An attacker only needed to convince the targeted user to visit a malicious website to exfiltrate WhatsApp messages and contacts.

The post Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft appeared first on SecurityWeek.

Curated by Sherpa Intelligence: Your Guide Up a Mountain of Information

Summary:

• WhatsApp users may begin to register a “claim” for their preferred username.
• Can only be done via app, will not work on web/desktop versions.
• Meta will need your permission to add your new WhatsApp username claim to their Accounts Center.
• Eligibility to register your claim is on a rolling basis, although some users may already be able to claim. Look for Settings > Account > Username.
• Users should expect an in-app notification when the usernames go live.

Resources:

(1) It’s time to reserve your WhatsApp username

(2) How to create and manage your username

(3) WhatsApp to let people chat by swapping usernames instead of phone numbers BBC News, June 29th

If you enjoy what I create, you can support me at:
https://ko-fi.com/infosecsherpa

An optional ‘username key’ adds another layer by requiring a secondary credential before someone can message users.

The post WhatsApp Rolling Out Username Feature to Bolster Phone Number Privacy appeared first on SecurityWeek.