> TritonInfoSec News
Home / Sep 11, 2026 / Story
0
#3 BleepingComputer general September 10, 2026 at 14:11 UTC

New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws

By Bill Toulas

AI Summary

Four distinct cyber-espionage groups, at least four of which are China-linked, were caught leveraging the same 'BlueMoon' exploit kit that targeted zero-day vulnerabilities in Microsoft Windows and Google Chrome, with the Chrome flaw identified in August 2026. The shared use of a single exploit kit across multiple APT groups — likely enabled by AI-accelerated vulnerability discovery — signals a new pattern where commodity exploit infrastructure serves nation-state-level actors. Defenders should assume Chrome and Windows systems unpatched through August remain exposed to multiple concurrent threat actors.

Read full article → https://www.bleepingcomputer.com/news/security/new…

Relevance score: 86.0/100

# More from September 11

  1. 1
    Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers BleepingComputer
  2. 2
    PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances The Hacker News
  3. 4
    New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender SecurityWeek
  4. 5
    Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE The Hacker News
  5. 6
    CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline The Hacker News
  6. 7
    AI lets small actors run state-level hacking campaigns, Anthropic report finds CyberScoop
  7. 8
    IDScan confirms breach tied to 153 million stolen driver’s licenses BleepingComputer
  8. 9
    Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6 The Hacker News
  9. 10
    US says Chinese firms extracted billions of tokens from frontier AI models BleepingComputer