Lazarus wielded a new Windows zero‑day to infiltrate defense firms
Check Point uncovered Lazarus’s Operation Dream Job, which exploits a fresh Windows kernel flaw (CVE‑2026‑68820) to gain SYSTEM rights and install a backdoor, “Troy.” The campaign targets defense and aerospace firms in Europe and India via fake recruiter lures, hijacking legitimate sites to hide command traffic. This shows state actors can weaponize zero‑days to bypass EDRs, raising urgent patch‑and‑monitoring needs.