Experts Warn of Zero-Day Exploit for Adobe Reader
Summary: Group-IB, a Moscow forensics firm, says a working exploit for a previously unknown critical flaw in Adobe Reader X and XI is being sold in the cybercriminal underground for up to $50,000, and that it bypasses the sandbox Adobe introduced with Reader X. Adobe spokeswoman Wiebke Lips said the company was not contacted by Group-IB and cannot verify the claims, while the author of the Blackhole Exploit Kit confirmed a private Adobe Reader exploit is being sold in closed circles and said he hopes to add it to his kit.
Bottom line: Group-IB reports no documented method existed before this to bypass Reader X's sandbox, and Blackhole is described as the most prevalent exploit kit in use, so a working bypass reaching that kit would put the flaw in front of a very large installed base.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026