New WhatsApp Warning—Update Now To Fix Security Flaw
WhatsApp has issued a new warning to update now after fixing a flaw that could allow attackers to plant malware on your device. Tracked as CVE-2025-30401, the spoofing issue could see adversaries deploy malware via an attachment such as an image.
The vulnerability, which affects WhatsApp for Windows Desktop prior to 2.2450.6, impacts users interacting with attachments sent through the platform. The spoofing issue stems from a fundamental flaw in how WhatsApp for Windows processes file attachments.
'A maliciously crafted mismatch could have caused the recipient to inadvertently execute arbitrary code rather than view the attachment when manually opening the attachment inside WhatsApp,' WhatsApp owner Meta said in a security advisory.
WhatsApp has come under fire recently after adding an AI assistant to the app that can't be removed. The latest warning is a reminder that WhatsApp's billions of users that the app is increasingly targeted by cyber attackers keen to take advantage of its customer base.
I contacted WhatsApp owner Meta for a statement and will update this article if the firm responds.
There's no doubt about it, the WhatsApp flaw is nasty, making it important you update as soon as you can. Adam Brown, managing security consultant at Black Duck calls the new WhatsApp flaw 'a particularly nasty vulnerability for the everyday user.'
The WhatsApp issue would allow a malicious program to easily be disguised as an attached image file, Brown says. 'When the user clicks on the attachment in WhatsApp Web for Windows, the program executes on their Windows machine. A malicious attachment could be used for data theft, running malware or spreading it, account and identity theft, or anything a nefarious actor chooses.'
Everyone should be careful when clicking on attachments — even from people they know — and Windows users of WhatsApp should be especially vigilant, says Brown.
Windows WhatsApp users should upgrade to version 2.2450.6 or later to fix the issue.
The vulnerability must not be taken lightly and users should update their software to the newest version now, says Dr Martin Kraemer, security awareness advocate at KnowBe4.
He advises people to be extremely careful when opening attachments or files. 'Think of WhatsApp the same way as email. You would not want to open an unexpected email attachment, especially not from someone you do not know. You also would not want to forward attachments that pose risks to friends or family. If in doubt, delete the message and file.'
So if you use WhatsApp on your Windows device, it's time to update it now. Meanwhile, always be careful what you click on, whether via WhatsApp, email, or another app, and only open images and files from people you trust.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Time Business News
3 hours ago
- Time Business News
Best Free YTMP4 YouTube to MP4 Converters You Can Try
Watching videos on YouTube is great when you have a stable internet connection. But what if you want to watch your favorite content offline—without interruptions or data usage? That's where YouTube to MP4 converters come in. These tools allow you to save YouTube videos as MP4 files, a widely supported video format that can be played on most devices. One popular option among these tools is YTMP4. In this article, we'll explore YTMP4 and other free YouTube to MP4 converters that are safe, easy to use, and effective. YTMP4 is a free online tool that helps users download YouTube videos in MP4 format. It's simple to use—just copy the URL of the YouTube video, paste it into the YTMP4 converter, choose the video quality, and download the file. The biggest advantage of YTMP4 is its speed and user-friendly interface. There's no need to install any software, and it works directly from your web browser. YouTube doesn't allow direct downloads of most videos. That means if you're going somewhere with no internet access or want to save data, you might find it difficult to enjoy your favorite videos. YouTube to MP4 converters solve this problem by allowing you to download and save videos for offline viewing. MP4 is a universal video format, compatible with Windows, Mac, Android, iOS, and most media players. Let's take a closer look at some of the best free converters, including YTMP4 and other top choices: As mentioned earlier, YTMP4 is a top pick for users looking for a fast and easy YouTube MP4 conversion. It's a Free and fast YouTube to MP4 converter. Here's why people love it: No sign-up needed Supports multiple video resolutions (360p, 720p, 1080p) Quick downloads and smooth interface Works on desktop and mobile browsers One thing to note is that, like many free tools, YTMP4 is ad-supported. Just be cautious of clicking any misleading ads or pop-ups. Y2Mate is another highly trusted name in the YouTube to MP4 converter world. It offers both MP4 and MP3 conversions and is known for being reliable. Free and no registration required Offers HD video downloads Fast conversion speed Compatible with various browsers Y2Mate also lets you choose from different file sizes and video quality levels depending on your storage capacity or internet speed. SaveFrom is one of the oldest and most well-known YouTube MP4 converters. While it has recently limited some features, it still allows basic MP4 downloads. Simple drag-and-drop interface Supports several platforms (YouTube, Vimeo, Facebook, etc.) Has a browser extension for even faster access This tool is ideal for people who frequently download from multiple video platforms. ClipConverter is more than just a YouTube to MP4 converter—it allows conversion to several other formats like AVI, MOV, and MKV as well. Wide format support High-quality video options available Advanced settings for tech-savvy users Supports long videos (over an hour) If you need more control over the quality and format of your