Mchezo
Überblick

Ett klikk i Chrome kan være nok

Ett klikk i Chrome kan være nok

En angrepspakke kalt BlueMoon kombinerer sikkerhetshull i Chrome og Windows for å ta kontroll over datamaskiner. Fire spiongrupper tok faktisk verktøyet i bruk i løpet av kun en uke.

Fire spiongrupper angrep Chrome og Windows med BlueMoon-hackerpakke – oppdater nå

Det er sikkerhetsforskere hos Proofpoint har avdekket fire separate spionkampanjer som benyttet den samme angrepspakken mot Chrome og Windows. milkshakeslot.com

BlueMoon kombinerer tre sikkerhetshull for å bryte seg ut av nettleseren og kjøre skadevare med utvidede rettigheter på Windows-maskiner.

Alle de kjente sikkerhetshullene er heldigvis rettet, om man er oppdatert.

Microsoft slapp nylig sin største sikkerhetsoppdatering hittil, med rettelser for 966 sårbarheter – dette inkluderer to hull som allerede var utnyttet i angrep. Her kan du lese mer om den rekordstore Windows-oppdateringen.

Skummelt Windows-angrep starter med en e-post

Angrepene begynner med phishing-e-poster som sender mottakeren til et nettsted kontrollert av angriperne.

BlueMoon utnytter først to sårbarheter i Chrome-motoren V8:

  • CVE-2026-85046
  • CVE-2026-87491

Deretter utnyttes Windows-sårbarheten CVE-2026-85880 for å oppnå høyere systemrettigheter. Angriperne kan dermed installere den skadevaren de ønsker på datamaskinen.

Google bekrefter at CVE-2026-85046 har blitt utnyttet i aktive angrep. Sårbarheten ble rettet i Chrome 152.0.7977.82 og .83 for Windows og Mac, samt .82 for Linux.

Fire hackergrupper på en uke har utnyttet hullene

Den første observerte kampanjen startet 28. august og knyttes til TA412, også kjent som APT31. Gruppen skal ha angrepet amerikanske organisasjoner og selskaper innen gruvedrift og råvarehandel.

Angrepet installerte en ondsinnet Chrome-utvidelse kalt GemStone. Utvidelsen var forkledd som Googles Gemini-assistent.

Noen dager senere ble BlueMoon brukt mot amerikanske romfartsselskaper for å installere bakdøren ShadowPad. Andre kampanjer rettet seg mot en produsent i Vietnam og virksomheter innen myndigheter, finans og rådgivning i Singapore og Indonesia.

Gruppene benyttet forskjellig skadevare og infrastruktur, men selve BlueMoon-koden skal ha vært nær identisk. Forskerne vet foreløpig ikke om verktøyet kommer fra en felles leverandør, en statlig aktør eller en annen delt kilde.

Annonse

Mer privat på nett med NordVPN – få 4 ekstra måneder

  • 🔐 Skjul IP-adressen din når du surfer
  • 👁️ Blokker sporere og ondsinnede nettsteder
  • 🚨 Dark Web Monitor varsler om lekkede kontoopplysninger
  • ⚡ Rask VPN-forbindelse med NordLynx
  • 📱 Beskytt flere enheter med samme konto
  • 🔥 Opptil 77 % rabatt + 4 ekstra måneder
Eksklusivt ITavisen-tilbud
Få ITavisen-tilbudet
4 ekstra måneder inkludert
✓ 30 dagers pengene tilbake-garanti

En oppdatering er ikke alltid nok

Brukere bør installere de nyeste oppdateringene til Chrome, andre Chromium-baserte nettlesere og Windows så raskt som mulig.

Oppdateringene stenger den kjente angrepsveien, men fjerner ikke nødvendigvis skadevare som allerede er installert.

Sikkerhetsansvarlige anbefales blant annet å undersøke om chrome.exe har startet cmd.exe, curl.exe eller msgbox.exe. Andre mulige spor er filer kalt ChromeUpdate.exe eller msgbox.exe i den midlertidige mappen, katalogen C:\Users\Public\stomp_ext og ukjente planlagte oppgaver.

Tomb Raider: Legacy of Atlantis – Neues Video stellt Kreaturen vor

Nachdem der achte Teil der Videoreihe über die Entstehung von „Tomb Raider: Legacy of Atlantis“ auf die Gestaltung griechischer Ruinen einging, stellt der neunte Teil die Kreaturen vor, die dort leben. Crystal Dynamics, Flying Wild Hog und Publisher Amazon Game Studios geben einen detaillierten Einblick in den Entstehungsprozess dieser legendären und majestätischen Kreaturen. „Für Griechenland haben […]

Leser wählen Nick Bätzner zum "Spieler des 5. Spieltages"

Die Leser von liga3-online.de haben entschieden: Nick Bätzner von Rot-Weiss Essen ist der "Spieler des 5. Spieltages".

