Skip to main content

Tag: cve 2026 87491

5 articles

Modern office setting with a computer on a neutral surface.

China-Aligned Group Exploits Chrome, Microsoft Zero-Days

A China-aligned threat group has been exploiting a chain of three zero-day vulnerabilities in Google Chrome and Microsoft Windows, highlighting a coordinated effort within the Chinese computer network exploitation community. This alarming discovery reveals the group's ability to rapidly weaponize and customize exploits across multiple campaigns.

Analyst 207
Laptop on cluttered desk in university library or office shows website on screen.

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain

Meet the sneaky hackers who just pulled off a triple threat: exploiting not one, not two, but three zero-day vulnerabilities to break free from Chrome's sandbox and wreak havoc on Windows hosts. Their latest move? A targeted spear-phish attack on NGOs via a cleverly crafted link.

Analyst 207
Windows laptop on cluttered office desk with Chrome browser open.

BlueMoon Exploit Kit Targets Windows, Chrome with Zero-Day Flaws

Meet BlueMoon, a sneaky exploit kit that's been wreaking havoc on Windows and Chrome since August 28, using not one, not two, but three zero-day flaws to do its dirty work. This malicious tool, linked to the JungleBamboo threat actor, combines browser vulnerabilities with a Windows kernel exploit to gain ultimate control.

Analyst 207
Cluttered office desk with computer and papers, cityscape visible through window.

Chinese Espionage Groups Exploit Zero-Day Chain in Browser, Windows Attacks

Meet the BlueMoon exploit chain, a powerful attack tool that links three zero-day vulnerabilities to give hackers full access to your computer - and it happened before patches were even available to the public. This sneaky chain targets popular browsers like Chrome and Windows, allowing attackers to run code, escape browser safeguards, and take control.

Analyst 207
Laptop on a plain surface with a blurred background and a blank, gradient blue screen.

Google Patches Actively Exploited Chrome Zero-Day Enabling Sandbox Code Execution

Google just patched a major vulnerability in Chrome that allowed hackers to execute malicious code inside the browser's sandbox, and it's already being exploited in the wild. The update fixes this flaw, along with 229 other security issues, to keep your browsing experience safe.

Analyst 207