Lazarus Hackers Exploited Windows Kernel Flaw as Zero-Day in Recent Attacks

The notorious Lazarus Group actors exploited a recently patched privilege escalation flaw in the Windows Kernel as a zero-day to obtain kernel-level access and disable security software on compromised hosts.
The vulnerability in question is CVE-2024-21338 (CVSS score: 7.8), which can permit an attacker to gain SYSTEM privileges. It was resolved by Microsoft earlier this month as part

access attacker attacks can compromised cve cve-2024-21338 cvss cvss score escalation exploited flaw hackers kernel lazarus lazarus group privilege privilege escalation privilege escalation flaw privileges question score security security software software system system privileges vulnerability windows windows kernel zero-day