New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws

Multiple cyber-espionage groups deployed an exploit kit dubbed "BlueMoon" that leveraged zero-day vulnerabilities in Microsoft Windows and Google Chrome.

Read at the source

Summary written for cymesh.dev. The full article lives at BleepingComputer.

Topics

~/cymesh.net

Certificates expire quietly

cymesh.net watches your TLS and SSL certificates and warns you before one lapses.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Talk to us See cymesh.net

~/related/new-bluemoon-kit-exploited-windows-and-chrome-zero-day-flaws-1n6huc

2026-09-12 11:10 UTC[crit]

BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days

SecurityWeekzero-day apt windows

2026-09-11 20:19 UTC[info]

Hackers abused Claude to extract secrets from 1.8M Android apps

BleepingComputerai apt mobile

2026-09-11 18:40 UTC[low]

Microsoft sees some new wrinkles in invoice-scam emails

The Recordphishing ai windows

2026-09-11 17:26 UTC[low]

Passkey-themed phishing attacks lead to Microsoft 365 data theft

BleepingComputerphishing windows

2026-09-11 14:29 UTC[info]

Claude Used to Automate Exploitation and Data Theft Across Multiple Victims

The Hacker Newsai apt

2026-09-11 14:10 UTC[info]

Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection

The Hacker Newsai malware apt