A nearly identical exploit kit targeting Chromium-based browsers and Windows has been spotted by security firm Proofpoint, being used by at least four hacking groups, some with ties to the Chinese government. The kit, dubbed BlueMoon, exploits three vulnerabilities: two in Chromium and one in the Windows kernel, affecting multiple versions of the operating system. Despite the risk, the attackers used it rapidly and widely, likely due to a 'patch gap' in the Chromium supply chain and the use of AI.

The four groups targeted a broad spectrum of organizations, including a range of companies, showing the widespread reach of this exploit. Proofpoint suggests this could indicate a reduced barrier to entry for such capabilities, thanks to the rise of AI in threat actor exploit development, particularly in open source codebases like Chromium.

This development highlights the ongoing arms race in cybersecurity, where attackers innovate faster than defenses can implement patches. The rapid deployment and sharing of this exploit suggest a new era of more accessible and quicker attack vectors.

For the average user, the lesson is clear: keep your software up to date and be wary of suspicious activity. For the tech-savvy, the takeaway is to stay vigilant and consider the role of AI in cybersecurity.