WhatsApp is fixing a bug in its desktop app that allowed access to files on your computer

Last month, WhatsApp fixed a bug in its desktop app that allowed attackers to read files from your computer. A post published by security firm PerimeterX last night suggests the bug affected folks who used either WhatsApp’s Mac or Windows app paired with an iPhone.

The company’s security researcher, Gal Weizman, found vulnerabilities in WhatsApp’s Content Security Policy (CSP) that could be exploited to send manipulated messages and links using Cross-Site Scripting (XSS). He was able to take advantage of these flaws to send malicious code or read files from a computer’s local file system. That could’ve been quite harmful if someone stored sensitive documents on their machine.

The researcher was able to find and manipulate code from where messages are formed in the desktop app. He proceeded to forge a banner with a link preview to include a potentially malicious link.

Weizman suggested that WhatsApp shouldn’t use older version of Google’s chromium-browser platform to avoid such flaws. If you’re using WhatsApp on an iPhone and through its desktop app, you should update both, just to be safe.

You can read the technical details of how Weizman was able to bypass WhatsApp’s CSP here.

AI Disclaimer: An advanced artificial intelligence (AI) system generated the content of this page on its own. This innovative technology conducts extensive research from a variety of reliable sources, performs rigorous fact-checking and verification, cleans up and balances biased or manipulated content, and presents a minimal factual summary that is just enough yet essential for you to function as an informed and educated citizen. Please keep in mind, however, that this system is an evolving technology, and as a result, the article may contain accidental inaccuracies or errors. We urge you to help us improve our site by reporting any inaccuracies you find using the "Contact Us" link at the bottom of this page. Your helpful feedback helps us improve our system and deliver more precise content. When you find an article of interest here, please look for the full and extensive coverage of this topic in traditional news sources, as they are written by professional journalists that we try to support, not replace. We appreciate your understanding and assistance.

Hungary's Government Characterizes Itself as a Defender of Christian Values Amidst Immigration Concerns

Viktor Orbán asserts Hungary's unique stance in Europe, while Donald Trump issues a warning regarding immigration issues.

Putin Accuses Europe of Sabotaging Ukraine Peace Effort as US Envoys Meet in Moscow

The path to peace lies in genuine compromise: safeguards for Ukraine from Russian advances, and for Russia from NATO expansion. Only such reciprocity could turn fragile diplomac...

If you have a gmail account now is the time to check your settings. AI may be reading all of your emails and publicly profiling you based on your own private and confidential data

Lamborghini SUV Crashes onto Bus-Stop Shelter in Icy Conditions

A 19-year-old driver lost control of a Lamborghini Urus in winter weather, causing a dramatic incident with minimal injuries reported.

Budapest Post

WhatsApp is fixing a bug in its desktop app that allowed access to files on your computer

Newsletter

Related Articles

Hungary's Government Characterizes Itself as a Defender of Christian Values Amidst Immigration Concerns

Putin Accuses Europe of Sabotaging Ukraine Peace Effort as US Envoys Meet in Moscow

If you have a gmail account now is the time to check your settings. AI may be reading all of your emails and publicly profiling you based on your own private and confidential data

Lamborghini SUV Crashes onto Bus-Stop Shelter in Icy Conditions

John Williams' Aston Martin Vantage DB5, the iconic James Bond car, has been restored after decades, marking its first drive in 40 years

Swedes March to Honor National History and Advocate Sovereign Borders

Bitcoin Rebounds After Selloff

OpenAI Declares ‘Code Red’ as Google Threatens AI Lead

"If Brussels wants illegal migrants, Brussels can have them."

PM Viktor Orban at Weltwoche: Migration is a concept of changing society. It is the replacement of native-born voters.

Swiss prosecutors file charges against Credit Suisse and UBS over Mozambique ‘tuna bonds’ scandal

EU Firms Struggle with 3,000-Hour Paperwork Load — While Automakers Fear De Facto 2030 Petrol Car Ban

Budapest Post