Shattering the Dream – When a Job Offer Becomes a Zero-Day Attack

Check Point Research reports a 2026 Operation Dream Job campaign targeting global defense organizations, particularly aerospace and aviation companies. The threat actor used modified PDF viewers to execute malicious payloads embedded in specially crafted documents, reportedly involving zero-day exploitation. The same feed also highlights vulnerabilities in Cloudflare workerd, an Iran-linked Cavern Manticore modular C2 framework, browser-only ransomware, and a cryptocurrency clipboard hijacker. No specific CVE identifiers are provided in the supplied document.