Chinese espionage groups swarm to exploit triple-link chain of zero-days

At least four China-aligned espionage groups rapidly exploited a chain of three previously unknown (zero-day) vulnerabilities in Chrome-based browsers and Windows, enabling full system privilege escalation with no patch available at the time of attack. The speed at which multiple threat actors adopted this exploit chain — beginning with APT31 — suggests sophisticated intelligence-sharing or parallel discovery among state-sponsored groups. This incident highlights the extreme danger of zero-day chaining, where individually limited flaws are combined to produce catastrophic impact. Organizations relying solely on reactive patching are left dangerously exposed during the window between discovery and vendor remediation. Targeted sectors such as NGOs, aerospace, and commodity trading represent high-value intelligence targets, underscoring that any organization with sensitive data is a potential victim.