Four hacking groups found sharing same Chrome and Windows exploit tool

Security researchers have identified four separate hacking groups using an identical exploit kit that targets vulnerabilities in Google Chrome and Microsoft Windows. The discovery suggests these groups either shared tools directly or independently found the same weaknesses through similar methods.

Analysts point to two likely factors behind the pattern: a 'patch gap,' where software makers are slow to fix known flaws after they're disclosed, and the growing use of AI tools to speed up the search for security vulnerabilities. Both trends can give attackers a wider window to exploit weaknesses before they're patched.

The findings highlight how vulnerability research is evolving as AI tools make it easier to find flaws in widely used software, raising the stakes for companies to patch quickly.