🛡️ DEVELOPING — Lazarus APT exploits Windows zero-day targeting defense sector
Published Wednesday, August 12, 2026 at 10:35 AM PT BLUF: Lazarus (North Korea-linked APT) actively exploiting unpatched Windows zero-day against US defense contractors. Scope, affected systems, and remediation status unconfirmed. Monitor for indicators in your network. STATUS: Headline-only report. Substantive technical details insufficient to confirm attack scope or recommend mitigation beyond standard zero-day hygiene. DETAILS (Unconfirmed): North Korea-linked Lazarus group attributed to exploitation campaign Target vertical: US defense firms / defense industrial base Attack vector: Windows zero-day (CVE not yet identified in available reporting) Related intelligence: Lazarus historically pairs fake job offers with exploit chains; unclear if this campaign uses similar social engineering WHAT IS UNKNOWN: ...