TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

SecurityWeek

WhatsApp Discloses File Spoofing, Arbitrary URL Scheme Vulnerabilities

Eduard Kovacs · 1 day ago · Read original ↗

ATT&CK techniques detected

1 predictions
T1566.002Spearphishing Link
55%
“8. 0 - v2. 26. 7. 10 ). according to whatsapp, incomplete validation of ai rich response messages for instagram reels could have allowed an attacker to “ trigger processing of media content from an arbitrary url on another user ’ s device, including triggering os - controlled cus…”

Summary

The vulnerabilities were reported to Meta through its bug bounty program and were patched with updates released earlier this year.

The post WhatsApp Discloses File Spoofing, Arbitrary URL Scheme Vulnerabilities appeared first on SecurityWeek.