{"vulnerability": "CVE-2026-4829", "sightings": [{"uuid": "b946ec6a-b52a-40d2-873d-4699cbae20db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48291", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnv73bc46r2y", "content": "\ud83d\udfe0 CVE-2026-48291 - High (7.8)\n\nFormat Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Overflow vulnerabil...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48291/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-09T22:00:50.598590Z"}, {"uuid": "fad64e28-f9f7-4653-9412-af3c29d8652d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48292", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnv73jjyya27", "content": "\ud83d\udfe0 CVE-2026-48292 - High (7.8)\n\nFormat Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Overflow vulnerabil...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48292/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-09T22:00:58.770352Z"}, {"uuid": "3e9a1067-87f2-45f4-a2bc-d84b15e6bd38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgz4tnidx2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48294 \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 Adobe Acrobat \u0434\u043b\u044f Chrome: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/59C65601-6081-44ED-A91E-ADA9A1B6FDF9", "creation_timestamp": "2026-06-29T17:27:26.380148Z"}, {"uuid": "70690ad8-97ef-4dd2-8ab1-2d78a92c80fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48290", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqncemduok2t", "content": "CVE-2026-48290 - CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)\nCVE ID : CVE-2026-48290\n \n Published : July 14, 2026, 9:33 p.m. | 19\u00a0minutes ago\n \n Description : CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability t...", "creation_timestamp": "2026-07-14T22:54:00.783098Z"}, {"uuid": "4f88fcc5-0fd7-45d8-8116-96048d0cda96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48290", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqyxb25h5y2c", "content": "\ud83d\udccc CVE-2026-48290 - CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context... https://www.cyberhub.blog/cves/CVE-2026-48290", "creation_timestamp": "2026-07-19T14:07:06.860670Z"}, {"uuid": "f4922230-8818-4a91-9593-60e2a781e68d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mraln3lnbe2p", "content": "Adobe Acrobat's Chrome extension flaw let attackers silently steal WhatsApp chats, contacts, and account data via a malicious webpage. Guardio reported the HermeticReader attack, and Adobe patched CVE-2026-48294. #AdobeAcrobat #WhatsAppWeb", "creation_timestamp": "2026-07-22T15:00:24.509894Z"}, {"uuid": "b23a768d-7b8e-4107-91f5-73df26d6f4b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/alextech-ai.bsky.social/post/3mrasrefyqh2z", "content": "\u26a0\ufe0f Security Alert for Adobe Acrobat Chrome extension users.\n\nA critical vulnerability (CVE-2026-48294), dubbed HermeticReader, allowed malicious websites to access WhatsApp Web messages and contacts without any authentication.\n\nThe flaw resides in the 'Hermes' engine, used for PDF integration. At...", "creation_timestamp": "2026-07-22T17:08:03.929163Z"}, {"uuid": "14f328d7-5ec3-41c5-877c-55c8940afb13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrazk4k5ja2p", "content": "\ud83e\udd16 CVE-2026-48294 (CVSS 7.4): The Adobe Acrobat Chrome extension (314M users) let malicious sites read private WhatsApp Web chats.\nhttps://www.bleepingcomputer.com/news/security/adobe-chrome-extension-flaw-let-sites-access-private-whatsapp-chats/", "creation_timestamp": "2026-07-22T19:09:16.851193Z"}, {"uuid": "7b25b496-fb7a-459a-9397-282d50a5a5fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://thehackernews.com/2026/07/adobe-acrobat-extension-flaw-let.html", "content": "Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a silent hijack of a user's WhatsApp data.\n\nThe shortcoming has been codenamed HermeticReader by Guardio Labs. It's officially tracked as CVE-2026-48294 (CVSS score: 7.4), with the vulnerability", "creation_timestamp": "2026-07-22T22:00:39.125271Z"}, {"uuid": "d2ee6c25-8c95-4156-9d53-a04bd30b7d3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrbhcadlgq2a", "content": "Adobe Acrobat Chrome extension flaw, CVE-2026-48294, could let malicious pages silently read WhatsApp Web data from victim sessions. Affects versions through 26.5.2.2. #AdobeAcrobat #WhatsAppWeb #CVE202648294", "creation_timestamp": "2026-07-22T23:15:25.074372Z"}, {"uuid": "27750b79-18a6-42bc-a749-74cffc391a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mrbirh4nim2n", "content": "Cybersecurity researchers revealed a vulnerability in the Adobe Acrobat Chrome extension, affecting over 314 million users, tracked as CVE-2026-48294 (CVSS score: 7.4). Named HermeticReader, it allows attackers to hijack WhatsApp Web data via a crafted URL, requiring user interaction.", "creation_timestamp": "2026-07-22T23:41:49.141352Z"}, {"uuid": "4a69bb52-f142-441a-94f0-5e12b0202707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://thehackernews.com/2026/07/adobe-acrobat-extension-flaw-let.html", "content": "Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a silent hijack of a user's WhatsApp data.