BlueMoon

Mentions · 7d0
Mentions · 30d0
All mentions4
First seenSep 9, 2026
Last mentionedSep 18, 2026

Timeline

4 articles · newest first

Critical Microsoft Azure AI Foundry Vulnerability Allows Attackers to Escalate Privileges

Microsoft patched CVE-2026-85889 (CVSS 10.0), a missing-auth flaw in Azure AI Foundry enabling unauthenticated network privilege escalation; no exploitation observed.

Cyber Security NewsSep 18, 14:14 UTC · Sep 18, 2026VulnerabilityCVE-2026-85889 CVE-2026-85885 CVE-2026-858781 · 1 read

BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days

Proofpoint reports multiple espionage groups rapidly adopting BlueMoon, a new exploit kit chaining Chrome and Windows zero-days.

SecurityWeekSep 12, 11:10 UTC · Sep 12, 2026Exploit / PoCExploitedCVE-2026-85046 CVE-2026-87491 CVE-2026-858809 · 4 reads

China-Linked Hackers Exploit Chrome and Windows Zero-Days in BlueMoon Attacks

China-linked clusters deploy the BlueMoon kit chaining Chrome V8 CVE-2026-85046 and Windows LPE CVE-2026-85880 in espionage campaigns.

GBHackersSep 10, 05:15 UTC · Sep 10, 2026Exploit / PoCExploitedCVE-2026-85046 CVE-2026-858805 · 3 reads

Novel Blue Moon kit targeting Chrome and Windows reflects new reality of AI-driven exploits

Proofpoint reports the BlueMoon exploit kit, chaining two Chrome V8 zero-days and a Windows ALPC bug, being shared across China-linked espionage groups.

The Register · SecuritySep 9, 22:28 UTC · Sep 9, 2026Exploit / PoCExploitedCVE-2026-85046 CVE-2026-858806 · 4 reads

Related CVEs

by mentions

CVE-2026-850462%8.8
Actively Exploited V8 Type Confusion in Google Chrome (CVE-2026-85046)
published Sep 3, 2026Google ChromeKEVPoC ×6
CVE-2026-85880<1%7.8
Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
published Sep 8, 2026Microsoft Windows 10KEV
CVE-2026-874914%8.8
Actively Exploited Out-of-Bounds Write in Google Chrome V8
published Sep 9, 2026Google Chrome (V8 JavaScript engine; tracked by CISA as 'Google Chromium V8')KEV
CVE-2026-858789.9
Improper Authorization in Azure Database for PostgreSQL Enables Privilege Escalation
published Sep 18, 2026Microsoft Azure Database for PostgreSQL
CVE-2026-858899.8
Missing Authentication in Microsoft Azure AI Foundry Enables Privilege Escalation
published Sep 17, 2026Microsoft Azure AI Foundry
CVE-2026-858858.8
Command Injection Privilege Escalation in Microsoft 365 Copilot
published Sep 17, 2026Microsoft 365 Copilot

Appears with

Microsoftvendor · 4
Violet Typhoonthreat actor · 3
UNK_LateNightthreat actor · 3
Googlevendor · 3
APT31threat actor · 3
UNK_DoubleCheckthreat actor · 2
GemStonemalware · 2
Google Chromeproduct · 2
UNK_QuietRacketthreat actor · 2
Proofpointvendor · 2
TA412threat actor · 2
Windows 11product · 2
Chromeproduct · 1
Windows 10product · 1
GemStoneproduct · 1
Windowsproduct · 1

Entities are extracted by the model from each article. First seen Sep 9, 2026, last mentioned Sep 18, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.