CRITICALZero Day
Global

Adobe Patches Actively Exploited Zero-Day That Lingered for Months

·Source: Dark Reading

Updated:

Executive Summary

An attacker has been using maliciously crafted PDF files to exploit a zero-day in Adobe Acrobat and Reader for at least four months.

Analysis

An attacker has been using maliciously crafted PDF files to exploit a zero-day in Adobe Acrobat and Reader for at least four months.
Source Attribution

Originally published by Dark Reading on Apr 13, 2026.

Related Threats

CRITICALZero Day

When Business Email Compromise Starts Rewriting Reality

Business Email Compromise (BEC) operates on a familiar playbook. Threat actors breach a mailbox, silently monitor operations, map approval chains, and ultimately exploit that access to divert funds or exfiltrate sensitive assets. This dynamic is central to our analysis as we kick off a series around Rapid7's collaborative research with Zimbra; upcoming installments will explore technical details a

CVE-2024-45519CVE-2025-27915
Rapid7
CRITICALZero Day

Check Point hacked: The security software protecting your network has become a prime attack target

A firewall is supposed to be the barrier between attackers and the enterprise network, but that barrier can itself become a threat actors’ tool. Check Point has revealed that attackers are actively exploiting two vulnerabilities in its Security Gateway and Security Management products. The security software provider has warned that attackers are targeting CVE-2026-85102 , a remote code execution (

CVE-2026-85102CVE-2026-93616
CSO Online
CRITICALZero Day

F5 fixes actively exploited zero-day flaw in BIG-IP APM

Technology company F5 fixed a critical remote code execution vulnerability in its BIG-IP Access Policy Manager (APM) platform on Tuesday. The flaw impacts deployments configured as OAuth authorization servers and was already under active exploitation in the wild before the patch became available. BIG-IP APM is a software component in F5’s BIG-IP hardware platform that enables companies to control

CVE-2026-94127CVE-2025-5352
CSO Online