Lazarus Group Exploits Windows Zero-Day Vulnerability CVE-2026-68820 for SYSTEM Access and Backdoor Deployment

The Lazarus Group exploited a zero-day vulnerability in Windows (CVE-2026-68820) to gain SYSTEM-level access and deploy the Troy backdoor, targeting defense and aerospace sectors. The attack uses social engineering, DLL side-loading, and compromised infrastructure to evade detection and maintain persistence.

The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Windows to deliver a never-before-seen backdoor targeting defense and aerospace companies across France, Germany, Brazil, and India.

The activity, per Check Point Research, is part of Operation Dream Job, a long-running cyber espionage and

Read original article