Why the WhatsApp Security Flaw Should Make Enterprise IT Nervous

The vulnerability in Facebook’s popular messaging app WhatsApp that was revealed in May gave potential attackers a dangerous level of access to mobile devices.

“It was a zero-day flaw that allowed people to go and install spyware by exploiting the buffer overflow attack,” Avinash Ramineni, CTO at the Arizona-based cybersecurity company Kogni, said.

Which, outside of Facebook and WhatsApp, is not an enterprise security problem… Unless a company’s employee has the app installed on their company-owned smartphone, or on a personal one they use to access their employer’s enterprise systems.

The vulnerability in Facebook’s popular messaging app WhatsApp that was revealed in May gave potential attackers a dangerous level of access to mobile devices.

“It was a zero-day flaw that allowed people to go and install spyware by exploiting the buffer overflow attack,” Avinash Ramineni, CTO at the Arizona-based cybersecurity company Kogni, said.

Which, outside of Facebook and WhatsApp, is not an enterprise security problem… Unless a company’s employee has the app installed on their company-owned smartphone, or on a personal one they use to access their employer’s enterprise systems.

WhatsApp may have been the most recent popular mobile app to suffer a breach, but enterprise networks are at risk from many others as well. “There are other tools like iMessage, Signal, and Slack that are used a lot within the enterprises for communication or collaboration,” Ramineni said.

In fact, according to the 2019 Egress Data Privacy survey, these types of apps, along with email and file sharing, are some of the most common technologies that lead to breaches.

Read full article at Data Center Knowledge.