Victim

US defense contractors

1 mentions in 7 days · 2 in 30 days · 2 total · first seen Aug 20, 2026 · last 6d ago

Timeline2 articles

Multiple Chinese hacking groups seen using identical Chrome zero-day exploit

Four China-linked espionage groups share identical BlueMoon Chrome zero-day exploit kit targeting US defense contractors and Asian government agencies.

Proofpoint identified at least four Chinese-aligned espionage groups (TA412/RedBravo, UNK_LateNight, UNK_DoubleCheck, UNK_QuietRacket) using an identical Chrome zero-day exploit kit dubbed BlueMoon in late August through this week. Targets include US defense contractors, NGOs, mining companies, and Southeast Asian government agencies. The exploit chains a Chromium patch-gap vulnerability with a Windows flaw, delivering malware such as ShadowPad and a fake Gemini browser extension backdoor, with possible AI-assisted exploit development.

The Recordupdated 10:17 UTC · 12h agofirst Sep 9, 16:30 UTC · 6d agoExploit / PoC in the wild 20 sources1

US Defense Contractors Admit Their Rising CMMC Scores May Not Be Accurate

US defense contractors report rising self-assessed CMMC Phase I scores while doubting the accuracy of those self-evaluations.

Self-assessment scores under the US Department of Defense's Cybersecurity Maturity Model Certification (CMMC) Phase I have reportedly reached an all-time high. Contractors themselves doubt whether these self-reported scores accurately reflect their real security maturity. The uncertainty highlights concerns about the reliability of self-assessments in the program's initial phase.

Infosecurity MagazineAug 20, 12:40 UTC · 26d agoPolicy & legal

Appears with

threat actor RedBravo 1 threat actor TA412 1 threat actor UNK_DoubleCheck 1 threat actor UNK_LateNight 1 threat actor UNK_QuietRacket 1 malware ShadowPad 1 ai model Gemini 1 organization Ministry of State Security 1 organization US Department of Defense 1 product Chrome 1 product Chromium 1 vendor Google 1 vendor Proofpoint 1 victim Southeast Asian government agencies 1 victim US NGOs 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.