Week in review: Windows zero-day exploit leaked, Patch Tuesday forecast

This weekly security roundup compiles recent cyber news and research: active zero-day exploitation in Adobe Acrobat Reader and published PoC for a Windows local privilege escalation; Chaos malware expanding from routers to misconfigured Linux cloud servers; APT activity including router hijacks by APT28 and Iranian-affiliated targeting of US energy/water/government OT; large-scale data exposures and marketplace abuse; and several phishing, infostealer, and vulnerability disclosure/patch stories that together indicate heightened attacker activity and evolving tooling and automation across the threat landscape.