Microsoft Windows

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 11, 2026
Last mentionedSep 22, 2026

Timeline

2 articles · newest first

Hackers Clone Legitimate Websites to Silently Trigger Chrome and Windows Zero-Day Exploits

A cyber campaign uses cloned legitimate websites to trigger zero-day exploits in Chrome and Windows, targeting Asian government entities for espionage.

Cyber Security NewsSep 22, 11:25 UTC · Sep 22, 2026OtherExploited1 · 1 read

Attackers are weaponizing the gap between Chromium fixes and Chrome patches

Espionage actors use the BlueMoon exploit kit to chain Chrome V8 and Windows kernel zero-days via spear phishing, gaining full admin on unpatched endpoints.

CSO OnlineSep 11, 01:10 UTC · Sep 11, 2026Exploit / PoCExploitedCVE-2026-85046 CVE-2026-87491 CVE-2026-858804

Related CVEs

by mentions

CVE-2026-874914%8.8
Actively Exploited Out-of-Bounds Write in Google Chrome V8
published Sep 9, 2026Google Chrome (V8 JavaScript engine; tracked by CISA as 'Google Chromium V8')KEV
CVE-2026-850462%8.8
Actively Exploited V8 Type Confusion in Google Chrome (CVE-2026-85046)
published Sep 3, 2026Google ChromeKEVPoC ×6
CVE-2026-85880<1%7.8
Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
published Sep 8, 2026Microsoft Windows 10KEV

Appears with

Google Chromevendor · 2
Volexityvendor · 2
Chromeproduct · 2
OpenAIai model · 1
Asian government entitiesvictim · 1
China-aligned espionage clustersthreat actor · 1
US NGOsorganization · 1
BlueMoonthreat actor · 1
China Digital Timesorganization · 1
UTA0565threat actor · 1
Center for American Progressorganization · 1
Chromiumproduct · 1
Chromiumvendor · 1
Windowsproduct · 1
mining companiesorganization · 1
mining companiesvictim · 1

Entities are extracted by the model from each article. First seen Sep 11, 2026, last mentioned Sep 22, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.