Proofpoint says at least four espionage groups rapidly adopted BlueMoon, chaining Chrome V8 patch-gap flaws with a Windows LPE to deliver malware including GemStone and ShadowPad.

Multiple espionage-motivated threat actors have rapidly adopted a newly discovered exploit kit that chains Chrome browser and ...

BlueMoon chains two Chrome V8 zero-days with a Windows flaw in phishing attacks used by APT31 and other espionage clusters.

A nearly identical exploit kit that targets critical vulnerabilities in both Chromium-based browsers and older versions of ...

Google patched 230 Chrome flaws, including an actively exploited V8 bug that could let attackers run arbitrary code.

Google switches Chrome to a two-week release cycle. Version 153 fixes 230 security vulnerabilities, including one actively ...

Google has fixed 230 Chrome vulnerabilities, including an actively exploited V8 zero-day that can trigger heap corruption.

Google has released Chrome 153 with security fixes for desktop and Android users, including a vulnerability that attackers are exploiting.

Chrome zero-day CVE-2026-87491 is under active attack. See what the V8 flaw can do, why the sandbox matters, and which Chrome ...

Google has released Chrome 153 to the stable channel with fixes for 230 security vulnerabilities, including a zero-day flaw ...

Chrome has a new zero-day, and it's already being used against real users. Google shipped Chrome 153 on Tuesday, patching 230 vulnerabilities, including a bug attackers found before Google ...

Google patched a Chrome V8 zero-day already exploited in attacks, its sixth this year, urging users to update immediately.