Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limits
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-34621 | Actively Exploited Prototype Pollution RCE in Adobe Acrobat and Reader | 8.6 | 7% | KEV | KEV |
CVE-2026-39808+1 related CVE | Unauthenticated OS Command Injection in Fortinet FortiSandbox 4.4 | 9.8 | 93% | KEVPoC ×3 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | cpuid.com | week, you might have downloaded malware instead. CPUID (at cpuid[.]com) is a website that hosts free software utilities, primari |
From the original article
13 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Bringing governance and visibility to machine and AI identities In this Help Net Security interview, Archit Lohokare, CEO of AppViewX, explains how the rise of AI marked a turning point where machine and AI agent identities began converging into a single problem.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.