60
45
47
30
42
30
47
Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware
Huntress analysts trace one X direct message into separate Mac and Windows malware chains delivering AMOS infostealer and NetSupport Manager RAT.
Huntress SOC analysts dissected a malware campaign distributed via an X direct message styled as a Google Docs sidebar. macOS users were routed to the AMOS infostealer, while Windows users received NetSupport Manager remote access malware. The write-up details how a single message branched into two distinct delivery paths per operating system.
50
ZDI-26-673: Adobe Acrobat Pro DC Doc Object Use-After-Free Remote Code Execution Vulnerability
ZDI disclosed CVE-2026-81988, a use-after-free in Adobe Acrobat Pro DC document object handling that enables remote code execution.
Zero Day Initiative advisory ZDI-26-673 describes a use-after-free vulnerability in the document object handling of Adobe Acrobat Pro DC. Arbitrary code execution is possible when a target opens a malicious file or visits a malicious page. The flaw received a CVSS rating of 7.8. No in-the-wild exploitation is reported.
22
Try Google Pics: Easy image creation and editing in Google Workspace
Google rolls out Pics, a Nano Banana-based image creation and editing tool, to Workspace subscribers with integrations in Docs, Slides, and Drive.
Google Pics, built on the Nano Banana image generation model, is rolling out to Google AI Pro and Ultra subscribers and most Workspace business customers. Features include object segmentation, in-image text editing and translation, collaboration, and multiple generations per prompt. Integrations launched in Docs and Slides, with Drive support planned in the coming weeks.
28
ZDI-26-602: Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
ZDI disclosed a use-after-free in Foxit PDF Reader (CVE-2026-13128) enabling remote code execution when a user opens a malicious file.
Zero Day Initiative advisory ZDI-26-602 describes a use-after-free flaw in Foxit PDF Reader's document object handling. Exploitation yields arbitrary code execution but requires the target to open a malicious page or file. ZDI assigned CVSS 7.8 and CVE-2026-13128. The advisory does not report active exploitation.
24
30
60
42
U.S. agencies say Iranian hackers tried to pass ‘non-public’ Trump campaign docs to Biden’s campaign
60
30
30
57
35
57
57
55
60
30
60
35
57
57
30
30
57
45
45
30
57
55
60
30
30
30