BlueMoon exploit kit turns Chrome and Windows flaws into attacks

The BlueMoon exploit kit chains together Chrome and Windows vulnerabilities that were deployed by at least four espionage groups within days of each other following disclosure. Proofpoint researchers documented the coordinated use of this exploit chain, indicating rapid adoption of newly disclosed vulnerabilities by state-sponsored actors. All three affected vulnerabilities were added by CISA to its KEV (Known Exploited Vulnerabilities) catalog, confirming they are being actively exploited in real-world attacks. The campaign underscores the risk of delayed patching, as threat actors often weaponize security updates and their fixes faster than organizations can deploy them.