Silent Whisper vulnerability exposes WhatsApp users to secret tracking

A new security flaw known as Silent Whisper puts billions of WhatsApp and Signal users at risk. Attackers can monitor activity without detection, leading to battery drain and revelation of daily routines. An expert has created a tool that exploits this vulnerability to spy on users undetected.

The Silent Whisper vulnerability targets messaging apps WhatsApp and Signal, enabling hackers to secretly profile user activity. This flaw allows attackers to track communications and movements without alerting victims, potentially draining device batteries and exposing personal routines.

According to security reports, the issue affects over three billion WhatsApp users worldwide. The vulnerability operates silently, making it nearly impossible for individuals to notice any intrusion. An expert in cybersecurity has developed a specialized tool that demonstrates the full extent of this threat, capable of spying on multiple users simultaneously without leaving traces.

This discovery highlights ongoing challenges in securing popular messaging platforms. While WhatsApp, owned by Meta, has not yet issued a specific response in the available information, the potential for widespread privacy breaches underscores the need for immediate patches and user awareness. The tool's creation serves as a proof-of-concept, urging developers to address such weaknesses proactively.

Experts emphasize that Silent Whisper exploits subtle protocol flaws in end-to-end encrypted services, turning a key privacy feature against users. As digital communication grows, vulnerabilities like this could erode trust in essential apps.

Awọn iroyin ti o ni ibatan

IT expert Supangat warns of Lebaran digital scams via WhatsApp and SMS in a press conference illustration.
Àwòrán tí AI ṣe

IT expert warns of digital scams ahead of Lebaran

Ti AI ṣe iroyin Àwòrán tí AI ṣe

Ahead of Idul Fitri, IT expert from Untag Surabaya, Supangat, urges the public to heighten vigilance against scams via WhatsApp and SMS. Rising digital transactions are exploited by cybercriminals. Vida founder Niki Santo Luhur identifies two main methods: phishing and malware prevalent in Indonesia.

Journalists reported mysterious phishing attempts by unknowns a few weeks ago. The Dutch secret service now holds Russia responsible for attacks on the messaging apps WhatsApp and Signal. The report explains how the attacks work and how users can protect themselves.

Ti AI ṣe iroyin

Security researchers have flagged a new risk to users of Microsoft's Phone Link application. An unidentified threat actor is using the tool to steal SMS messages and one-time passwords.

Russia's recent ban on Telegram, a key messaging app, is reportedly hindering its military communications in Ukraine. The move, aimed at promoting a state-owned alternative, has drawn criticism from soldiers reliant on the service. Combined with restrictions on Starlink access, it has affected drone operations on the front lines.

Ti AI ṣe iroyin

The Department of Information and Communications Technology (DICT) is studying a potential ban on the encrypted messaging app Telegram due to concerns over illegal activities like pornography and gambling. This follows a similar proposal for Signal earlier in the month. Rights groups worry about impacts on private communication rights.

Nineteen malicious packages on the npm registry are spreading a worm known as SANDWORM_MODE. These packages steal crypto keys, CI secrets, API tokens, and AI API keys. The theft occurs through MCP injection.

Ti AI ṣe iroyin

Researchers have identified three high-risk vulnerabilities in Claude.ai. These enable an end-to-end attack chain that exfiltrates sensitive information without the user's knowledge. A legitimate Google ad could trigger data exfiltration.

 

 

 

Ojú-ìwé yìí nlo kuki

A nlo kuki fun itupalẹ lati mu ilọsiwaju wa. Ka ìlànà àṣírí wa fun alaye siwaju sii.
Kọ