Google's exploited V8 flaw was one stage in BlueMoon, a three-vulnerability Chrome and Windows chain that multiple espionage groups adopted within days. Patch both Chrome and Windows, then hunt the published indicators.
Nineteen Chrome and Edge extensions delivered wallet-draining and credential-stealing modules, including five legitimate tools weaponised after ownership changes.
Google patched CVE-2026-85046 in Chrome 152.0.7977.82/.83 after confirming an exploit in the wild. CISA set a federal deadline of 18 September.
Chrome 151 fixes a critical Chromoting use-after-free and six high-severity flaws. Google has not reported exploitation, so the immediate task is to verify that staged updates reached every managed endpoint.
Google patched an actively exploited V8 memory-corruption flaw reachable through a crafted web page. The fix is not complete until the browser restarts.
As of the latest beta today it seems that Google Chrome has the option to no longer display the padlock that shows if a website is is actually SSL encrypted. Even though I like the little indicator, with everything going…
