Once in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Exploit Chain Using Chrome and Windows Zero-Days

Multiple state-aligned threat actors, primarily China-linked, rapidly adopted a new exploit kit called BlueMoon—leveraging unpatched Chrome and Windows zero-days in targeted espionage campaigns—highlighting the accelerating pace and accessibility of advanced exploit development, likely aided by AI and the open source patch-gap.