UTA0560 exploited a Chrome-Windows zero-day chain against NGOs to deploy GRIMWEDGE; APT31 used the same chain to install LONGTALE.

BlueMoon chains two Chrome V8 zero-days with a Windows flaw in phishing attacks used by APT31 and other espionage clusters.

A nearly identical exploit kit that targets critical vulnerabilities in both Chromium-based browsers and older versions of ...

BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand ...

Google patched 12 Chrome flaws, including an actively exploited V8 zero-day that could enable remote code execution through a ...

AdBlock blocks known crypto miners by default, but c/side found 3,500+ sites running stealth WebSocket miners in 2025. What each extension still misses.

Someone is afraid of missing out, as defenders rush to patch things up.

Elastic Security Labs has uncovered a long-running malware operation that plants fake browser extensions inside Chrome and ...

Spread the loveGoogle just dropped an emergency update for Chrome, and if you haven’t installed it yet, you need to stop what ...

Four espionage groups used the BlueMoon Chrome+Windows exploit kit within 12 days. Researchers suspect AI development.

CISA has added a critical Google Chromium V8 type confusion vulnerability, tracked as CVE-2026-85046, to its Known Exploited ...

Proofpoint identified the BlueMoon exploit kit being used by at least four hacking groups, some linked to Chinese state ...