Four Threat Groups Exploited Same Chrome and Windows Zero-Day Kit

Four separate hacking groups were found using an identical exploit kit targeting vulnerabilities in Google Chrome and Microsoft Windows. The discovery highlights a concerning trend where multiple threat actors gain access to the same exploitation tools, amplifying the potential damage. Security researchers identified a 'patch gap' — the window between a vulnerability being exploited and a fix being deployed — as a key contributing factor. The accelerating pace of AI-assisted vulnerability discovery is also believed to have played a role in the wider spread of these exploits. The findings underscore growing risks as advanced hacking tools become more accessible to a broader range of malicious actors.