Exploit Kit or Supply Chain Woe?
The recent revelation that at least four hacking groups, allegedly tied to the Chinese government, are using a nearly identical exploit kit targeting Chromium based browsers and older Windows versions should serve as a wake up call for the tech industry.
The fact that this kit, dubbed BlueMoon by researchers from Proofpoint, chains three vulnerabilities together in such a brazen manner is concerning and highlights deeper issues within the security landscape.