New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws
Summary
A new exploit kit named 'BlueMoon' has been observed being used by multiple cyber-espionage groups. This kit is known to exploit zero-day vulnerabilities in both Microsoft Windows and Google Chrome.
IFF Assessment
The discovery of a new exploit kit leveraging zero-day vulnerabilities in widely used software indicates a significant threat to defenders, as it can be used for malicious purposes.
Severity
Exploiting zero-day vulnerabilities in both an operating system (Windows) and a popular browser (Chrome) suggests a high attack vector and significant impact, likely warranting a high CVSS score.
Defender Context
Defenders should be aware of the 'BlueMoon' exploit kit and the potential for zero-day exploits in Windows and Chrome. Staying up-to-date with patches and employing robust endpoint detection and response (EDR) solutions are crucial.