy rootkits against the defense sector. #CVE202668820 #Lazarus ...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-12T15:07:29.504457Z"} {"uuid": "d4b4d426-35b4-411b-a61b-d6ba464fd5ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68820", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3msvft4elpw22", "content": "Microsoft patches actively exploited Windows zero-day (CVE-2026-68820) used by Lazarus Group. The bug allows SYSTEM-level access and was used in the 'Operation Dream Job' campaign to deploy rootkits against the defense sector. #CVE202668820 #Lazarus ...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-12T15:07:29.504457Z"} https://vulnerability.circl.lu/sighting/d4b4d426-35b4-411b-a61b-d6ba464fd5ee/export Wed, 12 Aug 2026 15:07:29 +0000