WhatsApp security flaw lets experts scrape 3.5 billion user numbers


WhatsApp users may need to take extra steps to protect their account information following a potentially concerning discovery. A study by researchers at the University of Vienna revealed the app’s contact-discovery system enabled the collection of extensive WhatsApp user data at an unprecedented scale due to insufficient rate-limiting across global endpoints.

The researchers were able to gather huge amounts of phone numbers, public profile photos, account status text, business tags, and information tied to end-to-end encryption keys.

Read more…
Source: TechRadar News


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • Qantas among list of major airlines impacted in global cyber security breach

    November 2, 2026

    Qantas and multiple other airlines have been targeted in a cyber security breach, with the Australian airline now working to determine what information was obtained. Client of Qantas, Spanish travel company Amadeus – which provides travel technology for global airlines, hire cars and hotels – was breached by an unauthorised agent, potentially accessing data about passenger ...

  • Germany says lawmakers’ iPhones may have been hacked with spyware

    November 2, 2026

    The German government is warning politicians and public figures that they were targeted by government-backed spyware, days after Apple began sending out notifications warning victims that their iPhones may have been hacked. Germany’s federal cybersecurity office, known as the BSI, said in a note over the weekend that it had become aware that members of the ...

  • Massive GovTech breach leaks 42 million documents — including thousands packed with personal information

    October 30, 2026

    Researcher finds exposed database containing 42 million documents and hundreds of thousands of records with personal data. The CitySourced-linked repository exposed names, contact details, complaint reports, and internal records for years. Database was secured after disclosure, highlighting ongoing risks from misconfigured cloud storage. Read more… Source:  TechRadar News Sign up for the Cyber Security Review Newsletter The latest cyber security news ...

  • Japanese internet giant GMO tells customers to shut down and disconnect PCs from the internet following data breach and ransomware threat

    October 28, 2026

    GMO warned customers to back up data, disconnect devices, and shut down systems after a cyberattack. Attackers allegedly stole customer data, leaked information, and threatened ransomware deployment. Compromised trading-platform credentials and reports of unauthorized transactions raised concerns for affected users. Read more… Source:  TechRadar News Sign up for the Cyber Security Review Newsletter The latest cyber security news and insights delivered ...

  • Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents

    October 28, 2026

    Personally identifiable information belonging to thousands of U.S. Department of Homeland Security employees has been published online after a hacker stole reams of data in a previously undisclosed breach at the government department earlier this year. The breach includes names, job titles, and work contact information, such as email addresses, cell phone numbers, and office locations, ...

  • Data breach at Sony ISP subsidiary exposes 2.5 million customer records as Japan hit with another major cyberattack

    October 28, 2026

    A subsidiary of Sony Network Communications, the Japanese tech giant’s Internet Service Provider (ISP) arm, has confirmed suffering a data breach which saw it lose sensitive data on roughly 2.5 million people. Among the stolen files were people’s phone numbers, email addresses, and in some cases – email passwords. The company confirmed the news in an apology ...