ALL POSTS

Key Findings Adobe Acrobat Chrome extension vulnerability (CVE-2026-48294, CVSS 7.4) affected 314+ million users and allowed silent theft of WhatsApp Web data Exploitation required only user interaction - visiting a malicious webpage - with no malware, credential theft, or session cookie compromise needed Vulnerability chain consisted of three separately unremarkable flaws in message passing, storage handling, and feature flags that composed into a critical attack Attack coul

Key Findings Adobe released emergency patches for CVE-2026-34621, a critical vulnerability in Acrobat Reader actively exploited in the wild The flaw has a CVSS score of 8.6 and allows arbitrary code execution through prototype pollution in JavaScript Evidence suggests exploitation has been occurring since at least December 2025 Security researcher Haifei Li discovered the vulnerability being used to deliver malicious JavaScript via crafted PDFs Affected versions include Acrob