Doppelpack gegen Würzburg

In der wöchentlichen Umfrage erhielt der Offensivspieler 32 Prozent der Stimmen. Bätzner war am Samstag mit einem Doppelpack am 6:2-Erfolg gegen die Würzburger Kickers beteiligt. Die weiteren Platzierungen: Julian Ulbricht (SV Waldhof Mannheim / 31 Prozent), Stefan Bajic (Alemannia Aachen / 13 Prozent), David Otto (Viktoria Köln / 10 Prozent), Marvin Schulz II (Preußen Münster / 8 Prozent), Eric Hottmann (Fortuna Düsseldorf / 3 Prozent), Alexander Guiddir (TSV Havelse / 3 Prozent) und Timo Schlieck (SC Verl / 2 Prozent).

Apple TV sensation Widow's Bay breaks a big Emmys record with 14 wins

Apple TV's sensation Widow's Bay has broken an Emmys record to win the most awards for a comedy show in a single year.

The show picked up 14 wins at the Emmys, with eight won at the Creative Arts ceremony and another six coming during the ceremony on September 14. That means Widow's Bay beat The Studio's 13 Emmys to set the new record.

Altogether, Widow's Bay won awards for:

  • Best Comedy Series
  • Lead Actor in a Comedy Series – Matthew Rhys
  • Supporting Actor in a Comedy Series – Stephen Root
  • Supporting Actress in a Comedy Series – Kate O'Flynn
  • Guest Actress in a Comedy Series – Betty Gilpin
  • Directing for a Comedy Series – Hiro Murai
  • Writing for a Comedy Series – Katie Dippold
  • Outstanding Casting for a Comedy Series – Allison Jones, Emily Buntyn, Lisa Lobel, and Angela Peri
  • Outstanding Cinematography for a Series (Half-Hour) – Christian Sprenger
  • Outstanding Music Composition for a Series (Original Dramatic Score) – David Fleming
  • Outstanding Music Supervision – Toko Nagata
  • Outstanding Production Design for a Narrative Program (Half-Hour) – Steve Arnold, Peter Borck, and Jennifer Engel
  • Outstanding Sound Editing for a Comedy or Drama Series (Half-Hour) and Animation – Matt Yocum, Sang Kim, Goeun Everett, Ryan Sullivan, Nate Underkuffler, Leslie Bloome, and Shaun Brennan
  • Outstanding Sound Mixing for a Comedy or Drama Series (Half-Hour) and Animation – Tim Hoogenakker, Larry Benjamin, Kevin Parker, Scott Michael Smith, Judah Getz, and Leslie Bloome

Widow's Bay follows Rhys's Tom Loftis, the mayor of the titular New England town who aims to boost its tourism – despite an ancient curse that plagues the area.

The show has been incredibly well-received, with legendary director Guillermo del Toro tweeting: "If I may - in my estimation - #WidowsBay may very well be the best streaming series in a long time… and hands down one of the most mesmerizing acts of narrative prestidigitation in Horror."

All episodes are streaming on Apple TV now, and Widow's Bay has also been renewed for season 2. For more, check out our guide to the best shows on Apple TV to fill out your watchlist.

Admitting the OGL fiasco was a 'rug pull', D&D head says 'bluntly, we're recovering from a lot of missteps—very loud, very public missteps'

Dungeons & Dragons has had a rough handful of years. A new version of the Open Game Licence (OGL) leaked in 2023, portending doom for independent creators and giving Wizards of the Coast a licence to rug-pull any third-party creator it didn't like (among other such horrors). This began the long and arduous process of mending burned bridges and un-pissing everybody off, starting with an immediate walk-back.

Since then, there have been upsets, ones I've been plenty critical of myself. But in late 2025, D&D got a new head in Dan Ayoub, who is now in charge of the D&D franchise at Wizards of the Coast. And his words last August gave me hope—and continue to do so, given the refreshingly straightforward candor of them.

In an interview with Wargamer's Mollie Russell, Ayoub doesn't mince words: "Bluntly, we're recovering from a lot of missteps—very loud, very public missteps. And we're not going to fix it in one year. I can talk 'til the cows come home, but we've got to show more than tell, and that is going to take some time. I'm very conscious that it's going to take a lot of time to win back the trust to the extent that I would like.

