security Source: The Hacker News
📅 23 September 2026 at 02:30 PM UTC

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

Verified Primary Feed Ingestion
↗ Open Source Publication
🏷️ Identified Common Vulnerabilities & Exposures (CVE)
🛡️ Advisory: CVE-2026-87491 → 🛡️ Advisory: CVE-2026-85880 → 🛡️ Advisory: CVE-2026-85046 →
⚡ Executive Takeaways & Intelligence Summary
A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites. The attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome (CVE-2026-85046, CVE-2026-87491) and one impacting Windows Advanced Local Procedure Call (CVE-2026-85880) to break
Publication Reference: https://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html
← Back to News Wire

📰 Related Surveillance Disclosures

BleepingComputer
Hackers pull off $133 million French bank heist via service provider
BleepingComputer
CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands
The Hacker News
Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub