Windows AFD.sys 0-Day Actively Exploited by Lazarus Hackers to Deploy FudModule Rootkit — Risk Associates: Cybersecurity, Compliance, Certification

Lazarus hackers exploiting Windows AFD.sys 0-day (CVE-2026-68820) to deploy FudModule rootkit. Review attached advisory, apply remediations immediately.

Together Towards Secure Digital Frontier

Quick Links

Home About Us Partners RA-Academy Certificate Directory Careers Contact Us

Services

Compliances PCI Compliance ISO/IEC Services Managed Security Services Data Protection Security Testing Cybersecurity Solutions

Get In Touch

+61 1 800 48 7475 (IT RISK)
info@riskassociates.com
Unit 4.15, 29-31 Lexington Drive
Bella Vista, NSW 2153, Australia

Copyright © 2026. All Rights Reserved by Risk Associates.