⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More

Summary

Adobe released emergency updates for Acrobat Reader to fix CVE-2026-34621, a critical prototype pollution flaw with a CVSS score of 8.6 that is under active exploitation and could allow arbitrary code execution when a specially crafted PDF is opened. Researcher Haifei Li disclosed zero-day exploitation of the flaw, and evidence suggests it may have been exploited since December 2025. The same issue of the Weekly Recap also reports a U.S. warning about Iran-affiliated actors targeting programmable logic controllers in the energy and water sectors, and Anthropic's Mythos model being given to a closed consortium through Project Glasswing.

Mitigation

Adobe released emergency updates to fix the flaw; the source does not specify the fixed version numbers.

Related items

• InfoAPI credits benefit for eligible ChatGPT subscriptionsSame vendor · Simon Willison's Weblog
• LowAnthropic-Themed Phishing Emails Bypass Top Security ToolsSame vendor · Dark Reading
• InfoClaude Model Builds Exploits Across Major Browsers & OSesSame vendor · Dark Reading
• InfoBuilding a multiplayer game world with autonomous Fable-class modelsSame vendor · Simon Willison's Weblog
• MediumLinux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other DistributionsSame vendor · The Hacker News