North Korea's Lazarus hacking group actively exploits a Windows zero-day vulnerability known as CVE-2026-68820 to infiltrate defense, aerospace, and aviation companies across Europe and India. The campaign, dubbed Operation Dream Job, uses fake recruitment offers to trick employees at targeted organizations. Microsoft addresses the flaw in its latest