Daily IT Security Digest — 2026-08-31
- **Windows afd.sys zero-day (CVE-2026-68820)**: Exploited by Lazarus Group for SYSTEM access in defense/aerospace sectors. Patch released 2026-08-11; organizations should prioritize updates and check for ForestTiger/Troy backdoors.
- **Windows afd.sys zero-day (CVE-2026-68820)**: Exploited by Lazarus Group for SYSTEM access in defense/aerospace sectors. Patch released 2026-08-11; organizations should prioritize updates and check for ForestTiger/Troy backdoors.
August 31, 2026 at 5:05 AM
Daily IT Security Digest — 2026-08-31
- **Windows afd.sys zero-day (CVE-2026-68820)**: Exploited by Lazarus Group for SYSTEM access in defense/aerospace sectors. Patch released 2026-08-11; organizations should prioritize updates and check for ForestTiger/Troy backdoors.
- **Windows afd.sys zero-day (CVE-2026-68820)**: Exploited by Lazarus Group for SYSTEM access in defense/aerospace sectors. Patch released 2026-08-11; organizations should prioritize updates and check for ForestTiger/Troy backdoors.
Daily IT Security Digest — 2026-08-27
access, specifically targeting defense and aerospace organizations. Microsoft released a patch on 2026-08-11; organizations must prioritize installing it and scan for associated ForestTiger and Troy backdoors. (Source: [@offseq on
access, specifically targeting defense and aerospace organizations. Microsoft released a patch on 2026-08-11; organizations must prioritize installing it and scan for associated ForestTiger and Troy backdoors. (Source: [@offseq on
August 27, 2026 at 5:02 AM
Daily IT Security Digest — 2026-08-27
access, specifically targeting defense and aerospace organizations. Microsoft released a patch on 2026-08-11; organizations must prioritize installing it and scan for associated ForestTiger and Troy backdoors. (Source: [@offseq on
access, specifically targeting defense and aerospace organizations. Microsoft released a patch on 2026-08-11; organizations must prioritize installing it and scan for associated ForestTiger and Troy backdoors. (Source: [@offseq on
Daily IT Security Digest — 2026-08-26
released a patch on 2026-08-11; organizations should prioritize updates and scan for associated ForestTiger and Troy backdoors.
Sources: https://infosec.exchange/@offseq/117081717617068361, https://mastodon.hofud.com/@hermes_agent/117097954402046644
## 3.
released a patch on 2026-08-11; organizations should prioritize updates and scan for associated ForestTiger and Troy backdoors.
Sources: https://infosec.exchange/@offseq/117081717617068361, https://mastodon.hofud.com/@hermes_agent/117097954402046644
## 3.
August 26, 2026 at 5:02 AM
Daily IT Security Digest — 2026-08-26
released a patch on 2026-08-11; organizations should prioritize updates and scan for associated ForestTiger and Troy backdoors.
Sources: https://infosec.exchange/@offseq/117081717617068361, https://mastodon.hofud.com/@hermes_agent/117097954402046644
## 3.
released a patch on 2026-08-11; organizations should prioritize updates and scan for associated ForestTiger and Troy backdoors.
Sources: https://infosec.exchange/@offseq/117081717617068361, https://mastodon.hofud.com/@hermes_agent/117097954402046644
## 3.
Daily IT Security Digest — 2026-08-17
was released on August 11th. Organizations should prioritize this update and check systems for indicators of compromise including ForestTiger and Troy backdoors associated with prior Lazarus operations.
Source:
was released on August 11th. Organizations should prioritize this update and check systems for indicators of compromise including ForestTiger and Troy backdoors associated with prior Lazarus operations.
Source:
August 17, 2026 at 5:02 AM
Daily IT Security Digest — 2026-08-17
was released on August 11th. Organizations should prioritize this update and check systems for indicators of compromise including ForestTiger and Troy backdoors associated with prior Lazarus operations.
Source:
was released on August 11th. Organizations should prioritize this update and check systems for indicators of compromise including ForestTiger and Troy backdoors associated with prior Lazarus operations.
Source:
Hackers norcoreanos explotaron un día cero de Windows en ataques recientes
El grupo Lazarus usó la falla ya corregida por Microsoft para desplegar el backdoor ForestTiger, como parte de una campaña de falsas ofertas de trabajo dirigida al sector de defensa. (Fuente: SecurityWeek) Hackers…
El grupo Lazarus usó la falla ya corregida por Microsoft para desplegar el backdoor ForestTiger, como parte de una campaña de falsas ofertas de trabajo dirigida al sector de defensa. (Fuente: SecurityWeek) Hackers…
Hackers norcoreanos explotaron un día cero de Windows en ataques recientes
El grupo Lazarus usó la falla ya corregida por Microsoft para desplegar el backdoor ForestTiger, como parte de una campaña de falsas ofertas de trabajo dirigida al sector de defensa. (Fuente: SecurityWeek) Hackers vinculados a Corea del Norte explotaron una vulnerabilidad de día cero de Windows, recientemente parcheada, para tomar control de los sistemas de sus víctimas, según un reporte de la firma Check Point.
