The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions became attack paths, and supply-chain problems kept spreading farther than the original compromise. A lot of it came down to access that was already there and defenses that assumed nobody would look too closely. So, nothing magical. Just a

North Korean hackers linked to the Lazarus Group are abusing the newly patched Windows zero-day CVE-2026-68820 in fake job application lures to compromise defense, aerospace, and aviation targets. The campaign uses Mistpen, ForestTiger, Troy, SecurityPDF, and RelayShell to gain SYSTEM privileges, persist, and steal data through compromised web infrastructure. #LazarusGroup #CVE-2026-68820...

Nightmare Eclipse has released another Windows zero-day, LegacyHive, a local privilege escalation flaw in the Windows User Profile Service that can let an attacker load other users’ hives, including administrator hives. The researcher also shared a stripped proof-of-concept that works on systems with Microsoft’s July 2026 patches, while Microsoft has not...