Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

Researchers at Guardio Labs disclosed “HermeticReader,” a vulnerability chain in the Adobe Acrobat Chrome extension that could be abused by a malicious webpage to trigger the extension’s internal messaging, leverage its cross-origin access, and exfiltrate WhatsApp Web messages and contacts without user interaction; Adobe has patched the issue and users should update their extension. With roughly 314 million active installations the report highlights large-scale exposure and urges auditing extensions, minimizing permissions, and enforcing enterprise extension policies.