\n\nThe shortcoming has been codenamed HermeticReader by Guardio Labs. It's officially tracked as CVE-2026-48294 (CVSS score: 7.4), with the vulnerability", "creation_timestamp": "2026-07-23T01:00:41.632397Z"}, {"uuid": "062e5780-a672-4cfa-8fce-e46afa913684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrbv7qyv7z2j", "content": "\ud83e\udd16 CVE-2026-48294 (CVSS 7.4): HermeticReader \u2014 vulnerability chain in Adobe Acrobat Chrome extension (314M users) allows silent WhatsApp Web data hijack via UXSS. Patched, update extension.\nhttps://thehackernews.com/2026/07/adobe-acrobat-extension-flaw-let.html", "creation_timestamp": "2026-07-23T03:24:34.136524Z"}, {"uuid": "78445e4d-85a0-448f-afb0-8a2d9ab101ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://t.me/thehackernews/9583", "content": "\ud83d\uded1 One visit to a malicious webpage could have been enough to expose your #WhatsApp Web chats.\n\nCVE-2026-48294 in Adobe Acrobat\u2019s Chrome extension could read messages, contact names, chat previews, and profile data without malware, stolen credentials, or session cookies.\n\nThe extension has over 314 million users.\n\nSee how HermeticReader worked: https://thehackernews.com/2026/07/adobe-acrobat-extension-flaw-let.html", "creation_timestamp": "2026-07-23T05:00:04.071575Z"}, {"uuid": "e9564b95-195c-4173-848f-f5ea5940521f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48294", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mrcf3rob6m2c", "content": "\ud83d\udcf0 Celah Ekstensi Adobe Acrobat Chrome Bisa Membaca Chat WhatsApp Web\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/23/celah-adobe-acrobat-chrome-whatsapp-web/\n\n#adobe #browserSecurity #chromeExtension #cve-2026-48294 #cybersecurity #keamananSiber #whatsapp", "creation_timestamp": "2026-07-23T08:08:42.144600Z"}, {"uuid": "b431e109-05b2-4000-932e-bc8b45a9e7c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "Telegram/yJf6Oli4TxlmzFzT8KLQJ2JBUfvoTUxYKt3XgxOle49uog", "content": "", "creation_timestamp": "2026-07-23T10:00:02.758132Z"}, {"uuid": "e9b079ba-e8cf-4488-bb31-a87eed94ba8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrcrhxbib52i", "content": "Adobe's Acrobat Chrome extension (300M+ installs) had a flaw that let any website read a victim's WhatsApp Web chats. No malware, no stolen password.\n\nCVE-2026-48294. Fixed in 26.5.2.3.\n\nWhy your EDR would have missed it, and what to actually check.", "creation_timestamp": "2026-07-23T11:50:14.033439Z"}, {"uuid": "c1422695-edbf-4162-a7e8-07a5c405f92c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mrdt4zfccs2a", "content": "Adobe Acrobat Chrome extension bug enabled silent WhatsApp data theft\n\nAdobe patched CVE-2026-48294, a flaw in Adobe Acrobat Chrome extension that could let attackers steal WhatsApp Web chats by luring users to a webpage. Guardio Labs researcher Shaked Biner disclosed HermeticRead\u2026\n#hackernews #news", "creation_timestamp": "2026-07-23T21:52:33.922991Z"}, {"uuid": "277e5795-735c-455b-97c3-bce31135146b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "Telegram/yJf6Oli4TxlmzFzT8KLQJ2JBUfvoTUxYKt3XgxOle49uog", "content": "", "creation_timestamp": "2026-07-24T00:00:09.345573Z"}, {"uuid": "50260569-7a30-4fca-a8b3-24a421862e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9583", "content": "\ud83d\uded1 One visit to a malicious webpage could have been enough to expose your #WhatsApp Web chats.\n\nCVE-2026-48294 in Adobe Acrobat\u2019s Chrome extension could read messages, contact names, chat previews, and profile data without malware, stolen credentials, or session cookies.\n\nThe extension has over 314 million users.