Four groups caught using the same Chrome and Windows exploit kit

A September 2026 Ars Technica security feed highlights active exploitation of Chrome, Windows, and macOS vulnerabilities; record Microsoft patching; supply-chain compromises; credential and personal-data exposure; BGP hijacking; malicious proxy devices; AI-agent and LLM security failures; phishing and browser fingerprinting; and emerging attack techniques. The feed indicates a rapidly intensifying threat landscape driven partly by AI-assisted vulnerability discovery, with several incidents involving broad organizational impact and active exploitation.