BlueMoon Chained Chrome and Windows Zero-Days Across Multiple Espionage Campaigns

BlueMoon chained Chrome and Windows zero-days across multiple espionage campaigns

Researchers observed the modular BlueMoon exploit kit in attacks from at least four clusters, including JungleBamboo and UTA0560. The chain combined two Chromium flaws for code execution and sandbox escape with a Windows ALPC local privilege...

Once in a BlueMoon: How a Chrome Patch-Gap Turned Three V8 Zero-Days Into an Espionage Kit

The BlueMoon exploit kit demonstrates a shift in how threat actors leverage the time between open-source vulnerability disclosure and stable-channel deployment. By chaining three distinct vulnerabilities — CVE-2026-85046, CVE-2026-87491, and CVE-2026-85880 — the kit achieves SYSTEM-level escalation on Windows systems running Chromium-based browsers. This chain highlights a structural reliance on the patch-gap window, where security […]

BlueMoon Exploit Kit Targets Multiple Sectors Rapidly | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker - National Cyber Security Consulting

A single piece of attack code, quietly built to chain three unpatched flaws in Chrome and Windows, has ended up in the hands of at least four separate hacking crews within days of each other. Researchers at cybersecurity firm Proofpoint have named it BlueMoon exploit kit, and they say it’s already been used against US […] Thank you for subscribing to our RSS feed!

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together… Read more →

BlueMoon exploit kit spreads to four hacking groups within days

A single piece of attack code, quietly built to chain three unpatched flaws in Chrome and Windows, has ended up in the hands of at least four separate hacking crews within days of each other. Researchers at cybersecurity firm Proofpoint have named it BlueMoon exploit kit , and they say it’s already...