WhatsApp Reports 6 Previously Undisclosed Vulnerabilities on New Security Site
WhatsApp has revealed six new vulnerabilities that were previously undisclosed and have now been fixed. The Facebook-owned company reported the vulnerabilities on its newly created security advisory webpage that will serve as a single destination to highlight all the security issues spotted and fixed on WhatsApp and reveal associated Common Vulnerabilities and Exposures (CVE). The new development by WhatsApp is aimed to help the technology community benefit from its latest security updates and be more transparent towards notifying users about the flaws and vulnerabilities fixed on the platform.
Of the six new vulnerabilities fixed by WhatsApp, four existed in WhatsApp for Android, with two being a part of its iPhone client, while the remaining two were specifically related to WhatsApp Desktop versions prior to v0.3.4932, as reported on the security advisory site. Two third of the new vulnerabilities were found internally — through code review or automated dynamic analysis — and one third were reported through the bug bounty programme conducted by Facebook.
WhatsApp will be able to continue the practice of revealing vulnerabilities through its newly created security advisory site. This will detail the security issues that the company isn’t able to mention in the app release notes of the updates due to the policies and practices of app stores.
The growing presence of WhatsApp that already has over 200 crore users globally has brought it in the focus of hackers around the world. In some past instances, bad actors were able to exploit the app to manipulate messages of users and even snoop their phones. The WhatsApp team itself reported a dozen of security vulnerabilities that were fixed last year, as per the entries listed on the US National Vulnerability Database (NVD).
Thus, it makes sense for WhatsApp to have a dedicated security advisory site where it can list all the security issues under one roof. The arrival of the new site also suggests that the security team behind the world’s most popular messaging app could focus more on identifying and patching flaws to resist past issues.
“We are very committed to transparency and this resource is intended to help the broader technology community benefit from the latest advances in our security efforts,” WhatsApp wrote on its security advisory site.
