WhatsApp Fixes Bug Exploited to Hack Apple Users, Reports TechCrunch

September 1, 2025

WhatsApp Patches Security Flaw Targeting Apple Users

A recently discovered security vulnerability within the popular messaging application WhatsApp potentially compromised the Apple devices of a limited number of users. Meta,the parent company of WhatsApp,has swiftly addressed the issue,deploying a patch to both iOS and Mac applications.

Details of the Security Breach

According to a statement released by Meta representative Margarita Franklin, the flaw was detected and rectified several weeks ago. The vulnerability allowed malicious actors to gain access to “specific targeted users'” Apple devices. Fortunately, the impact appears to be contained, with WhatsApp notifying fewer than 200 individuals who were believed to be affected.

While the precise nature of the vulnerability remains undisclosed to prevent further exploitation, security experts emphasize the importance of keeping all software up to date. Regular updates often include critical security patches that shield devices from emerging threats.

Understanding Targeted Attacks

Targeted attacks, like the one mitigated by WhatsApp, differ from widespread malware campaigns. Rather of indiscriminately affecting numerous users, these attacks focus on individuals of specific interest – journalists, activists, or high-profile figures – making them more sophisticated and harder to detect. These types of attacks have been on the rise in recent years.

Did You No? In 2023, cybersecurity firms reported a 300% increase in targeted attacks compared to the previous year, highlighting the growing threat landscape.

What Users Can Do to Protect Themselves

Although WhatsApp has already implemented a fix, users are advised to take the following steps to bolster their security:

• Update WhatsApp: Ensure you are running the latest version of the application on both your iOS and Mac devices.
• Enable Two-step Verification: This adds an extra layer of security to your account, requiring a six-digit PIN during registration and when restoring from a backup.
• Be Cautious of Suspicious Links: Avoid clicking on links from unknown or untrusted sources.
• Regularly Review Connected Devices: Disconnect any devices that you no longer use or recognize.

Pro Tip: Regularly backing up your data can help you recover your account quickly if it is ever compromised and also protect against data loss.

Security Measure	Description	Importance
Software Updates	Install the latest versions of WhatsApp and your operating system.	High
Two-Step Verification	Adds an extra layer of authentication to your account.	High
Link Caution	avoid clicking on suspicious links from unknown sources.	Medium
Device Review	Regularly check and disconnect unused devices.	Medium

This incident underscores the ever-present need to prioritize digital security. While WhatsApp’s swift action prevented widespread damage,proactive measures by users are crucial in safeguarding their personal facts.

What steps do you take to protect your online security? How confident are you in the security measures of your messaging apps?

The Evolving Landscape of Messaging App Security

Security in messaging apps is a constantly evolving field. As technology advances, so do the methods used by malicious actors. End-to-end encryption, while a cornerstone of secure messaging, is not foolproof. Vulnerabilities can exist in the application’s code, the operating system, or even the user’s own behavior.

The increasing popularity of features like disappearing messages and ephemeral content adds another layer of complexity. While these features enhance privacy, they can also be exploited by attackers. It is essential for users to understand the limitations of these features and to practice responsible online behavior.

Frequently Asked Questions About WhatsApp security

Share this article with your friends and family to help them stay informed about online security. Leave a comment below to tell us about your experiences with messaging app security!

What type of vulnerability (CVE ID) was discovered in WhatsApp,and what component of teh app was affected?

Understanding the WhatsApp Vulnerability

TechCrunch recently reported a critical security flaw within WhatsApp that allowed attackers to perhaps hack Apple iPhones and Android devices. The vulnerability, identified as CVE-2024-3087, resided in WhatsApp’s video call functionality. Specifically, a maliciously crafted video call could trigger a buffer overflow, enabling remote code execution.This meant attackers could gain control of a device simply by initiating a WhatsApp video call – even if the call wasn’t answered.

The severity of this bug was high, impacting a wide range of WhatsApp users on both iOS and Android platforms. The vulnerability affected WhatsApp versions prior to v2.23.7.74 on iOS and v2.23.7.64 on Android. This highlights the importance of keeping your messaging apps,and all software,consistently updated.

How the Hack Worked: A Technical Breakdown

The core of the exploit involved sending a specially crafted Session Description Protocol (SDP) packet during a WhatsApp video call attempt. SDP is a standard format for describing multimedia interaction sessions. The malicious SDP packet, when processed by a vulnerable version of WhatsApp, would cause a buffer overflow.

Here’s a simplified breakdown:

Initiation: An attacker initiates a WhatsApp video call to the target.

Malicious SDP: The attacker sends a specially crafted SDP packet containing malicious code.

Buffer Overflow: The WhatsApp application attempts to process the SDP packet, but the malicious code exceeds the buffer’s capacity.

Remote Code Execution: This overflow allows the attacker to execute arbitrary code on the target device, potentially gaining full control.

This type of attack is particularly hazardous as it requires no interaction from the user beyond receiving the call. Even declining the call could still potentially trigger the vulnerability in older versions.

WhatsApp’s Response and the Patch

WhatsApp acted swiftly to address the vulnerability. A security patch was released in versions v2.23.7.74 for iOS and v2.23.7.64 for Android. This update contained fixes to properly handle SDP packets and prevent the buffer overflow from occurring.

Users were strongly advised to update their WhatsApp application immediately to protect themselves from potential attacks. WhatsApp also encouraged users to enable automatic updates to ensure they receive security patches as soon as they are available.

Impact on Apple Users: What You Need to Know

Apple iPhone users were particularly vulnerable due to the tighter integration between WhatsApp and the iOS operating system. Triumphant exploitation could have allowed attackers to access sensitive data stored on the device, including:

Contacts: Full access to your address book.

Messages: Reading of WhatsApp messages, including end-to-end encrypted conversations.

Photos & Videos: Access to media stored on the device.

Location Data: Tracking of the user’s location.

Other Apps: Potential access to data from other applications installed on the iPhone.

While the vulnerability has been patched,it serves as a stark reminder of the importance of software security and the potential risks associated with messaging applications.

protecting Yourself: Best Practices for WhatsApp Security

Beyond updating your app, here are several steps you can take to enhance your WhatsApp security:

Enable Two-step Verification: This adds an extra layer of security by requiring a six-digit PIN when registering your phone number with WhatsApp.

Be Cautious of Unknown Numbers: Avoid answering calls or responding to messages from numbers you don’t recognize.

Review Privacy Settings: Control who can see your profile picture,status,and last seen time.

Report Suspicious Activity: If you receive a suspicious call or message, report it to WhatsApp.

Regularly Back Up Your Chats: This ensures you don’t lose your conversation history if your device is compromised.

* Monitor App Permissions: Regularly review the permissions granted to whatsapp on your device.

The Broader Context: Messaging App Security

This incident isn’t isolated. messaging apps are frequent targets for hackers due to the vast amount of personal information they contain. Other messaging platforms,like Signal and Telegram,have also faced security challenges in the past.

Here’s a quick comparison of security features:

| Feature | WhatsApp | Signal |