BlueMoon exploit kit targets Chromium and Windows vulnerabilities
Story essentials
Proofpoint, TA412, various threat actors
Global
August 28, 2026
This page is produced by collecting and structuring multiple public reports. Sections based only on reporting or testimony affect the displayed assessment, and the page is updated when new information is identified.
About this article
COMPAMIR Editorial Team
The COMPAMIR editorial team brings together public reporting and links to the original coverage. We update the page as new information emerges.
Read our editorial policy- Earlier version 19/10/2026, 2:40:34 AM
Security researchers identified 'BlueMoon', an exploit kit used by at least four hacking groups. The kit chains three vulnerabilities in Chromium and Windows to install malware. AI-driven vulnerability discovery and 'patch gaps' are cited as key factors in the rapid development of the kit.
Read next
Prioritized by shared people, places, and events.
Critical Vulnerabilities Discovered in PHP Programming Language
Major vulnerabilities in the PHP programming language have been identified. Website owners are urged to patch systems immediately or take sites offline. The vulnerabilities were identified by human researchers using AI tools.