CISA Alerts on Exploited WhatsApp and TP-Link Vulnerabilities in Active Attacks
TL;DR
CISA has added a high-severity flaw in TP-Link Wi-Fi extenders and a WhatsApp vulnerability to its KEV catalog due to active exploitation, with the TP-Link issue being fixed but the product now EoL, and the WhatsApp flaw linked to targeted spyware campaigns. FCEB agencies are advised to apply mitigations by September 23, 2025.
- CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation The Hacker News
- WhatsApp fixes vulnerability used in zero-click attacks Malwarebytes
- WhatsApp patches exploit allowing hackers to target Apple users yahoo.com
- iPhone users warned to update WhatsApp after ‘extremely sophisticated’ cyberattack is uncovered New York Post
- WhatsApp Zero-Day Exploited in Attacks Targeting Apple Users SecurityWeek
Want the full story? Read the original reporting
Read on The Hacker News