Multiple Chinese hacking groups seen using identical Chrome zero-day exploit

September 9, 2026 · 6:47 am 5 sources

Image: The Record

Coverage

Coverage

• Multiple Chinese hacking groups seen using identical Chrome zero-day exploit
  The Record by Recorded Future News · September 9, 2026 16:30
  A Google Chrome bug identified in August was exploited by at least four China-linked cyber-espionage groups, according to researchers.
• 4 groups caught using the same Chrome and Windows exploit kit
  Ars Technica · September 9, 2026 20:55
  A patch gap and the hastened pace of AI-based vulnerability discovery are likely contributors.
• New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender
  SecurityWeek · September 10, 2026 07:09
  The exploit provides full System privileges on Windows machines running the September 2026 patches. The post New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender appeared first on SecurityWeek .

More coverage

• Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed
  The Hacker News · September 9, 2026 06:47
  The security researcher known as Chaotic Eclipse has dropped a proof-of-concept (PoC) for yet another zero-day in Microsoft Defender. The vulnerability, codenamed ShieldCrash, is assessed to be a patch bypass for CVE-2026-69414 (CVSS score: 7.8), also called ShieldBreak, which the researcher…
• Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
  The Hacker News · September 9, 2026 16:34
  Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and Google Chrome. The first in-the-wild use of BlueMoon has been attributed to the China-aligned…