Meta is adding @all mentions, one-tap side chats, and upgraded polls to WhatsApp groups, a reminder that even small chat features can reshape how quickly information moves.
A banking trojan tied to Astaroth, also known as Guildma, is using compromised WhatsApp identities and ZIP attachments to reach trusted contacts in Brazil.
Astaroth has added a WhatsApp Web spambot module, shifting from classic phishing lanes toward a messaging channel that can be abused to push malware from infected machines.
Meta is expanding WhatsApp calling with web access, waiting rooms, and call transfer, a reminder that even routine product upgrades can reshape how users trust live communications.
A cross-platform feature wave brings message playback to in-car systems, account creation to iPad, and PDF editing into the chat workflow, expanding convenience and the security questions that come with it.
Adobe patched a flaw in its Acrobat Chrome extension after it was reported to let any website reach WhatsApp Web conversations, underscoring how extension permissions can reshape privacy risk inside the browser.
A browser-extension flaw tied to CVE-2026-48294 shows how a single trust-boundary failure can put WhatsApp Web session data at risk without breaking end-to-end encryption.
A high-severity flaw in a widely installed Chrome extension shows how a trusted add-on can blur the line between one website and another, turning a browser into the weak link.
A flaw in a widely installed Adobe browser extension shows how a trusted add-on can turn a routine webpage visit into a cross-origin data leak.
A flaw in Adobe’s Acrobat Chrome extension could let websites access WhatsApp Web content rendered in the browser, underscoring how sensitive data can surface after encryption has already done its job.
A reported APT42 campaign shows how patient messaging, trusted cloud services, and a PowerShell backdoor can turn ordinary conversation into an intrusion path.
The new business assistant is built for questions, bookings, and lead capture, which makes it powerful for service commerce and valuable to attackers who target trust, identity, and workflow automation.
The Parliament’s latest move keeps encrypted chats outside the current control text, but the larger battle over how far message monitoring can go is still unresolved.
Muse Image is being threaded through Instagram, WhatsApp, and Meta AI, while Muse Video sits in preview, turning content creation into a platform-native security and consent issue.
A move away from phone numbers can improve privacy, but it also shifts the fight toward impersonation, handle squatting, and first-contact trust.
Meta has started letting users reserve WhatsApp usernames early, and that seemingly small step matters because naming is part of trust, fraud resistance, and account safety.
In Italian companies, WhatsApp is moving from simple customer care into marketing, sales, CRM, loyalty, and automation, turning a familiar chat tool into a more central business channel.
The announced feature could let people chat without sharing phone numbers, but the practical privacy value will depend on how the username system is built and controlled.
Username reservations ahead of WhatsApp’s planned 2026 rollout are designed to let people chat without handing over a phone number, a modest-looking change with outsized identity and abuse implications.
A bounty tied to alleged Russian hackers points to the part of secure messaging that attackers still prize most - verification, recovery, and trust.