An attacker only needed to convince the targeted user to visit a malicious website to exfiltrate WhatsApp messages and contacts.

The post Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft appeared first on SecurityWeek.

An optional ‘username key’ adds another layer by requiring a secondary credential before someone can message users.

The post WhatsApp Rolling Out Username Feature to Bolster Phone Number Privacy appeared first on SecurityWeek.