CISA Alerts on Exploited WhatsApp and TP-Link Vulnerabilities in Active Attacks

TL;DR Summary
CISA has added a high-severity flaw in TP-Link Wi-Fi extenders and a WhatsApp vulnerability to its KEV catalog due to active exploitation, with the TP-Link issue being fixed but the product now EoL, and the WhatsApp flaw linked to targeted spyware campaigns. FCEB agencies are advised to apply mitigations by September 23, 2025.
- CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation The Hacker News
- WhatsApp fixes vulnerability used in zero-click attacks Malwarebytes
- WhatsApp patches exploit allowing hackers to target Apple users yahoo.com
- iPhone users warned to update WhatsApp after ‘extremely sophisticated’ cyberattack is uncovered New York Post
- WhatsApp Zero-Day Exploited in Attacks Targeting Apple Users SecurityWeek
Reading Insights
Total Reads
0
Unique Readers
1
Time Saved
1 min
vs 2 min read
Condensed
83%
315 → 53 words
Want the full story? Read the original article
Read on The Hacker News