Zero-Day Alert: Sophisticated PDF Exploit Targets Adobe Reader for Massive Data Theft

**Executive summary:** EXPMON discovered a zero-day Adobe Reader exploit (malicious PDF named "yummy_adobe_exploit_uwu.pdf") that uses heavily obfuscated JavaScript to abuse Acrobat APIs (util.readFileIntoStream and RSS.addFeed) to read arbitrary local files, exfiltrate data to an attacker-controlled server, and fetch encrypted payloads that can be executed — researchers confirmed returned JavaScript executed in tests; the vulnerability is unpatched and works on current Reader versions, posing high risk of data theft and possible RCE/sandbox escape.