A critical zero-day vulnerability has been secretly embedded in PDFs for months, posing a significant threat to users. This exploit is particularly concerning as it is being actively used by attackers before any patches have been developed, putting defenders at a disadvantage. State-sponsored actors have also been involved in fiber optic spying and other aggressive infrastructure meddling, which is only now coming to light. The discovery of these vulnerabilities highlights the importance of proactive security measures, as the gap between detection and incident response can be extremely narrow. The use of zero-day exploits means that defenders are already behind, making it essential to stay vigilant and adapt quickly to emerging threats. The presence of such vulnerabilities in widely used file formats like PDFs underscores the need for swift action to mitigate potential damage, so practitioners must prioritize patch management and incident response to stay ahead of these evolving threats1.