Adobe Reader Zero-Day Exploited via Malicious PDFs Since December 2025

Published: 3 weeks ago (April 9, 2026 at 07:15 AM EDT)

1 min read

Source: The Hacker News

Threat actors have been exploiting a previously unknown zero‑day vulnerability in Adobe Reader using maliciously crafted PDF documents since at least December 2025. The finding, detailed by EXPMON’s Haifei Li, has been described as a highly sophisticated PDF exploit. The artifact (“Invoice540.pdf”) first appeared on the VirusTotal platform on November 28, 2025. A second

Back to Blog

Hackers exploiting Acrobat Reader zero-day flaw since December

!https://www.bleepstatic.com/content/hl-images/2026/04/09/Adobe.jpg Attackers have been exploiting a zero‑day vulnerability in Adobe Reader using maliciously cr...

CPUID Site Hijacked To Serve Malware Instead of HWMonitor Downloads

Incident Overview Attackers briefly hijacked part of CPUID’s backend and swapped legitimate download links on its site with malware‑laced ones. The issue affec...

Google Chrome adds infostealer protection against session cookie theft

!https://www.bleepstatic.com/content/hl-images/2023/06/16/Google-Chrome-headpic.jpg Google has rolled out Device Bound Session Credentials DBSC protection in Ch...

Smart Slider updates hijacked to push malicious WordPress, Joomla versions

!https://www.bleepstatic.com/content/hl-images/2023/12/07/back-2.jpg Hackers hijacked the update system for the Smart Slider 3 Pro plugin for WordPress and Joom...

Related posts

Hackers exploiting Acrobat Reader zero-day flaw since December

CPUID Site Hijacked To Serve Malware Instead of HWMonitor Downloads

Google Chrome adds infostealer protection against session cookie theft

Smart Slider updates hijacked to push malicious WordPress, Joomla versions