🛡️ **DEVELOPING — Unconfirmed: 'BlueMoon' Kit Targets Windows and Chrome Zero-Days**
Published Thursday, September 10, 2026 at 11:07 AM PT BLUF: Security researchers report a “BlueMoon” exploitation kit combining Windows and Chrome zero-day flaws. Scope, victims, and active exploitation unconfirmed; awaiting technical disclosure with CVE identifiers and attack timeline. DETAILS BlueMoon/Bluekit reported linking Windows zero-day + Chrome zero-day in coordinated attack chain Kit employs browser-in-the-middle (BitM) techniques for credential theft and lateral movement Associated malware (msaRAT pattern) routes command & control via Chrome/Edge browsers AI-driven exploit development mentioned as factor in kit construction Targeting pattern aligns with prior zero-day activity against defense and commercial sectors IMPACT ...