Will Dormann on Nostr: From the world of "CVE has poorly designed rules that are poorly enforced": WhatsApp ...
Published at
2025-03-19 17:06:07 UTCEvent JSON
{
"id": "da4d705e50c9d2c97e659269519ba549a837dd2ae4f05d190e75f1506d1a0a1b",
"pubkey": "9c7b9756690880e06dd0ac4246c1d27e99c2f9d8beb819e2e3156dc3e2d8d3e6",
"created_at": 1742403967,
"kind": 1,
"tags": [
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/190/190/109/262/148/original/edef377c75f75544.jpeg",
"m image/jpeg",
"dim 1206x442",
"blurhash U7RysgIU_3M{j[t7WBt7~qfQRjj[fQj[ofay"
],
[
"proxy",
"https://infosec.exchange/users/wdormann/statuses/114190186421028942",
"activitypub"
]
],
"content": "From the world of \"CVE has poorly designed rules that are poorly enforced\":\nhttps://www.bleepingcomputer.com/news/security/whatsapp-patched-zero-day-flaw-used-in-paragon-spyware-attacks/\n\nWhatsApp had a zero-click 0day exploited ITW, but they didn't bother with CVE assignment because they didn't have to.\n\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/114/190/190/109/262/148/original/edef377c75f75544.jpeg",
"sig": "dbbc25cc5ebec02a3b60195d78ae04b9407a2d34cda2534c5edbfbea6ece0576dd4bb77724a2604bae2a89988834ad685ee1964933ba4e64999ad92109331858"
}