WhatsApp discovers (and removes) 6.8 million accounts linked to global scam operations.

WhatsApp discovers (and removes) 6.8 million accounts linked to global scam operations.

In a sweeping enforcement action during the first half of 2025, WhatsApp—owned by Meta—expelled more than 6.8 million accounts linked to global scam operations. This initiative targeted criminal networks behind large-scale fraud schemes, particularly those operating so-called “scam centers” in Southeast Asia, including countries such as Cambodia and Myanmar.
Unprecedented $1 million prize offered at Pwn2Own Ireland 2025 for zero-click WhatsApp exploit.

Unprecedented $1 million prize offered at Pwn2Own Ireland 2025 for zero-click WhatsApp exploit.

In a groundbreaking move for cybersecurity research, Trend Micro’s Zero Day Initiative (ZDI), with co-sponsorship from Meta, has announced an unprecedented $1 million prize for a successful zero-click exploit targeting WhatsApp at Pwn2Own Ireland 2025. This event, scheduled for October 21–24, 2025, in Cork, Ireland, sets a new record for the highest single bounty offered in the history of the prestigious hacking contest.
U.S. House of Representatives officially bans the use of WhatsApp on all government-issued devices

U.S. House of Representatives officially bans the use of WhatsApp on all government-issued devices

The U.S. House of Representatives has officially banned the use of WhatsApp on all government-issued devices for congressional staff, effective immediately. This decision follows a memo from the House’s Chief Administrative Officer (CAO), which classified WhatsApp as a “high-risk” application due to several cybersecurity concerns.
What is Localhost Tracking and how come Meta got their hands slapped for their dirty deed.

What is Localhost Tracking and how come Meta got their hands slapped for their dirty deed.

Localhost tracking is a recently exposed technique that allowed companies—most notably Meta (the parent company of Facebook and Instagram)—to covertly link users’ mobile web browsing activity to their real identities, even if users never logged into their accounts through their browsers or used privacy features like incognito mode or cookie clearing.