Normal view
The Timesβs New Space Editor Has Her Eye on the Cosmos
NASA Releases Data from Artemis II Moon Mission, Calls It 'Sights and Sounds of Science'
Read more of this story at Slashdot.
Margaret Hamilton, Whose Software Guided the Apollo Missions, Has Died

Β© NASA/Alamy
Margaret Hamilton, trailblazer whose software powered Apollo 11 moon landing, dies at 90
MIT computer scientist led development of software for moon mission and earned Presidential Medal of Freedom
Margaret Hamilton, the computer pioneer whose software powered the first moon landing, has died, the Massachusetts Institute of Technology (MIT) announced on Wednesday. She was 90.
In an era before titles such as software engineer and computer scientist became mainstream, Hamilton, who died on 30 September, learned to program under the tutelage of a renowned MIT meteorologist.
Continue reading...
Β© Photograph: AFP/Getty Images

Β© Photograph: AFP/Getty Images

Β© Photograph: AFP/Getty Images
Who Owns the Moon?

Β© NASA
Superpowers Race to Put Nuclear Reactors on the Moon

Β© NASA
What a Massive New Crater Means for Future Moon Bases

Β© NASA Goddard/Intuitive Machines
A week in security (September 7 β September 13)
Hereβs what weβve covered in the last seven days on Malwarebytes Labs:
- Crypto customers targeted by scammers after email marketing provider breach
- Android malware creates a hidden copy of your banking app
- BlueMoon exploit kit turns Chrome and Windows flaws into attacks
- Will AI kill us all within the next decade?
- Update Chrome now to protect against an actively exploited vulnerability
- Copyright scammers get Instagram accounts suspended and demand payment
- More than 100,000 fake stores are out to steal your card details
- Microsoft fixes record 964 flaws, including 2 exploited zero-days
- The push to stop algorithms controlling social media feeds has begun
- Grindr settles HIV status data-sharing lawsuit for $35 million
- MikroTik router flaws allow takeover without a password
- Loyalty points fraud is funding hacker holidays (Lock and Code S07E18)
- LG TV flaws could let attackers listen in, even in standby mode
- Flirty OnlyFans promoters on X may be using AI to appear human
Stay safe!
What do cybercriminals know about you?
Use Malwarebytesβ free Digital Footprint scan to see whether your personal information has been exposed online.
BlueMoon exploit kit turns Chrome and Windows flaws into attacks
BlueMoon, a shared Chrome and Windows exploit kit, shows why βpatch laterβ is becoming a dangerous gamble.
Security updates are easy to put off. The browser still opens, Windows still works, and choosing to relaunch your browser or restart your computer later can feel harmless.
But a newly documented exploit kit called βBlueMoonβ shows how quickly patching delays can become dangerous. Proofpoint Researchers found four espionage groups using the same exploit chain against Chrome browsers running on Windows within days of one another.
The campaign is a timely reminder that once a security flaw, or even its fix, becomes public, attackers may move faster than many users expect.
The attacks began with phishing emails. A victim who clicked a malicious link could be sent to a web page designed to exploit two vulnerabilities in Chromeβs V8 JavaScript engine, followed by a Windows vulnerability to break out of the browserβs protections and gain higher privileges on the computer.
The Chrome vulnerabilities used by BlueMoon were patched in the Stable channel on September 3 and September 8, 2026. The first was already actively exploited when Google released its update. Microsoft addressed the Windows vulnerability in its September Patch Tuesday updates, by which point it was also being exploited.
CISA has since added all three flaws to its Known Exploited Vulnerabilities (KEV) catalog, which lists vulnerabilities known to have been exploited in real-world attacks.
The notable part is not just that BlueMoon exploited the flaws, but how quickly the capability appears to have spread. Publicly visible upstream fixes can give attackers clues before downstream browser updates reach users, allowing a weaponized chain to be developed and adopted by multiple groups very quickly.
Does that mean that patches can no longer be tested before they are released to the public? No, but we may need to rethink how they are tested and deployed, because it appears some cybercriminals are effectively beta-testing the patches themselves.
The researchers also found clues, but no conclusive evidence, that the exploit kit was developed with AI assistance. The broader concern is credible: AI tools can help attackers interpret source-code changes, write and modify code, document test results, and learn from failed attempts.
In practical terms, the gap between βa flaw is fixed upstreamβ and βmost people are protectedβ may be increasingly valuable to attackers. We should try to minimize that gap.
How to stay safe
Not every security update needs to be installed the moment it appears. In organizations especially, updates may need testing, staged deployment, and contingency plans. But vulnerabilities known to be actively exploited deserve greater priority. That is precisely why CISAβs KEV catalog is so important: It helps organizations identify the vulnerabilities they should address first.
For home users:
- Install browser and operating-system updates promptly. Use the few minutes they take to grab a drink rather than repeatedly postponing them.
- Donβt click links in unsolicited emails.
- Use up-to-date, real-time anti-malware protection to help catch the malware that exploit kits attempt to deliver.
Stop threats before they can do any harm.
Malwarebytes Browser Guard blocks phishing pages and malicious sites automatically. Free, one click to install. Add it to your browser β
Is There Alien Debris on the Moon? Some Scientists Plan to Find Out.

Β© NASA