> TritonInfoSec News
Home / Sep 16, 2026 / Story
0
#4 The Hacker News general September 15, 2026 at 05:31 UTC

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

By [email protected] (The Hacker News)

AI Summary

Volexity attributed a September 1, 2026 spear-phishing campaign to Chinese threat actor UTA0560, which chained patched zero-days in Google Chrome and Microsoft Windows to deliver a JavaScript backdoor called GRIMWEDGE against multiple NGOs. The use of a Chrome-Windows exploit chain against civil society targets underscores the ongoing risk of nation-state actors leveraging browser-plus-OS zero-day combinations for targeted espionage.

Read full article → https://thehackernews.com/2026/09/china-linked-hac…

Relevance score: 89.0/100

# More from September 16

  1. 1
    Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution The Hacker News
  2. 2
    Cisco patches Secure Email Gateway zero-day exploited in attacks BleepingComputer
  3. 3
    CISA: Critical VMware RCE flaw now exploited by ransomware gangs BleepingComputer
  4. 5
    Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases SecurityWeek
  5. 6
    Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists The Hacker News
  6. 7
    Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites BleepingComputer
  7. 8
    Japan's Digital Agency says VPN flaw exposed 246,000 personnel records BleepingComputer
  8. 9
    Cisco warns customers of actively exploited zero-day in email gateways CyberScoop
  9. 10
    KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens The Hacker News