Wirken open-source AI agent gateway released
It limits compromised AI agents by running them in separate processes with approval for actions
Stories per day · 30 days
3 RSS
Relatedmeta5chatbot3hidden-instructions3privacy3gdpr2india2phishing2sim-binding2telecom-rules2account-takeover1ai-agent1calling1client1cloudflare1credential-theft1darkcore1data-protection1egui1
41 stories, newest first · one card per story
Stories tagged #whatsapp
ZapFast: Fast native WhatsApp client in Rust and egui
A new Rust-based WhatsApp client using egui GUI framework launched on GitHub.
Election scams seek voter data, donations, fines, and fake merch
Malwarebytes outlines five lures, including a fake Minnesota absentee text and a Brazilian WhatsApp app push, backed by FBI and court warnings.
1
DarkCore RAT Enables Session Hijacking of Gmail and WhatsApp
DarkCore RAT allows attackers to hijack authenticated sessions in Gmail, WhatsApp and MediaFire using stolen cookies without needing passwords, requiring an existing endpoint foothold.
India SIM-binding rules may block WhatsApp without a registered SIM
Covered apps have until December 31, 2026, with the requirement expected to take effect on January 1, 2027.
1
India to require WhatsApp and Telegram accounts to stay tied to active SIMs
DoT’s deadline is December 31, 2026; how far accounts stop working depends on each app’s implementation.
WhatsApp chatbot was told not to recommend privacy regulators
Redact found the hidden text on October 8 across 80 help pages, including account-deletion guidance.
WhatsApp help pages hid chatbot orders not to name regulators
Redact counted 102 hidden blocks on 80 pages; Meta called it a bug and removed them by October 18.
WhatsApp help pages hid chatbot orders not to cite regulators
Hidden notes told WhatsApp’s support bot not to name data-protection authorities or GDPR after a lawyer was mentioned.
Judge denies WhatsApp contempt bid over alleged NSO injunction breach
The court said Meta’s evidence on 23 suspect accounts was not clear and convincing enough to punish NSO.
WhatsApp help pages exposed hidden instructions for a Meta chatbot
About 80 FAQ pages held roughly 100 hidden blocks telling a support model what not to say, including legal topics.
WhatsApp MCP server offered free on Cloudflare
The feed only links a GitHub project and shows 23 points and 13 comments, with no technical details.
“Spray and pray” job applications could make it harder for you to spot a scam
Malwarebytes warns mass AI job applications can make fake recruiter messages harder for applicants to spot.
WhatsApp Attachment Deploys Malware That Gains SYSTEM Access on Windows
A WhatsApp ZIP lure deploys VulcanRAT207.A, a Windows RAT that escalates to SYSTEM and sideloads via VulkanInfo.
WhatsApp-Delivered Malware Injects Into Windows Task Scheduler to Run as SYSTEM
WhatsApp-delivered fake financial statement drops VulcanRAT207.A, gaining SYSTEM via Task Scheduler injection, BYOVD, and DLL side-loading.
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
A ThreatsDay roundup covers GlassWorm VS Code themes, VulcanRAT207, a Qilin extradition, and a rogue Gentlemen affiliate.
Photon held a funeral for mobile apps. Now it has $4.5M to help replace them with agents
Photon raised $4.5 million seed to let developers run agents over iMessage, WhatsApp, and other channels.
CVE-2026-86950: The Great Glyph Grift - An in-the-wild iOS bug with a possible WhatsApp zero-click path
Apple fixed in-the-wild CoreGraphics CVE-2026-86950 in iOS 26.7.1; crafted PDF fonts can trigger an out-of-bounds write.
11
The Secrets of the US Spyware King
Paragon CEO Andrew Boyd admits the company cannot technically detect Graphite spyware misuse and canceled Italy's contracts without investigating allegations.
6
Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path
Researchers published a crash-only PoC for Apple CoreGraphics CVE-2026-86950, which CISA listed as exploited.
5
101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent
OX Security found 101 malicious npm packages totaling 490,000 downloads that hijack developers' WhatsApp accounts into attacker-controlled groups.
2
SilverFox Hackers Built Fake Software Sites That Hide Malware From Security Researchers
Microsoft ties Silver Fox fake download sites to Windows malware mainly hitting Chinese-speaking users.
9
Using Device Linking to Eavesdrop on WhatsApp and Signal
Germany's Customs Office eavesdrops on WhatsApp and Signal by linking suspects' accounts to police computers via physical access, phishing, or SMS interception.
SilverFox Built Fake Software Sites That Know When Researchers Are Watching
Silver Fox operators delivered a Windows loader via WhatsApp while hiding payloads from security researchers.
4