Adobe Acrobat Extension Flaw Lets Attackers Steal WhatsApp Chats With One Click

A newly disclosed vulnerability chain in the Adobe Acrobat Chrome extension, installed on an estimated 329 million browsers, allowed attackers to silently siphon a victim’s entire WhatsApp Web session, including chat contents, contact names, and profile data, by simply luring them to a malicious webpage. The flaw, tracked as CVE-2026-48294 and dubbed “HermeticReader” by researchers at Guardio Labs, required no malware, no phished credentials, and no stolen…