Lazarus hackers pair fake job offers with Windows zero-day exploit

The North Korea-linked Lazarus group is conducting sophisticated cyberattacks using fake job offers and a Windows zero-day vulnerability (CVE-2026-68820) to target the defense sector primarily in Western Europe and India. The campaign exploits professional networking platforms to distribute trojanized PDF software and escalate privileges, deploying a kernel-mode rootkit and backdoors for remote access.

This Wire brief sits within Fusion42's coverage of Defense Tech. Wire is Fusion42's founder-focused intelligence feed: each story is connected to the funds and startups it names — every one with a live profile on Raise or Scout — so founders can follow the capital and the momentum behind the headline rather than just the headline itself. Wire analysis is one of the live surfaces Arthur reasons over.