videos, ClipConverter is a great choice. OnlineVideoConverter is another easy-to-use platform that helps users convert YouTube to MP4 quickly. It has a modern interface and supports many file types. No installation needed Works on any device Supports HD video quality Ad-free experience (mostly) It's also known for being one of the more secure platforms, with fewer ads compared to others. While these tools are free and useful, there are a few important things to remember: Respect Copyright Laws: Always ensure you're downloading videos for personal use and not violating copyright terms. Always ensure you're downloading videos for personal use and not violating copyright terms. Avoid Clicking Ads: Some sites may show pop-up ads. Avoid clicking anything that looks suspicious. Some sites may show pop-up ads. Avoid clicking anything that looks suspicious. No Need for Software: Most YouTube to MP4 converters work in your browser—no need to download extra software. Downloading YouTube videos in MP4 format is easier than ever thanks to tools like YTMP4 and others. Whether you're trying to save educational content, music videos, or tutorials for offline use, these converters can help. Just pick a reliable tool, follow safe browsing practices, and enjoy your videos anytime, anywhere. With so many free options available, including YTMP4, finding the right YouTube to MP4 converter is all about personal preference. Try a few, see which one you like best, and start building your offline video library today. TIME BUSINESS NEWS
Yahoo
3 hours ago
- Yahoo
Update Your Plex Server Now to Fix This Security Vulnerability
Bug bounty programs are extremely useful to reinforce security in the software we use daily. If you use Plex, a vulnerability has been discovered via said program—and you'll want to update as soon as you get a chance, because it sounds serious. Plex has started warning users that they should immediately update their software to patch a newly discovered, yet-to-be-detailed vulnerability. The company took the unusual step of directly emailing users running affected server versions, so it must be a pretty serious one. The security issue impacts Plex Media Server versions 1.41.7.x through 1.42.0.x. In an email sent to users on Thursday, four days after the patch was quietly released, Plex confirmed the vulnerability was responsibly disclosed through its bug bounty program. According to Plex, "thanks to that user, we were able to address the issue, release an updated version of the server, and continue to improve our security and defenses." However, Plex has remained tight-lipped about the nature and severity of the flaw. As of the time I'm writing this, not even a CVE-ID, the standard identifier for publicly known cybersecurity vulnerabilities, has been assigned. The company has also not provided any technical details that would clarify whether the bug could allow data exposure, denial of service, or a more severe remote code execution (RCE) attack. This is fine, though. Since it's not a publicly disclosed vulnerability, Plex doesn't want attackers to go poking around possible entry points and potentially coming across the vulnerability by themselves, and it also doesn't want them to know how much, or how little, they can do with it. What they can do, however, is reverse-engineer the update to identify the underlying vulnerability, so you'll want to download it as soon as you can. Once understood, they can develop exploits to target any servers that remain unpatched—you'd be surprised by the number of people who decide to just never update their servers. Seeing how the company felt it necessary to actually email people about it, it's definitely more on the serious side. Plex has contended with serious security issues in the past, with some having far-reaching consequences beyond its own ecosystem. In March 2023, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a three-year-old Plex vulnerability, identified as CVE-2020-5741, to its catalog of known exploited vulnerabilities. This RCE flaw, if successfully exploited, could allow an attacker to execute arbitrary code on a user's server. The patched and secure version is Plex Media Server 1.42.1.10060, which is available through the server's built-in update mechanism or directly from the official Plex downloads page. If you have a Plex server, download the update as soon as you can. Source: Bleeping Computer
Yahoo
4 hours ago
- Yahoo
Meta Platforms (META) Accelerates AI Race With New Lab Structure
Meta Platforms, Inc. (NASDAQ:META) is one of the On August 15, The Information reported that Meta is planning its fourth overhaul of artificial intelligence efforts in six months. According to the report, the company is expected to divide its new AI unit, Superintelligence Labs, into four groups. These groups are a new 'TBD Lab,' short for to be determined; a products team including the Meta AI assistant; an infrastructure team; and the Fundamental AI Research (FAIR) lab focused on long-term research. The TDB Lab, developing the newest version of Meta's flagship large language model Llama, is expected to have multiple leaders. With the AI arms race intensifying, CEO Mark Zuckerberg is accelerating his efforts to achieve artificial general intelligence — helping create new revenue streams. A close-up of two software engineers typing away at laptops in a modern, well-lit office. The restructuring plans have not yet been announced internally and could still change, sources told The Information. While we acknowledge the potential of META as an investment, we believe certain AI stocks offer greater upside potential and carry less downside risk. If you're looking for an extremely undervalued AI stock that also stands to benefit significantly from Trump-era tariffs and the onshoring trend, see our free report on the best short-term AI stock. READ NEXT: and Disclosure: None. Sign in to access your portfolio
