> TritonInfoSec News
Home / Sep 10, 2026 / Story
0
#3 The Hacker News general September 09, 2026 at 16:34 UTC

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

By [email protected] (The Hacker News)

AI Summary

Four separate espionage-motivated threat groups, including China-aligned APT31 (aka Bronze Vinewood/JungleBamboo), deployed an undocumented exploit kit called BlueMoon that chains multiple Chrome and Windows vulnerabilities — all within a single week. The rapid adoption across multiple actors suggests either shared tooling infrastructure or a commercially distributed exploit package. Security teams running unpatched Chrome and Windows environments should treat this as critical given the confirmed in-the-wild exploitation by state-level actors.

Read full article → https://thehackernews.com/2026/09/four-spy-groups-…

Relevance score: 92.0/100

# More from September 10

  1. 1
    Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days The Hacker News
  2. 2
    Chinese espionage groups swarm to exploit triple-link chain of zero-days CyberScoop
  3. 4
    Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks BleepingComputer
  4. 5
    Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox The Hacker News
  5. 6
    Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day SecurityWeek
  6. 7
    AdaptHealth confirms 4.1 million people exposed in July cyberattack BleepingComputer
  7. 8
    F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans The Hacker News
  8. 9
    SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution The Hacker News
  9. 10
    U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok The Hacker News