← Back

Wire · opportunities

Lazarus hackers pair fake job offers with Windows zero-day exploit

Published

12 August 2026

Topic

opportunities

◆ Sectors

Defense Tech

◆ Geography

Western Europe

◆ Source

Read at helpnetsecurity.com →

◆ Verified

Fusion42 · 12 August 2026 · Fusion42 review

The North Korea-linked Lazarus group is conducting sophisticated cyberattacks using fake job offers and a Windows zero-day vulnerability (CVE-2026-68820) to target the defense sector primarily in Western Europe and India. The campaign exploits professional networking platforms to distribute trojanized PDF software and escalate privileges, deploying a kernel-mode rootkit and backdoors for remote access.

This Wire brief sits within Fusion42's coverage of Defense Tech, and 3 sources have reported it between 12 Aug 2026 and 15 Aug 2026.

◆ ◆ The Wire takeaway

The attack method combining IT recruitment deception with a Windows zero-day exposes critical weaknesses in defence sector security. You need to re-evaluate your endpoint security and phishing defences as attackers exploit trusted professional networks now.

◆ Coverage

3 sources · first reported 12 Aug 2026 · latest 15 Aug 2026

◆ Related on Wire

◆ Topics

Defense Techlazarus-groupcybersecuritywindows-zero-dayphishingdefense-sectorsouth-asia