---
title: "Attackers are weaponizing the gap between Chromium fixes and Chrome patches"
type: signal
url: https://frontiernewswire.com/s/attackers-are-weaponizing-the-gap-between-chromium-fixes-and-chrome-9a2d16b2
published: 2026-09-11T01:10:19.000Z
byline: "Source: CSO Online"
---

# Attackers are weaponizing the gap between Chromium fixes and Chrome patches

Source: CSO Online · Published 2026-09-11 · Canonical: https://frontiernewswire.com/s/attackers-are-weaponizing-the-gap-between-chromium-fixes-and-chrome-9a2d16b2

A new exploit kit is revealing the perils of the “patch later” mentality. According to the Proofpoint Threat Research team , espionage-motivated threat actors are using a new malicious toolkit to chain together four separate Chrome browser and Microsoft Windows vulnerabilities to allow them to launch targeted spear phishing campaigns. Proofpoint, which researched the new attack method along with Google’s Threat Intelligence Group, Microsoft’s Threat Intelligence Center, and cybersecurity company Volexity, has dubbed it BlueMoon. “BlueMoon was developed, deployed rapidly, and shared across multiple threat actors within days in a manner that had high detection signals,” Proofpoint noted. It offers a low cost and low barrier to entry for attackers who are increasingly using AI agents to enhance their tradecraft . The BlueMoon attack chain BlueMoon strings together three different flaws in Chrome and Chromium-based browsers: A type confusion vulnerability ( CVE-2026-85046 ) in Chromium’s o

In this story: [Chrome](https://frontiernewswire.com/models/chrome), [Google Threat Intelligence Group](https://frontiernewswire.com/companies/google-threat-intelligence-group), [Proofpoint](https://frontiernewswire.com/companies/proofpoint)

## Sources

- [Read the original at CSO Online](https://www.csoonline.com/article/4220939/attackers-are-weaponizing-the-gap-between-chromium-fixes-and-chrome-patches.html)

## Related on Frontier

- [Major Cyber Attacks in October 2026: Fake AI, Account Takeovers, and Remote Access Threaten US and EU](https://frontiernewswire.com/s/major-cyber-attacks-in-october-2026-fake-ai-account-takeovers-and-c1c7b6aa)
- [Anthropic AI model finds Linux kernel bug that leads to remote root access](https://frontiernewswire.com/s/anthropic-ai-model-finds-linux-kernel-bug-that-leads-to-remote-root-d428a906)
- [Critical Linux kernel flaw allows remote root attacks on MPTCP servers](https://frontiernewswire.com/s/critical-linux-kernel-flaw-allows-remote-root-attacks-on-mptcp-servers-fc74d8de)

---

[More Latest Signal](https://frontiernewswire.com/) · [Signals](https://frontiernewswire.com/verified-reporting)