\n\nSee how HermeticReader worked: https://thehackernews.com/2026/07/adobe-acrobat-extension-flaw-let.html", "creation_timestamp": "2026-07-24T00:00:11.356513Z"}, {"uuid": "1373c7cc-26f5-414e-bf64-72211b26dcc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/aidoo-noticias.bsky.social/post/3mrf477e3do2m", "content": "Vuln HermeticReader (CVE-2026-48294) en la extensi\u00f3n Adobe Acrobat de Chrome permit\u00eda a una web maliciosa inyectar c\u00f3digo en WhatsApp Web y ver chats/contacts abiertos. Parche: 26.5.2.3. #Ciberseguridad #WhatsApp", "creation_timestamp": "2026-07-24T10:07:31.045284Z"}, {"uuid": "75898ece-2ca0-4352-b834-8025a665ac0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://t.me/ZerodayAlert/779", "content": "\u041d\u0430\u0439\u0434\u0435\u043d \u0441\u043f\u043e\u0441\u043e\u0431 \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u0432 WhatsApp Web \u0447\u0435\u0440\u0435\u0437 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 Chrome\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 Adobe Acrobat \u0434\u043b\u044f Chrome \u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u0435\u0439 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 HermeticReader. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48294 (7.4 High) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043f\u043e\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u043c\u0443 \u0447\u0438\u0442\u0430\u0442\u044c \u0447\u0443\u0436\u0443\u044e \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u0432 WhatsApp Web \u0431\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0438 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439.\n\n\u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u044b\u043b\u043e \u0437\u0430\u0439\u0442\u0438 \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443, \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043e\u0434 \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u043f\u043e\u0438\u0441\u043a\u0430 \u0438\u043b\u0438 \u0441\u0441\u044b\u043b\u043a\u0443 \u0438\u0437 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0438. \u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u043e WhatsApp Web \u0432 \u0444\u043e\u043d\u043e\u0432\u043e\u0439 \u0432\u043a\u043b\u0430\u0434\u043a\u0435 \u0438 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043b\u043e \u0432 \u043d\u0435\u0451 \u0441\u043a\u0440\u044b\u0442\u0443\u044e \u0444\u043e\u0440\u043c\u0443, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0432\u0448\u0443\u044e \u0432\u0435\u0441\u044c \u0432\u0438\u0434\u0438\u043c\u044b\u0439 \u0442\u0435\u043a\u0441\u0442 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043f\u043e\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 \u043c\u043e\u0433 \u0443\u0432\u0438\u0434\u0435\u0442\u044c \u0441\u043f\u0438\u0441\u043e\u043a \u0447\u0430\u0442\u043e\u0432, \u0438\u043c\u0435\u043d\u0430 \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u043e\u0432, \u043a\u043e\u0440\u043e\u0442\u043a\u0438\u0435 \u043f\u0440\u0435\u0432\u044c\u044e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u0438\u043c\u044f \u043f\u0440\u043e\u0444\u0438\u043b\u044f \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u0442\u0435\u043a\u0441\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043d\u0430 \u044d\u043a\u0440\u0430\u043d\u0435 \u0434\u0438\u0430\u043b\u043e\u0433\u0430. \u0414\u043b\u044f \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u043b\u0438\u0448\u044c \u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e\u0435 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u043e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435\u0439, \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439.\n\n#adobe #whatsapp #\u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0430 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:05.236840Z"}, {"uuid": "7fc634c2-803e-49f9-8231-4322385d72c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mrim3w7c7i27", "content": "Cybersecurity alert: A now-patched flaw, HermeticReader (CVE-2026-48294), in Adobe Acrobat Chrome extension (314M+ users) could silently hijack WhatsApp data. Stay updated!", "creation_timestamp": "2026-07-25T19:29:59.474828Z"}, {"uuid": "a6bdb2f3-56ee-4386-82d8-71043837b9dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://t.me/ZerodayAlert/779", "content": "\u041d\u0430\u0439\u0434\u0435\u043d \u0441\u043f\u043e\u0441\u043e\u0431 \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u0432 WhatsApp Web \u0447\u0435\u0440\u0435\u0437 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 Chrome\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 Adobe Acrobat \u0434\u043b\u044f Chrome \u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u0435\u0439 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 HermeticReader. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48294 (7.4 High) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043f\u043e\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u043c\u0443 \u0447\u0438\u0442\u0430\u0442\u044c \u0447\u0443\u0436\u0443\u044e \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u0432 WhatsApp Web \u0431\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0438 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439.