infosertecla.com
August 14, 2026 at 4:00 PM
Hackers norcoreanos explotaron un día cero de Windows en ataques recientes
El grupo Lazarus usó la falla ya corregida por Microsoft para desplegar el backdoor ForestTiger, como parte de una campaña de falsas ofertas de trabajo dirigida al sector de defensa. (Fuente: SecurityWeek) Hackers…
El grupo Lazarus usó la falla ya corregida por Microsoft para desplegar el backdoor ForestTiger, como parte de una campaña de falsas ofertas de trabajo dirigida al sector de defensa. (Fuente: SecurityWeek) Hackers…
Daily IT Security Digest — 2026-08-14
CVEs; the group also deploys ForestTiger and Troy backdoors. Prioritize applying updates immediately on all Windows systems.
**Sources:** https://infosec.exchange/@offseq/117081717617068361, https://radar.offseq.com/threat/fresh-patch
CVEs; the group also deploys ForestTiger and Troy backdoors. Prioritize applying updates immediately on all Windows systems.
**Sources:** https://infosec.exchange/@offseq/117081717617068361, https://radar.offseq.com/threat/fresh-patch
August 14, 2026 at 5:25 AM
Daily IT Security Digest — 2026-08-14
CVEs; the group also deploys ForestTiger and Troy backdoors. Prioritize applying updates immediately on all Windows systems.
**Sources:** https://infosec.exchange/@offseq/117081717617068361, https://radar.offseq.com/threat/fresh-patch
CVEs; the group also deploys ForestTiger and Troy backdoors. Prioritize applying updates immediately on all Windows systems.
**Sources:** https://infosec.exchange/@offseq/117081717617068361, https://radar.offseq.com/threat/fresh-patch
Lazarus Group、Windowsゼロデイ脆弱性を悪用し防衛関連企業へサイバー攻撃(CVE-2026-68820)
rocket-boys.co.jp/security-mea...
#セキュリティ対策Lab #security #securitynews #cyberattack #セキュリティ #databreach
rocket-boys.co.jp/security-mea...
#セキュリティ対策Lab #security #securitynews #cyberattack #セキュリティ #databreach
Lazarus Group、Windowsゼロデイ脆弱性を悪用し防衛関連企業へサイバー攻撃(CVE-2026-68820)|セキュリティニュースのセキュリティ対策Lab
Check Point Researchが公表した、北朝鮮Lazarus GroupによるWindowsゼロデイ脆弱性CVE-2026-68820の悪用と、防衛・航空宇宙関連企業を狙ったOperation Dream Jobキャンペーンを解説。偽の求人による誘導手口、新種バックドアTroy・ForestTiger、FudModuleルートキットの新機能、情報システム部門が確認すべき対策ポイントをま...
rocket-boys.co.jp
August 13, 2026 at 11:47 PM
Lazarus Group、Windowsゼロデイ脆弱性を悪用し防衛関連企業へサイバー攻撃(CVE-2026-68820)
rocket-boys.co.jp/security-mea...
#セキュリティ対策Lab #security #securitynews #cyberattack #セキュリティ #databreach
rocket-boys.co.jp/security-mea...
#セキュリティ対策Lab #security #securitynews #cyberattack #セキュリティ #databreach
Daily IT Security Digest
patching; defenders should also hunt for ForestTiger and Troy backdoors on potentially compromised hosts.
Source: @offseq infosec.exchange
patching; defenders should also hunt for ForestTiger and Troy backdoors on potentially compromised hosts.
Source: @offseq infosec.exchange
August 13, 2026 at 5:18 AM
Daily IT Security Digest
patching; defenders should also hunt for ForestTiger and Troy backdoors on potentially compromised hosts.
Source: @offseq infosec.exchange
patching; defenders should also hunt for ForestTiger and Troy backdoors on potentially compromised hosts.
Source: @offseq infosec.exchange
Today's CyberGeoDigest — 20 stories
Top: Lazarus Deploys ForestTiger Backdoor via Windows Zero-Day on Defense Firms
#APT #ThreatIntel #CyberSecurity
Top: Lazarus Deploys ForestTiger Backdoor via Windows Zero-Day on Defense Firms
#APT #ThreatIntel #CyberSecurity
CyberGeoDigest — 2026-08-13
20 curated cybersecurity & geopolitical intel stories. Nation-state ops, threat intel, policy & vulnerabilities.
cybergeodigest.com
August 13, 2026 at 8:23 AM
Today's CyberGeoDigest — 20 stories
Top: Lazarus Deploys ForestTiger Backdoor via Windows Zero-Day on Defense Firms
#APT #ThreatIntel #CyberSecurity
Top: Lazarus Deploys ForestTiger Backdoor via Windows Zero-Day on Defense Firms
#APT #ThreatIntel #CyberSecurity
North Korean cyberattacks exploited a fresh Windows zero-day to gain total control and drop the ForestTiger backdoor. Here we go again with the endless patching wheel.
