⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More

Summary: Adobe released emergency updates for a critical Acrobat Reader flaw, CVE-2026-34621, with a CVSS score of 8.6 out of 10.0, that allows arbitrary code execution through prototype pollution and has been actively exploited in the wild, with evidence of exploitation since December 2025. The weekly roundup also lists dozens of other CVEs marked for urgent patching, including Docker Engine, Kubernetes, OpenSSL, Palo Alto Networks, SonicWall, Google Chrome, and Windows HTTP.sys.
Bottom line: A PDF reader flaw rated 8.6 has reportedly been exploited since December 2025, meaning the window between a patch and an exploit is now measured in months of quiet exposure rather than days.

Read the original at The Hacker News ↗

Topics: Zero-Days & Exploits
Mentions: CVE-2023-46233 CVE-2025-12664 CVE-2025-48651 CVE-2025-58136 CVE-2025-59528 CVE-2026-0049 CVE-2026-0234 CVE-2026-0740 CVE-2026-0775 CVE-2026-0776 CVE-2026-1092 CVE-2026-1188 CVE-2026-1342 CVE-2026-1346 CVE-2026-20929 CVE-2026-22683 CVE-2026-23696 CVE-2026-23869 CVE-2026-29059 CVE-2026-30815 CVE-2026-30818 CVE-2026-31790 CVE-2026-32922 CVE-2026-33579 CVE-2026-33784 CVE-2026-34040 CVE-2026-34078 CVE-2026-34197 CVE-2026-34621 CVE-2026-34976 CVE-2026-39987 CVE-2026-4112 CVE-2026-4342 CVE-2026-4350 CVE-2026-5173 CVE-2026-5194 CVE-2026-5437 CVE-2026-5445 CVE-2026-5707 CVE-2026-5708 CVE-2026-5709 CVE-2026-5858 CVE-2026-5859 CVE-2026-5860 CVE-2026-5873
Related: ⚡ Weekly Recap: Vercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & More Cyber Risks ·
TP-Link, Photoshop, OpenVPN, Norton VPN vulnerabilities Cyber Risks ·
Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621 Cyber Risks ·