CVE-2026-72971

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

August 13, 2026

Last Seen

August 13, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Lazarus Group Exploits Windows Zero-Day to Target Defense Sector81.0

The North Korean hacking group Lazarus exploited a zero-day vulnerability (CVE-2026-68820) in the Windows Ancillary Function Driver for WinSock (afd.sys) to gain SYSTEM-level access to defense sector systems. This vulnerability was actively exploited for weeks before a patch was released on August 1...