Signalis
sign in--:--:--UTC
CVEs

CVE-2026-68820

exploited in the wild☆ pin
CVSS
7.0
Reports
15
First seen
Aug 11, 2026
Last seen
Aug 13, 2026
Affected product

Windows Ancillary Function Driver for WinSock

Associated actors

Lazarus ×4Lazarus Group ×3Chaotic Eclipse ×1

Recent reports

High

Microsoft Releases August 2026 Security Updates

NICS TaiwanCritical

Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

The Hacker NewsCritical

Lazarus exploits Windows zero-day CVE-2026-68820 to target defense firms in Operation Dream Job

Bleeping ComputerHigh

Microsoft Patch Tuesday: 419 vulnerabilities in August as AI accelerates bug discovery

The Record (Recorded Future News)High

CISA orders federal agencies to patch Windows vulnerability exploited by North Korean hackers in job-targeting campaign

The Record (Recorded Future News)High

ShieldBreak Zero-Day PoC: Microsoft Defender Patch Bypass with SYSTEM Access

The Hacker NewsHigh

Microsoft August 2026 Security Updates: Multiple Vulnerabilities Including Active Exploitation

GovCERT.HKHigh

Microsoft Releases August 2026 Security Updates; CVE-2026-68820 Exploited in Wild

JPCERT/CC AlertsHigh

Microsoft Monthly Security Update – August 2026

HKCERTHigh

Microsoft Patch Tuesday August 2026 — 421 vulnerabilities, 62 critical

Cisco TalosHigh

Microsoft Patches 398 Security Vulnerabilities in August Update

KrebsOnSecurityCritical

Microsoft Patches 398 Flaws Including Windows Driver Zero-Day Under Active Attack

The Hacker NewsHigh

Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days

Bleeping ComputerCritical

Operation Dream Job: Lazarus Deploys Zero-Day AFD.sys Exploit and Troy Backdoor in Defense-Sector Campaign

Check Point ResearchHigh

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA Advisories

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans