Signalis
sign in--:--:--UTC
CVEs

CVE-2026-68820

exploited in the wild☆ pin
CVSS
7.0
Reports
20
First seen
Aug 11, 2026
Last seen
Sep 3, 2026
Affected product

Windows Ancillary Function Driver for WinSock

Associated actors

Lazarus ×6Lazarus Group ×5TeamPCP ×2ExfilSquad ×1Fire Ant ×1Jewelbug ×1Kimsuky ×1LightSpy operator (China-linked) ×1Mabna Institute ×1Matryoshka ×1Operation Dream Job ×1PhantomEnigma ×1QTFY ×1Sandworm ×1ShinyHunters ×1Storm-1516 ×1Storm-2755 ×1Suspected China-nexus APT ×1The Gentlemen ×1TheHatman ×1

Recent reports

High

CERT-EU Cyber Brief August 2026: Espionage, Ransomware, and Supply-Chain Compromises

CERT-EU Threat IntelCritical

Microsoft Entra ID RCE Flaw (CVSS 10.0) Exploited in Wild

The Hacker NewsHigh

Threat Intelligence Report – 17 August 2026

Check Point ResearchCritical

Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

The Hacker NewsHigh

Microsoft August 2026 Patch Tuesday: 423 CVEs including 7 pre-auth RCEs

Sophos NewsHigh

Microsoft Releases August 2026 Security Updates

NICS TaiwanCritical

Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

The Hacker NewsCritical

Lazarus exploits Windows zero-day CVE-2026-68820 to target defense firms in Operation Dream Job

Bleeping ComputerHigh

Microsoft Patch Tuesday: 419 vulnerabilities in August as AI accelerates bug discovery

The Record (Recorded Future News)High

CISA orders federal agencies to patch Windows vulnerability exploited by North Korean hackers in job-targeting campaign

The Record (Recorded Future News)High

ShieldBreak Zero-Day PoC: Microsoft Defender Patch Bypass with SYSTEM Access

The Hacker NewsHigh

Microsoft August 2026 Security Updates: Multiple Vulnerabilities Including Active Exploitation

GovCERT.HKHigh

Microsoft Releases August 2026 Security Updates; CVE-2026-68820 Exploited in Wild

JPCERT/CC AlertsHigh

Microsoft Monthly Security Update – August 2026

HKCERTHigh

Microsoft Patch Tuesday August 2026 — 421 vulnerabilities, 62 critical

Cisco TalosHigh

Microsoft Patches 398 Security Vulnerabilities in August Update

KrebsOnSecurityCritical

Microsoft Patches 398 Flaws Including Windows Driver Zero-Day Under Active Attack

The Hacker NewsHigh

Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days

Bleeping ComputerCritical

Operation Dream Job: Lazarus Deploys Zero-Day AFD.sys Exploit and Troy Backdoor in Defense-Sector Campaign

Check Point ResearchHigh

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA Advisories

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans