Volexity Inc.
Company
5
MENTIONS
3
EPISODES
3
PODCASTS
Search complete. 5 mentions across 3 episodes found for "Volexity Inc.".
Sep 11, 2026
Claire AirdHOST
The kit was spotted in late August.
Claire AirdHOST
According to Proofpoint and Volexity, at least two of the four groups using the kit have a Chinese state nexus.
Claire AirdHOST
Google has released patches for an actively exploited Chrome zero-day.
Claire AirdHOST
The zero-day is a memory corruption bug in Chrome's V8 JavaScript engine, and was discovered by a student at the Seoul National University.
Ryan NaraineHOST
Um, BlueMoon, Costin.
Ryan NaraineHOST
We got, uh, parallel reports from our friends at Proofpoint and our friends at Volexity showing multiple espionage actors, including, oh Lord, TA412, APT31, UTA0560, chaining Chromium, uh, type confusion bugs, a V8 sandbox escape on a Windows LPE, uh, in live attacks.
Ryan NaraineHOST
Google said it was aware of this CVE being exploited in the wild.
Ryan NaraineHOST
We just... we got a new Chrome bug.
Ryan NaraineHOST
Uh-
Costin RaiuHOST
Mm
Ryan NaraineHOST
... quick thoughts, Costin, on the Proofpoint and Volexity reporting here?
Costin RaiuHOST
here?Um, it's obviously is very interesting.
David ShipleyHOST
It's a link-following flaw that lets an authorized attacker elevate privileges locally.
David ShipleyHOST
The second, CVE-2026-85880, is a heap-based buffer overflow in the Windows Advanced Local Procedure Call, or ALPC, credited to researchers at Volexity and Proofpoint.
David ShipleyHOST
Microsoft hasn't shared details on how either flaw was exploited.
David ShipleyHOST
For defenders, the math here is pretty brutal.