2026-04-10: Adobe Reader zero-day active since December delivers targeted payloads through malicious PDFs

Show Notes - 2026-04-10

Stories Covered

• Today:
• Adobe Reader Zero-Day Exploited Since December 2025 [Critical Alerts]
• Apache ActiveMQ 13-Year RCE Chain Bypasses Authentication (CVE-2026-34197) [Critical Alerts]
• ChipSoft Healthcare IT Provider Offline After Ransomware Attack [Ransomware & Extortion]
• FBI Reports $17.7 Billion in Cyber Fraud Losses for 2025 [Ransomware & Extortion]
• Storm-2755 Payroll Diversion Campaign Targets Canadian Employees (CVE-2025-27152) [Business & Infrastructure Threats]
• VENOM PhaaS Targets C-Suite Executives with QR Code Phishing [Business & Infrastructure Threats]
• Microsoft Locks Out VeraCrypt and WireGuard Developers Without Warning [Business & Infrastructure Threats]
• Phorpiex Botnet Resurges with Hybrid P2P Communication [Business & Infrastructure Threats]
• LA City Attorney's Office Hacked, 7.7TB of Sensitive Data Leaked [Business & Infrastructure Threats]
• FleetWave Car Fleet Management Platform Disrupted by Cyberattack [Business & Infrastructure Threats]
• When MFA Fails: Credential Exposure Enables Session Hijacking [Windows / AD Security]
• BlueHammer Windows Zero-Day Released After Microsoft Disclosure Dispute [Windows / AD Security]
• UAT-10362 Targets Taiwan NGOs with LucidRook Malware [General Security News]
• EngageLab SDK Intent Redirection Exposed 30M Crypto Wallet Users [General Security News]
• Obfuscated JavaScript Drops Formbook via Multi-Stage Loader [General Security News]
• Shadow AI Creates Uncontrolled Data Exposure and Attack Surface [General Security News]
• China National Supercomputing Center Hacked, Petabytes of Military Data Leaked [General Security News]
• GPL Odorizers GPL750 Modbus Manipulation (CVE-2026-4436) [Vulnerability Disclosures]
• Contemporary Controls BASC 20T Network Sniffing (CVE-2025-13926) [Vulnerability Disclosures]
• Microsoft AppArmor and Sleuth Kit CVEs [Vulnerability Disclosures]

CVEs Referenced

CVE-2022-41678, CVE-2024-32114, CVE-2025-13926, CVE-2025-27152, CVE-2026-23403, CVE-2026-23411, CVE-2026-34197, CVE-2026-39881, CVE-2026-40024, CVE-2026-40026, CVE-2026-4436

Indicators of Compromise

Domains: bluegraintours[.]com

IP Addresses: 169.40.2.68

Read the full brief