CERT-In: Multiple vulnerabilities reported in WhatsApp; remote attacker can access info

By: ENS Economic Bureau | New Delhi | April 18, 2021 2:05:22 am The new WhatsApp vulnerability can be used by attackers even if you have Two-Factor Authentication turned on. The Indian Computer Emergency Response Team (CERT-In) has warned WhatsApp users in India of multiple vulnerabilities it detected in the instant messaging platform, which could lead to breach of sensitive user data and personal information. In a “high” severity rating advisory, the CERT-In said that the vulnerabilities had been detected in a certain versions of WhatsApp and WhatsApp Business for both Android and iOS platform. “Multiple vulnerabilities have been reported in WhatsApp applications which could allow a remote attacker to execute arbitrary code or access sensitive information on a targeted system,” the advisory said. The vulnerabilities, CERT-In said, exist in WhatsApp due to a cache configuration issue and missing audio decoding pipeline, which could give hackers the potential to “ execute arbitrary code or access sensitive information on a targeted system”. To prevent the threat, the government’s cybersecurity agency has asked users to update their WhatsApp on Android and iOS to the latest versions. This is not the first time that CERT-In has issued a “high” severity rating advisory, warning…
Read More