Researchers warn that a Windows kernel privilege escalation in vulnerability fixed by Microsoft during the February Patch Tuesday was exploited in the wild as a zero-day by a North Korean threat actor known as the Lazarus group. The attackers leveraged the flaw in an updated version of its FudModule rootkit that was also enhanced with new functionality.