Shattering the Dream – When a Job Offer Becomes a Zero-Day Attack

Check Point Research reports a 2026 Operation Dream Job campaign targeting defense, aerospace, and aviation organizations worldwide. Threat actors distribute modified PDF viewers that execute malicious payloads embedded in specially crafted documents, reportedly leveraging a zero-day vulnerability. The feed also highlights five memory-corruption vulnerabilities in Cloudflare workerd affecting Code Mode and Workers, an Iran-linked Cavern Manticore modular C2 framework, browser-only ransomware techniques, and crypto clipboard hijacking. Specific CVE identifiers are not provided in the source.