WhatsApp Reveals File Spoofing, URL Scheme Flaw

Meta-owned WhatsApp has released two new security warnings about flaws fixed earlier this year in the well-known messaging app. One issue is CVE-2026-23863, a medium-risk attachment spoofing problem that affects WhatsApp for Windows before version 2.3000.1032164386.258709.

An attacker could use the flaw to make a harmful document with NUL bytes in its name. When sent as an attachment, the receiver would think it’s a safe file, but it would run as a program when opened, WhatsApp’s notice says.

• Hot Topic

How Hacker Compromise AWS Cloud Environment Using AI in 72 Hours

By infosecbulletin / Friday , July 10 2026

A major AWS attack shows how attackers with AI can connect known cloud strategies to go from first access to...

Read More

• Hot Topic

Mycelium Framework: First AI-as-a-Service Botnet

By infosecbulletin / Thursday , July 9 2026

A new cybercrime ad is catching attention in the security world. It talks about a botnet that doesn't just get...

Read More

• Hot Topic

CrowdStrike Shows 5 New Prompt Injection Techniques for AI Agents

By infosecbulletin / Wednesday , July 8 2026

CrowdStrike has shared five new ways to inject prompts, showing the rising danger to AI agents as more organizations use...

Read More

• Alert

Critical GCP Dialogflow Vulnerability Allows Malicious Code Injection

By infosecbulletin / Wednesday , July 8 2026

A critical flaw in Google Cloud Platform’s Dialogflow CX lets attackers add harmful code to a company's AI chatbot system....

Read More

• Alert

CIRT identified 153 publicly exposed FortiGate devices in Bangladesh

By infosecbulletin / Wednesday , July 8 2026

CIRT identified 153 publicly exposed FortiGate devices in Bangladesh. In an advisory CIRT said, the campaign has been observed globally,...

Read More

• Hot Topic

Thousands of MCP Servers Exposed to File Access and Injection Attacks

By infosecbulletin / Wednesday , July 8 2026

Thousands of Model Context Protocol (MCP) servers have serious security flaws like file access issues, command injection, server-side request forgery...

Read More

• Alert

CERT/CC Alerts to Hidden Admin Backdoor in Tenda Router Firmware

By infosecbulletin / Tuesday , July 7 2026

Several Tenda firmware versions have a hidden backdoor that lets people gain admin access to the device's web interface. An...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 6. 07. 2026

By infosecbulletin / Monday , July 6 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• International

“Bad Epoll” 0-Day Vulnerability Allows Root Access on Linux Servers, Android Devices

By infosecbulletin / Monday , July 6 2026

A new Linux flaw called “Bad Epoll” (CVE-2026-46242) lets regular users get root access on Linux servers, desktops, and Android...

Read More

• Hot Topic

An AI performed a cyber attack without any human help for the first time

By infosecbulletin / Sunday , July 5 2026

Security experts found what they think is the first time an AI carried out a cyber attack all by itself....

Read More

The second flaw, CVE-2026-23866, has a ‘medium impact’ rating. It impacts WhatsApp for iOS (v2.25.8.0-v2.26.15.72) and WhatsApp for Android (v2.25.8.0-v2.26.7.10).

According to WhatsApp, incomplete validation of AI rich response messages for Instagram Reels could have allowed an attacker to “trigger processing of media content from an arbitrary URL on another user’s device, including triggering OS-controlled custom URL scheme handlers.”

WhatsApp has not given more details, but these custom URL problems could let bad actors send users to fake sites and open other apps on the device using URL schemes like facetime:, tel:, itms-apps:, or special app links.

The company states there is no proof of abuse in nature.