Identity & Access WhatsApp Adds Multiple Passkeys and Stronger 2SV in Account Security Update When Android users get a call from a non-contact, they will see more information about the caller, including their country. Eduard KovacsAugust 25, 2026
Fraud & Identity Theft WhatsApp Unveils New Scam Alert Feature Signal has also made a security announcement: an automatic key verification feature to complement its safety number system. Eduard KovacsAugust 12, 2026
Vulnerabilities Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft An attacker only needed to convince the targeted user to visit a malicious website to exfiltrate WhatsApp messages and contacts. Eduard KovacsJuly 22, 2026
Data Protection WhatsApp Rolling Out Username Feature to Bolster Phone Number Privacy An optional ‘username key’ adds another layer by requiring a secondary credential before someone can message users. Eduard KovacsJune 29, 2026
Privacy & Compliance WhatsApp Catches Spyware Firm NSO Defying No-Hacking Court Order The Meta-owned communications app is filing a federal court contempt order against NSO. Eduard KovacsJune 8, 2026
Vulnerabilities WhatsApp Discloses File Spoofing, Arbitrary URL Scheme Vulnerabilities The vulnerabilities were reported to Meta through its bug bounty program and were patched with updates released earlier this year. Eduard KovacsMay 5, 2026
Privacy Researcher Discovers 4th WhatsApp View Once Bypass; Meta Won’t Patch Meta does not plan on fixing the vulnerability because it involves the use of a modified client application. Eduard KovacsMarch 18, 2026
Cybercrime Meta Launches New Protection Tools as It Helps Disrupt Scam Centers The social media giant has disabled more than 150,000 accounts powering scam centers in Asia. Eduard KovacsMarch 12, 2026
Data Protection WhatsApp Boosts Account Security for At-Risk Individuals New Strict Account Settings allow users to block attachments and media and silence calls from unknown people. Ionut ArghireJanuary 28, 2026
Data Protection Vulnerability Allowed Scraping of 3.5 Billion WhatsApp Accounts Researchers demonstrated a now-patched vulnerability that could have been used to enumerate all WhatsApp accounts. Eduard KovacsNovember 20, 2025
Vulnerabilities Meta Paid Out $4 Million via Bug Bounty Program in 2025 The total amount of money given to bug bounty hunters by the social media giant has reached $25 million. Eduard KovacsNovember 18, 2025
Vulnerabilities $1M WhatsApp Hack Flops: Only Low-Risk Bugs Disclosed to Meta After Pwn2Own Withdrawal WhatsApp told SecurityWeek that the two low-impact vulnerabilities cannot be used for arbitrary code execution. Eduard KovacsOctober 25, 2025
Mobile & Wireless Pwn2Own WhatsApp Hacker Says Exploit Privately Disclosed to Meta Questions have been raised over the technical viability of the purported WhatsApp exploit, but the researcher says he wants to keep his identity private. Eduard KovacsOctober 24, 2025
Compliance NSO Ordered to Stop Hacking WhatsApp, but Damages Cut to $4 Million The judge ruled that punitive damages of $167 million awarded by a jury were excessive. Eduard KovacsOctober 20, 2025
Privacy & Compliance Ex-WhatsApp Employee Sues Meta Over Vulnerabilities, Retaliation Attaullah Baig has filed a lawsuit against Meta and its executives, accusing them of retaliation over critical cybersecurity failures. Eduard KovacsSeptember 9, 2025
Vulnerabilities WhatsApp Zero-Day Exploited in Attacks Targeting Apple Users The vulnerability (CVE-2025-55177) was exploited along an iOS/macOS zero-day in suspected spyware attacks. Ionut ArghireSeptember 2, 2025
Cybercrime WhatsApp Takes Down 6.8 Million Accounts Linked to Criminal Scam Centers, Meta Says Meta linked these scams to a criminal scam center in Cambodia — and said it disrupted the campaign in partnership with ChatGPT maker OpenAI. Associated PressAugust 6, 2025
Vulnerabilities $1 Million Offered for WhatsApp Exploit at Pwn2Own Ireland 2025 Meta is sponsoring ZDI’s Pwn2Own hacking competition, where participants can earn big prizes for smartphone, WhatsApp and wearable device exploits. Eduard KovacsAugust 1, 2025
Vulnerabilities FreeType Zero-Day Found by Meta Exploited in Paragon Spyware Attacks WhatsApp told SecurityWeek that it linked the exploited FreeType vulnerability CVE-2025-27363 to a Paragon exploit. Eduard KovacsJune 20, 2025
Malware & Threats Spyware Maker NSO Ordered to Pay $167 Million Over WhatsApp Hack Meta has won its WhatsApp hacking lawsuit against Israeli spyware company NSO Group in an “important step forward for privacy and security”. Eduard KovacsMay 7, 2025