"Having said that, I think we've started strongly, and a lot of these things are still happening behind the scenes." To Ayoub's credit, there've already been some solid signs of change. After bungling its weird 3D tabletop in Sigil, D&DBeyond has focused on its already-present 2D offerings and incrementally improved it considerably.

Rather than trying to muscle out third-party competition, Wizards has also been doing extensive partnered content with those same creators, which is genuinely lovely to see. It's not all roses, mind—Hasbro has been engaging in some nasty union busting behaviour. Which didn't take, as UWOTC-CWA was formed thereafter.

Still, overall, Ayoub does seem to genuinely be walking the walk, not just talking the talk: "Honestly, if I would give myself good grades on one thing in particular over the past year, I think it's been listening. We established the community council. I've personally spent a bunch of time talking to not just fans, but retailers and consumers."

Regarding the OGL itself, Ayoub states that: "D&D is about, for, and by the fans. That's the first fundamental point that we can never lose. I think, over the course of several years, we lost sight of what was important. We lost sight of who our audience was."

Ayoub admits that the OGL fiasco "was a rug pull, right? A lot of people and businesses were built up around a specific thing. Trust was given to the brand, and people rightly felt the rug was pulled from under them. In some cases, it's caused damage we are still trying to fix today. So I understand the hesitancy of 'okay, here's this new guy saying all these things'."

"My biggest takeaway as I step into this role is that trust takes a long time to build and a second to break. I'm keenly aware it's going to take me a long time to repair this, but my hope is people will give the benefit of the doubt as we continue to show that lessons have been learned. This is a new direction, a new voice, and a new spirit and energy behind D&D."

While the grotty old cynic in me is still tutting and shaking my fist at recent crossovers, I still feel more optimistic about the system's future than I have in a long time. For one, just having its current head speak so candidly is kind of jarring—let alone the actual enthusiastic collaboration with third-party sources. The future's looking brighter by the second. Or, as Ayoub puts it, talking about bringing in partners to help write core source books:

"What was rewarding for me was, when we laid out that we want to bring all these voices back, I was thrilled with the level of excitement from these partners. It was almost like this exhale of relief."

2026 games: All the upcoming games
Best PC games: Our all-time favorites
Free PC games: Freebie fest
Best FPS games: Finest gunplay
Best RPGs: Grand adventures
Best co-op games: Better together

In brief

Inga större attacker mot svenska valet Inför söndagens val fanns det en beredskap för att ”främmande makt” skulle utföra cyberangrepp eller koordinerad informationspåverkan i syfte att påverka resultatet, även om bedömningen var att det svenska valet inte var prioriterat för utländska hotaktörer. Nu gör Nationellt cybersäkerhetscenter (NCSC) och Myndighete…

Nordmenn får ikke den nye Apple-pakken Nye iCloud+-fordeler kommer ikke nordmenn til gode.

Metal Gear Solid 5 modders are bringing the open-world stealth game more in line with the PS1 classic in a crucial way Weapons and equipment OSP

Preview: Wir konnten Alien Isolation 2 anspielen – Aber kann der Nachfolger auch liefern? | gamescom 2026 Ich hatte auf der gamescom 2026 die Möglichkeit, in das Intro von Alien Isolation 2 zu schauen! Und Mensch, war ich gespannt! Es ist ja schließlich 12 Jahre her, als der Vorgänger released wurde und bei Kritikern und Fans extrem gut ankam. Was hat sich also in der Zwischenzeit getan?

London snubbed in favour of Nairobi for 2029 World Athletics Championships Munich selected for 2031, announces president Seb CoeSource in British bid ‘gutted’ at double disappointmentLondon’s bid for the 2029 World Athletics Championships has ended in failure and heartbreak after it lost out to Nairobi. It marks an historic day for the Kenyan capital as it becomes the first African city

Svenska AI-bolaget tar in nära en miljard När det gäller medicinsk teknik (healthtech) har svenska Tandem Health fått en hel del uppmärksamhet på sistone. Tandem erbjuder en sorts copilot för vårdpersonal som bland annat hjälper till med journalföring. Nu står det klart att Tandem Health har dragit in 100 miljoner dollar (977 miljoner kronor) i den senaste

Grand Blue codes (September 2026) for free rerolls, chests, and more Codes for Grand Blue will grant you Trait Rerolls, Race Rerolls, Fruit Chests, and other handy items