> TritonInfoSec News
Home / Jul 23, 2026 / Story
0
#4 The Hacker News general July 22, 2026 at 15:01 UTC

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

By [email protected] (The Hacker News)

AI Summary

A now-patched vulnerability chain (CVE-2026-48294, CVSS 7.4) dubbed HermeticReader in the Adobe Acrobat Chrome extension — with over 314 million installs — allowed malicious websites to silently read a victim's WhatsApp Web messages and contacts without authentication. Discovered by Guardio Labs, exploitation required only luring the target to a malicious page. The scale of the affected user base makes this a high-impact supply-chain-adjacent browser extension risk.

Read full article → https://thehackernews.com/2026/07/adobe-acrobat-ex…

Relevance score: 89.0/100

# More from July 23

  1. 1
    OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark The Hacker News
  2. 2
    Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA The Hacker News
  3. 3
    Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC The Hacker News
  4. 5
    Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication The Hacker News
  5. 6
    Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents The Hacker News
  6. 7
    CISA orders urgent action on actively exploited Langflow RCE flaw BleepingComputer
  7. 8
    Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs The Hacker News
  8. 9
    LG to Ban Residential Proxies from Smart TV Apps Krebs on Security
  9. 10
    AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code The Hacker News