ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
Vendor

WhatsApp

1 mentions in 7 days · 4 in 30 days · 4 total · first seen · last

Search everything

Timeline

From Specs to Apps: Verifying and Monitoring Models of Signal and WhatsApp

Researchers use the SpecMon runtime monitor to verify WhatsApp Web and Signal Desktop against formal Signal protocol models, finding undocumented libsignal fork differences.

The paper applies SpecMon, a runtime monitoring tool, to check whether executions of WhatsApp Web and Signal Desktop conform to formal models of the Signal protocol. The authors instrument both applications and build Tamarin-compatible multiset-rewrite models, including the first model of WhatsApp Web's implementation and the most detailed model to date of Signal's original protocol. They verify authentication and secrecy properties for core Signal protocol components, show monitoring detects deliberately injected faults with low overhead, and identify previously undocumented behavioral differences between the original libsignal library and WhatsApp's fork.

arXiv cs.CR · 5d agoResearch

WhatsApp Testing Guest Calls for People Without a WhatsApp Account

WhatsApp is developing browser-based guest calls allowing non-account holders to join end-to-end encrypted calls via shared links with mandatory host approval.

WhatsApp is developing a guest-call feature extending Call Links so people without a WhatsApp account can join calls through a browser link. The feature remains in development with no release date, and guests must send join requests that hosts must manually approve. Call content is expected to stay end-to-end encrypted using a unique browser-session identifier.

GBHackers · 7d agoOther

WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion

WhatsApp says 1 billion users now use passkeys, as it upgrades two-step verification to full passwords and adds context for calls from unknown numbers.

WhatsApp announced that more than 1 billion users now protect their accounts with passkeys, and that users can now add multiple passkeys across Android and iOS devices. The app's two-step verification has been upgraded from a six-digit PIN to a full alphanumeric password with special characters, strengthening protection against account takeover. On Android, callers outside a user's contacts will now show context such as country of origin and shared groups, countering urgency-driven scam calls.

Security Affairs · 20d agoIndustry

WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign

Meta now allows multiple passkeys per WhatsApp account and upgraded two-step verification to full passwords, hardening sign-in for more than 1 billion users.

Meta announced support for multiple passkeys on a single WhatsApp account for iOS and Android, noting more than 1 billion people already use a passkey to log in. WhatsApp also upgraded two-step verification from a six-digit PIN to a full alphanumeric password and added Android call context such as origin location, contact status, and shared groups. The features aim to harden account sign-in against phishing and one-time passcode interception and to counter caller scams relying on urgency.

The Hacker News · 21d agoTools

Appears with

vendor Meta 3product WhatsApp Web 2organization WhatsApp 1product libsignal 1product Signal Desktop 1product SpecMon 1product Tamarin 1organization Meta 1vendor Signal 1organization Signal 1
Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.