Hackers exploiting Acrobat Reader zero-day flaw since December

Attackers are actively exploiting an unpatched zero-day in Adobe Reader since December via malicious PDFs that execute on open with no user interaction required. The exploit leverages Acrobat APIs for data exfiltration and potential RCE, affecting any user who opens untrusted PDF documents. All Adobe Reader versions are currently vulnerable.