Espionage groups have been using BlueMoon, an exploit kit chaining recent Chrome and Windows zero-day vulnerabilities.

A newly disclosed chain of vulnerabilities in Google Chrome and the Windows kernel can compromise targets, deploy espionage ...

The BlueMoon exploit kit demonstrates a shift in how threat actors leverage the time between open-source vulnerability disclosure and stable-channel deployment. By chaining three distinct ...

U.S. CISA adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog.

Multiple cyber-espionage groups deployed an exploit kit dubbed "BlueMoon" that leveraged zero-day vulnerabilities in ...

As Google confirms a bumper round of 230 Chrome security vulnerabilities, including 5 critical ones, there’s no need to panic ...

Multiple espionage-motivated threat actors have rapidly adopted a newly discovered exploit kit that chains Chrome browser and ...

BlueMoon chains two Chrome V8 zero-days with a Windows flaw in phishing attacks used by APT31 and other espionage clusters.

A nearly identical exploit kit that targets critical vulnerabilities in both Chromium-based browsers and older versions of ...

Google patched 230 Chrome flaws, including an actively exploited V8 bug that could let attackers run arbitrary code.

Chrome users have another zero-day problem on their hands. Google has patched CVE-2026-87491, a vulnerability in the V8 JavaScript and WebAssembly engine that attackers are already exploiting in the ...

Google has fixed 230 vulnerabilities in Chrome, including a zero-day flaw, CVE-2026-87491, with an in-the-wild exploit.