BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand ...

Dependency scanning protects modern codebases from open-source risks by auditing direct and nested packages inside the CI/CD pipelines.

Over the past few years, browsers have continuously evolved. Originally, they were purely display tools for HTML and media. With JavaScript, WebAssembly, WebGL, and WebGPU, they have become ...

Attackers use external Teams accounts and remote-support tools to gain credential-backed access that can move laterally ...

Proofpoint researchers identified BlueMoon, an exploit kit used by at least four espionage-linked threat clusters since late ...

Four espionage groups used the BlueMoon Chrome+Windows exploit kit within 12 days. Researchers suspect AI development.

A rapidly adopted exploit kit, dubbed BlueMoon, chains Chrome and Microsoft Windows zero-days to compromise targets in espionage-focused phishing campaigns.

Proofpoint says at least four espionage groups rapidly adopted BlueMoon, chaining Chrome V8 patch-gap flaws with a Windows LPE to deliver malware including GemStone and ShadowPad.

SMARTPHONE users can access reliable, advert-free, up-to-the minute bus departure information after the installation of 6,700 ...

CISA adds three exploited Cisco, Citrix, and Fortinet flaws to KEV, requiring federal agencies to patch by September 12, 2026 ...

LLM-based code scanners won’t help attackers build a nuclear weapon, but that refusal could work in their favor.

This week’s cyber threats span phishing abuse, malicious extensions, exposed systems, old flaws, AI attacks, and supply-chain ...