Lazarus hackers exploited Windows zero-day to target defense firms