What does BroadVision cover in its News & Insights?

Practical analysis and field reports from active engagements, managed IT, networks, cloud migration, cybersecurity, data and AI, drawn from BroadVision's work worldwide and 47 countries.

How often does BroadVision publish news?

We publish in-depth posts weekly, plus shorter project notes whenever a meaningful deployment, threat advisory or vendor change warrants it.

Where is BroadVision based?

BroadVision HUB is in Mulberry Hill Office Park, 4 Broadacres Drive, Dainfern, Johannesburg. Our teams operate worldwide and 47 countries.

The IT pulse, every Friday.

A weekly briefing on the developments shaping enterprise IT, cloud, AI, cybersecurity and SaaS, sourced from reputable publishers across the past seven days, interpreted by BiVi Intelligence for IT leaders, with every story linked back to its original report. The previous fortnight stays available below.

Cybersecurity

Adobe Acrobat Extension Vulnerability Patched After Critical Data Risk Discovery

22 July 2026

Researchers identified a vulnerability chain in the Adobe Acrobat Chrome extension, tracked as CVE-2026-48294, that allowed malicious sites to access sensitive WhatsApp Web user data.

Adobe Acrobat Extension Vulnerability Patched After Critical Data Risk Discovery

Cybersecurity researchers from Guardio Labs have disclosed details regarding a critical vulnerability chain in the Adobe Acrobat extension for Google Chrome. Codenamed HermeticReader and tracked as CVE-2026-48294, the flaw carried a CVSS score of 7.4. Before being patched, the vulnerability posed a significant risk to the extension’s user base, which exceeds 314 million installations globally.

Technically, the flaw could facilitate a silent hijack of a user's WhatsApp information by allowing malicious websites to read data from the WhatsApp Web interface. The exploit relied on a specific chain of weaknesses within the extension's permissions and data handling processes. Adobe has since released a patch to address the security gap, preventing further unauthorized access to browser-resident application data.

For IT directors and operations leaders, this incident underscores the inherent security risks associated with widespread browser extensions in the enterprise environment. Managing the footprint of third-party add-ons remains a critical component of maintaining data privacy and protecting internal communication channels from cross-site scripting or data exfiltration attempts.

The BroadVision view

Mid-market IT teams should review browser extension permissions to prevent unauthorized cross-site data access. This vulnerability highlights the necessity of maintaining updated software versions and monitoring third-party integrations across corporate devices. Regular security audits can help identify similar risks within the application environment. BroadVision strategic IT services provide assistance with governance and infrastructure planning to address these security requirements.

Have a story for us, or a problem we can write about?

Get in touch