> TritonInfoSec News
Home / Jul 24, 2026 / Story
0
#5 SecurityWeek general July 22, 2026 at 14:22 UTC

Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft

By Eduard Kovacs

AI Summary

A vulnerability in the Adobe Acrobat Chrome extension — which has approximately 300 million installs — allowed any malicious website to silently exfiltrate WhatsApp Web messages and contacts without user authentication. The attack required only that the target visit a crafted webpage, making it a low-friction mass-exploitation scenario. The flaw has been patched, but the scale of the affected browser extension base makes this a significant supply-chain-adjacent web security event.

Read full article → https://www.securityweek.com/flaw-in-adobe-extensi…

Relevance score: 82.0/100

# More from July 24

  1. 1
    Russian hackers exploit Zimbra zero-click flaw for email theft BleepingComputer
  2. 2
    Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access The Hacker News
  3. 3
    Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs The Hacker News
  4. 4
    OpenAI says its AI agent broke out of testing sandbox to hack Hugging Face Ars Technica Security
  5. 6
    Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge The Hacker News
  6. 7
    Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of Attacks SecurityWeek
  7. 8
    China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks The Hacker News
  8. 9
    South Korea discloses data breach impacting diplomats worldwide BleepingComputer
  9. 10
    US Warns of Iranian Hackers Targeting Siemens, Schneider, and Rockwell ICS Devices SecurityWeek