\n\n\u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u044b\u043b\u043e \u0437\u0430\u0439\u0442\u0438 \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443, \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043e\u0434 \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u043f\u043e\u0438\u0441\u043a\u0430 \u0438\u043b\u0438 \u0441\u0441\u044b\u043b\u043a\u0443 \u0438\u0437 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0438. \u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u043e WhatsApp Web \u0432 \u0444\u043e\u043d\u043e\u0432\u043e\u0439 \u0432\u043a\u043b\u0430\u0434\u043a\u0435 \u0438 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043b\u043e \u0432 \u043d\u0435\u0451 \u0441\u043a\u0440\u044b\u0442\u0443\u044e \u0444\u043e\u0440\u043c\u0443, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0432\u0448\u0443\u044e \u0432\u0435\u0441\u044c \u0432\u0438\u0434\u0438\u043c\u044b\u0439 \u0442\u0435\u043a\u0441\u0442 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043f\u043e\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 \u043c\u043e\u0433 \u0443\u0432\u0438\u0434\u0435\u0442\u044c \u0441\u043f\u0438\u0441\u043e\u043a \u0447\u0430\u0442\u043e\u0432, \u0438\u043c\u0435\u043d\u0430 \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u043e\u0432, \u043a\u043e\u0440\u043e\u0442\u043a\u0438\u0435 \u043f\u0440\u0435\u0432\u044c\u044e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u0438\u043c\u044f \u043f\u0440\u043e\u0444\u0438\u043b\u044f \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u0442\u0435\u043a\u0441\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043d\u0430 \u044d\u043a\u0440\u0430\u043d\u0435 \u0434\u0438\u0430\u043b\u043e\u0433\u0430. \u0414\u043b\u044f \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u043b\u0438\u0448\u044c \u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e\u0435 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u043e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435\u0439, \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439.\n\n#adobe #whatsapp #\u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0430 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:40.978660Z"}, {"uuid": "54297eb2-7464-407c-8d36-1dacd1b25006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://t.me/kasperskyb2b/2270", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udeb2 APT Awaken Likho/Core Werewolf \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0430\u0441\u044c \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c \u043d\u0430 AutoIt, \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0447\u0435\u0440\u0435\u0437 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433 \u0441 PDF-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0430\u043c\u0438, \u0430\u0442\u0430\u043a\u0443\u044f \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0438\u0445 \u043f\u043e\u0434\u0440\u044f\u0434\u0447\u0438\u043a\u043e\u0432 \u0432 \u0420\u0424 \u0438 \u0420\u0411. \n\n\ud83d\udfe2\u0420\u0430\u0437\u0431\u043e\u0440 MaaS-\u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u0430 Dolphin X, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 300+ \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0441 \u043e\u0441\u043e\u0431\u044b\u043c \u0430\u043a\u0446\u0435\u043d\u0442\u043e\u043c \u043d\u0430 \u043a\u043b\u044e\u0447\u0438 \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \u0410\u0432\u0442\u043e\u0440\u044b \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0430 \u0440\u0435\u043a\u043b\u0430\u043c\u0438\u0440\u0443\u044e\u0442 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u00ab\u0418\u0418-\u043f\u0440\u043e\u0444\u0430\u0439\u043b\u0435\u0440\u00bb \u0434\u043b\u044f \u0440\u0430\u043d\u0436\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043f\u043e \u0446\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \n\n\ud83e\udeb2\u0410\u043d\u0430\u043b\u0438\u0437 CloudAtlasGo \u2014 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043d\u0430 Go, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u0443\u0435\u0442 C2 \u0447\u0435\u0440\u0435\u0437 WebRTC, \u0441\u043a\u0440\u044b\u0432\u0430\u044f \u0441\u0438\u0433\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 API-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445 Trello. \u0412\u041f\u041e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0438 \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0446\u0435\u043b\u0438 \u0432 \u0420\u0424. \n\n\ud83d\udfe2\u041e\u0431\u0437\u043e\u0440 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 APT TA458, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0431\u0443\u043a\u0435\u0442 