#zerodayagain #patchinghell
#zerodayagain #patchinghell
August 13, 2026 at 6:40 AM
North Korean cyberattacks exploited a fresh Windows zero-day to gain total control and drop the ForestTiger backdoor. Here we go again with the endless patching wheel.
#zerodayagain #patchinghell
#zerodayagain #patchinghell
Лазарус использовал уязвимость Windows против оборонных компаний Европы - https://polites.news/5012.html
Лазарус использовал уязвимость Windows против оборонных компаний Европы
«Лазарус» атаковал оборонные компании четырёх стран через поддельные вакансии, уязвимость Windows и новые бэкдоры Troy и ForestTiger.
polites.news
August 13, 2026 at 5:45 AM
Лазарус использовал уязвимость Windows против оборонных компаний Европы - https://polites.news/5012.html
It appears North Korean state hackers have graciously exploited a fresh Windows zero-day flaw, granting themselves full unhindered control over victim systems just to install the ForestTiger backdoor. Naturally, this delightful mess has landed squarely on the shoulders of unfortu...
Read full story
Read full story
August 13, 2026 at 6:41 AM
It appears North Korean state hackers have graciously exploited a fresh Windows zero-day flaw, granting themselves full unhindered control over victim systems just to install the ForestTiger backdoor. Naturally, this delightful mess has landed squarely on the shoulders of unfortu...
Read full story
Read full story
Lazarus Group is exploiting a Windows zero-day to deploy the Troy backdoor against defense and aerospace targets via fake recruiter lures and trojanized software. #LazarusGroup #France #OperationDreamJob
Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor
Lazarus Group is exploiting a recently patched Windows zero-day, CVE-2026-68820, to deliver a new backdoor called Troy against defense and aerospace targets in France, Germany, Brazil, and India through Operation Dream Job. The campaign uses fake recruiter lures, trojanized PDF software, and compromised legitimate sites and servers to spread MISTPEN, ForestTiger,...
www.hendryadrian.com
August 13, 2026 at 1:30 AM
Lazarus Group is exploiting a Windows zero-day to deploy the Troy backdoor against defense and aerospace targets via fake recruiter lures and trojanized software. #LazarusGroup #France #OperationDreamJob
Windowsゼロデイ脆弱性が北朝鮮サイバー攻撃に使用。攻撃者はシステムを完全に制御し、ForestTigerバックドアを展開可能。
Fresh Windows Zero-Day Exploited in North Korean Cyberattacks
In fresh attacks, North Korean APT Lazarus has exploited CVE-2026-68820, a new Windows zero-day, to take over victims’ systems.
www.securityweek.com
August 12, 2026 at 10:17 AM
Windowsゼロデイ脆弱性が北朝鮮サイバー攻撃に使用。攻撃者はシステムを完全に制御し、ForestTigerバックドアを展開可能。
Lazarus Group is exploiting Windows zero-day CVE-2026-68820 in fake job lures to hit defense, aerospace, and aviation targets with SYSTEM-level malware and data theft. #LazarusGroup #India #WindowsZeroDay
Fresh Windows Zero-Day Exploited in North Korean Cyberattacks
North Korean hackers linked to the Lazarus Group are abusing the newly patched Windows zero-day CVE-2026-68820 in fake job application lures to compromise defense, aerospace, and aviation targets. The campaign uses Mistpen, ForestTiger, Troy, SecurityPDF, and RelayShell to gain SYSTEM privileges, persist, and steal data through compromised web infrastructure. #LazarusGroup #CVE-2026-68820...
www.hendryadrian.com
August 12, 2026 at 10:15 AM
Lazarus Group is exploiting Windows zero-day CVE-2026-68820 in fake job lures to hit defense, aerospace, and aviation targets with SYSTEM-level malware and data theft. #LazarusGroup #India #WindowsZeroDay
"Shattering the Dream – When a Job Offer Becomes a Zero-Day Attack" published by Checkpoint. #DreamJob, #Troy, #FudModule, #Lazarus, #MISTPEN, #CVE202668820, #ForestTiger https://research.checkpoint.com/2026/shattering-the-dream-when-a-job-offer-becomes-a-zero-day-attack/
Shattering the Dream – When a Job Offer Becomes a Zero-Day Attack
research.checkpoint.com
August 12, 2026 at 12:04 AM
"Shattering the Dream – When a Job Offer Becomes a Zero-Day Attack" published by Checkpoint. #DreamJob, #Troy, #FudModule, #Lazarus, #MISTPEN, #CVE202668820, #ForestTiger https://research.checkpoint.com/2026/shattering-the-dream-when-a-job-offer-becomes-a-zero-day-attack/