The ‘BlueMoon’ attack chains three high-severity Chrome and Windows flaws, raising concerns that sophisticated exploitation ...

U.S. CISA adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog.

Someone is afraid of missing out, as defenders rush to patch things up.

Google fixed Chrome's seventh actively exploited zero-day of the year on September 8, and attackers were already using it ...

BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand ...

Google has patched an actively exploited Chrome V8 zero-day that lets attackers run code inside the sandbox via a crafted web page.

Chrome 153 Stable fixes 230 security issues, including an in-the-wild V8 out-of-bounds write that can run code inside the ...

Proofpoint says at least four espionage groups rapidly adopted BlueMoon, chaining Chrome V8 patch-gap flaws with a Windows LPE to deliver malware including GemStone and ShadowPad.

BlueMoon chains two Chrome V8 zero-days with a Windows flaw in phishing attacks used by APT31 and other espionage clusters.

A nearly identical exploit kit that targets critical vulnerabilities in both Chromium-based browsers and older versions of ...

Google patched 230 Chrome flaws, including an actively exploited V8 bug that could let attackers run arbitrary code.

Google has fixed 230 Chrome vulnerabilities, including an actively exploited V8 zero-day that can trigger heap corruption.