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0432\u0435\u0431-\u043f\u043e\u0447\u0442\u0435 Zimbra, mDaemon, Roundcube, SOGo \u0438 Kerio, \u0447\u0442\u043e\u0431\u044b \u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u0432\u043e\u0435\u043d\u043d\u044b\u0445 \u0438 \u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u043e\u0432 \u0432 \u042e\u0436\u043d\u043e\u0439 \u0415\u0432\u0440\u043e\u043f\u0435. \n\n\ud83d\udfe2\u0428\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0439 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \nProject CAV3RN, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 APT OilRig/APT34, \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u0440\u0430\u0444\u0438\u043a C2 \u0432 \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u0445 \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044f Outlook \u0447\u0435\u0440\u0435\u0437 Microsoft Graph API, \u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 DNS-\u0437\u0430\u043f\u0440\u043e\u0441\u044b. \u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0418\u0437\u0440\u0430\u0438\u043b\u044c.\n\n\ud83d\udd34\u041e\u0431\u0437\u043e\u0440 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 FrostArmada \u043f\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0435 DNS \u043d\u0430 \u0448\u043b\u044e\u0437\u0430\u0445 Wi-Fi \u0432 \u043e\u0442\u0435\u043b\u044f\u0445 \u0438 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u044f\u0445, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u0441\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0432\u0445\u043e\u0434\u0430 Microsoft 365 \u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c MFA. \u0426\u0435\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u2014 \u0432 \u0421\u0428\u0410, \u0418\u043d\u0434\u0438\u0438 \u0438 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438. \n\n\ud83d\udfe0\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 7600 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0440\u0435\u043f\u043e GitHub \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 AgentBaiting. \u0411\u043e\u043b\u0435\u0435 800 \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0434 \u043d\u0430\u0432\u044b\u043a\u0438 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0438 \u041c\u0421\u0420-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044f \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440. \u0424\u0438\u0448\u0438\u043d\u0433 \u0443\u0431\u0435\u0436\u0434\u0430\u0435\u0442 \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u043d\u0435 \u0445\u0443\u0436\u0435, \u0447\u0435\u043c \u043b\u044e\u0434\u0435\u0439 \u2014 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438, \u043a\u043e\u0433\u0434\u0430 \u0430\u0433\u0435\u043d\u0442\u044b \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u044d\u0442\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c. \n\n\ud83d\udfe2\u041d\u043e\u0432\u044b\u0439 Rust-\u0442\u0440\u043e\u044f\u043d\u0435\u0446 \u0433\u0440\u0443\u043f\u043f\u044b Chaos, msaRAT, \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0441\u0432\u043e\u0438 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 C2, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u00ab\u0431\u0435\u0437\u0433\u043e\u043b\u043e\u0432\u044b\u043c\u00bb Chrome \u0447\u0435\u0440\u0435\u0437 DevTools, \u0442\u0430\u043a \u0447\u0442\u043e \u0432\u0435\u0441\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043a\u0430\u043a \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u043e\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \n\n\ud83d\udd35\u041d\u043e\u0432\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044e\u0442 BitLocker \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0438\u0441\u043a\u043e\u0432 \u0438 \u043f\u0435\u0447\u0430\u0442\u0430\u044e\u0442 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0437\u0430\u043f\u0438\u0441\u043a\u0438 \u043d\u0430 \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445. \u041f\u0440\u043e\u043d\u0438\u043a\u0430\u044e\u0442 \u0432 \u0441\u0435\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 RDP \u0438 \u043d\u0435\u0432\u0435\u0440\u043d\u043e \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0411\u0414. \u0416\u0435\u0440\u0442\u0432\u044b \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u0432 \u041b\u0430\u0442\u0438\u043d\u0441\u043a\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435.\n\n\ud83d\udd35\u0421\u0432\u0435\u0436\u0430\u044f RCE \u0432 SharePoint, CVE-2026-50522, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.  \u041e\u043d\u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044e\u0442 machine keys \u0434\u043b\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0438\u043d\u0433\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e. \n\n\ud83d\udfe3\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 HermeticReader \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 Adobe Acrobat \u0434\u043b\u044f Chrome, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 329 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u044e WhatsApp Web \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u0447\u0430\u0442\u044b, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b \u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f. \u0414\u0435\u0444\u0435\u043a\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d (CVE-2026-48294), \u043d\u043e \u044d\u0442\u043e\u0442 \u0432\u0435\u043a\u0442\u043e\u0440 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0442\u044c \u0432\u043e\u043b\u043d\u0443 \u0443\u0433\u043e\u043d\u043e\u0432 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 \u0432 \u0440\u044f\u0434\u0435 \u0441\u0442\u0440\u0430\u043d.\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2026-07-27T09:00:05.965033Z"}, {"uuid": "a4979c91-c134-420a-80b0-9df7c23809fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "exploited", "source": "https://t.me/kasperskyb2b/2270", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udeb2 APT Awaken Likho/Core Werewolf \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0430\u0441\u044c \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c \u043d\u0430 AutoIt, \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0447\u0435\u0440\u0435\u0437 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433 \u0441 PDF-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0430\u043c\u0438, \u0430\u0442\u0430\u043a\u0443\u044f \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0438\u0445 \u043f\u043e\u0434\u0440\u044f\u0434\u0447\u0438\u043a\u043e\u0432 \u0432 \u0420\u0424 \u0438 \u0420\u0411. \n\n\ud83d\udfe2\u0420\u0430\u0437\u0431\u043e\u0440 MaaS-\u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u0430 Dolphin X, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 300+ \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0441 \u043e\u0441\u043e\u0431\u044b\u043c \u0430\u043a\u0446\u0435\u043d\u0442\u043e\u043c \u043d\u0430 \u043a\u043b\u044e\u0447\u0438 \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \u0410\u0432\u0442\u043e\u0440\u044b \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0430 \u0440\u0435\u043a\u043b\u0430\u043c\u0438\u0440\u0443\u044e\u0442 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u00ab\u0418\u0418-\u043f\u0440\u043e\u0444\u0430\u0439\u043b\u0435\u0440\u00bb \u0434\u043b\u044f \u0440\u0430\u043d\u0436\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043f\u043e \u0446\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \n\n\ud83e\udeb2\u0410\u043d\u0430\u043b\u0438\u0437 CloudAtlasGo \u2014 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043d\u0430 Go, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u0443\u0435\u0442 C2 \u0447\u0435\u0440\u0435\u0437 WebRTC, \u0441\u043a\u0440\u044b\u0432\u0430\u044f \u0441\u0438\u0433\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 API-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445 Trello. \u0412\u041f\u041e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0438 \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0446\u0435\u043b\u0438 \u0432 \u0420\u0424. \n\n\ud83d\udfe2\u041e\u0431\u0437\u043e\u0440 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 APT TA458, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0431\u0443\u043a\u0435\u0442 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0432\u0435\u0431-\u043f\u043e\u0447\u0442\u0435 Zimbra, mDaemon, Roundcube, SOGo \u0438 Kerio, \u0447\u0442\u043e\u0431\u044b \u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u0432\u043e\u0435\u043d\u043d\u044b\u0445 \u0438 \u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u043e\u0432 \u0432 \u042e\u0436\u043d\u043e\u0439 \u0415\u0432\u0440\u043e\u043f\u0435. \n\n\ud83d\udfe2\u0428\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0439 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \nProject CAV3RN, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 APT OilRig/APT34, \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u0440\u0430\u0444\u0438\u043a C2 \u0432 \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u0445 \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044f Outlook \u0447\u0435\u0440\u0435\u0437 Microsoft Graph API, \u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 DNS-\u0437\u0430\u043f\u0440\u043e\u0441\u044b. \u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0418\u0437\u0440\u0430\u0438\u043b\u044c.