⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More

This weekly cybersecurity recap tracks multiple critical threats impacting organizations and critical infrastructure globally.

• •Adobe Acrobat Reader zero-day vulnerability CVE-2026-34621 (CVSS 8.6) enabling arbitrary code execution through crafted PDFs, actively exploited since December 2025
• •Iranian threat actors targeting U.S. industrial control systems in energy and water utilities with operational disruption and financial losses
• •Anthropic's Mythos AI model autonomously discovering software vulnerabilities at scale, identifying thousands of high-severity flaws across operating systems and browsers
• •APT28 botnet exploiting SOHO router vulnerabilities since May 2025 for DNS hijacking and credential theft via man-in-the-middle attacks
• •