WhatsApp users may need to take extra steps to protect their account information following a potentially concerning discovery. A study by researchers at the University of Vienna revealed the app’s contact-discovery system enabled the collection of extensive WhatsApp user data at an unprecedented scale due to insufficient rate-limiting across global endpoints.
The researchers were able to gather huge amounts of phone numbers, public profile photos, account status text, business tags, and information tied to end-to-end encryption keys.
Read more…
Source: TechRadar News
Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox
Related:
- European tech buyers add digital sovereignty to cyber shopping list
November 12, 2026
European tech buyers are increasingly choosing cybersecurity vendors from their own continent in a bid to reduce their reliance on American technology. Digital sovereignty isn’t only prompting enterprise customers to question their clouds of choice, it is also reshaping other parts of the industry too, and the shift is marked. According to sales figures compiled by Context, ...
- Japan’s furniture giant Nitori says hackers stole 37.6 million customer records
November 11, 2026
Japan’s largest furniture chain Nitori Holdings has disclosed suffering a cyberattack which saw it lose tens of millions of customer records. Both consumer and business customers are affected, but passwords and payment data have not been compromised. In a statement, Nitori said it spotted unauthorized access to its systems on November 6 2026 – and after ...
- 13.3 million people’s medical data exposed; companies pay $300,000
November 9, 2026
The New York attorney general (AG) has reached a settlement over a medical data breach that affected 13.3 million people after basic security failures. Perry Johnson & Associates (PJ&A) and four related companies have agreed to pay $300,000 and implement extensive security reforms following a breach that exposed personal and medical information belonging to more than ...
- Iris Ohyama attack exposes info of 7.7 million customers
November 9, 2026
Major Japanese consumer goods manufacturer Iris Ohyama has confirmed suffering a cyberattack which saw it lose data on 7.7 million people. The company first disclosed the breach on October 29, 2026 when it confirmed “unauthorized access on the e-commerce site” Iris Plaza. At the time, the company said its investigation was ongoing, and that it would ...
- Norway’s aid agency pwned and all users’ data is stolen
November 5, 2026
Norway’s national aid agency, Norad, has confirmed that cyber criminals broke into its systems, stealing information about each and every registered user of its grant portal. Norad, which coordinates Norway’s assistance for foreign development, said that 20,614 registered individuals had their names and email addresses swiped, and information from at least three organizations’ applications was “misdirected.” The ...
- DOJ warns FBI data breach likely extends to Justice Department employees
November 4, 2026
A major data breach of FBI systems likely also affected staffers across the Justice Department, according to a memo obtained by POLITICO. FBI investigators determined in September that a hack of a bureau jobs portal was a “major” cyber incident, allowing hackers to steal personal information on thousands of FBI agents, including Social Security numbers, birth ...