North Korean threat actors known as the Lazarus Group exploited a flaw in the Windows AppLocker driver (appid.sys) as a zero-day to gain kernel-level access and turn off security tools, allowing them ...

North Korea-linked Lazarus exploited a zero-day in the Windows AppLocker driver (appid.sys) to gain kernel-level access to target systems.