\n\n\ud83d\udd34\u041e\u0431\u0437\u043e\u0440 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 FrostArmada \u043f\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0435 DNS \u043d\u0430 \u0448\u043b\u044e\u0437\u0430\u0445 Wi-Fi \u0432 \u043e\u0442\u0435\u043b\u044f\u0445 \u0438 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u044f\u0445, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u0441\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0432\u0445\u043e\u0434\u0430 Microsoft 365 \u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c MFA. \u0426\u0435\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u2014 \u0432 \u0421\u0428\u0410, \u0418\u043d\u0434\u0438\u0438 \u0438 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438. \n\n\ud83d\udfe0\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 7600 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0440\u0435\u043f\u043e GitHub \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 AgentBaiting. \u0411\u043e\u043b\u0435\u0435 800 \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0434 \u043d\u0430\u0432\u044b\u043a\u0438 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0438 \u041c\u0421\u0420-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044f \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440. \u0424\u0438\u0448\u0438\u043d\u0433 \u0443\u0431\u0435\u0436\u0434\u0430\u0435\u0442 \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u043d\u0435 \u0445\u0443\u0436\u0435, \u0447\u0435\u043c \u043b\u044e\u0434\u0435\u0439 \u2014 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438, \u043a\u043e\u0433\u0434\u0430 \u0430\u0433\u0435\u043d\u0442\u044b \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u044d\u0442\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c. \n\n\ud83d\udfe2\u041d\u043e\u0432\u044b\u0439 Rust-\u0442\u0440\u043e\u044f\u043d\u0435\u0446 \u0433\u0440\u0443\u043f\u043f\u044b Chaos, msaRAT, \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0441\u0432\u043e\u0438 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 C2, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u00ab\u0431\u0435\u0437\u0433\u043e\u043b\u043e\u0432\u044b\u043c\u00bb Chrome \u0447\u0435\u0440\u0435\u0437 DevTools, \u0442\u0430\u043a \u0447\u0442\u043e \u0432\u0435\u0441\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043a\u0430\u043a \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u043e\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \n\n\ud83d\udd35\u041d\u043e\u0432\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044e\u0442 BitLocker \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0438\u0441\u043a\u043e\u0432 \u0438 \u043f\u0435\u0447\u0430\u0442\u0430\u044e\u0442 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0437\u0430\u043f\u0438\u0441\u043a\u0438 \u043d\u0430 \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445. \u041f\u0440\u043e\u043d\u0438\u043a\u0430\u044e\u0442 \u0432 \u0441\u0435\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 RDP \u0438 \u043d\u0435\u0432\u0435\u0440\u043d\u043e \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0411\u0414. \u0416\u0435\u0440\u0442\u0432\u044b \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u0432 \u041b\u0430\u0442\u0438\u043d\u0441\u043a\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435.\n\n\ud83d\udd35\u0421\u0432\u0435\u0436\u0430\u044f RCE \u0432 SharePoint, CVE-2026-50522, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.  \u041e\u043d\u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044e\u0442 machine keys \u0434\u043b\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0438\u043d\u0433\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e. \n\n\ud83d\udfe3\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 HermeticReader \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 Adobe Acrobat \u0434\u043b\u044f Chrome, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 329 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u044e WhatsApp Web \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u0447\u0430\u0442\u044b, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b \u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f. \u0414\u0435\u0444\u0435\u043a\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d (CVE-2026-48294), \u043d\u043e \u044d\u0442\u043e\u0442 \u0432\u0435\u043a\u0442\u043e\u0440 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0442\u044c \u0432\u043e\u043b\u043d\u0443 \u0443\u0433\u043e\u043d\u043e\u0432 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 \u0432 \u0440\u044f\u0434\u0435 \u0441\u0442\u0440\u0430\u043d.\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2026-07-28T00:00:39.457574Z"}]}