BlueMoon concatena falle in Chrome V8 e Windows ALPC per superare la sandbox, elevare i privilegi e installare malware.

BlueMoon chains two Chrome V8 zero-days with a Windows flaw in phishing attacks used by APT31 and other espionage clusters.

A patch gap and the hastened pace of AI-based vulnerability discovery are likely contributors.