1. Executive summary A third China-nexus threat actor, tracked by Volexity as UTA0565, used the same chained zero-day exploit kit as the two actors
1. Executive summary Proofpoint has identified a previously undocumented exploit kit, "BlueMoon," that chains a V8 type confusion (CVE-2026-85046, CVSS 8.8
1. Executive summary Microsoft's September 2026 Patch Tuesday is the largest single-day release in the company's history: 974 own-product CVEs
1. Executive summary CVE-2026-85046 is a high-severity (CVSS 8.8) type confusion vulnerability in Google Chromium's V8 JavaScript and WebAssembly engine,