BlueMoon Exploit Kit Shows How AI Is Collapsing the Browser Patch Gap
Security researchers at Proofpoint have identified BlueMoon, a novel exploit kit chaining two Chromium browser flaws with a Windows privilege escalation bug, already used by at least four suspected Chinese state-linked espionage groups. Researchers say AI-assisted exploit development let attackers weaponise publicly available Chromium patches within days rather than the weeks or months defenders used to have - a stark warning that browser and OS updates now need to be applied immediately, not on a routine schedule.
