logo

WhatsApp now encrypts contact databases for privacy-preserving synching

ID: 9f228118-554f-5882-9609-dabedd157250

STIX ID: report--9f228118-554f-5882-9609-dabedd157250

Feed Name: Bleeping Computer

Threat Score
30/100

Date Published: 2024-10-23

Date Updated: 2026-04-20

Author: Bill Toulas

...
...

WhatsApp introduced IPLS, an HSM-backed, end-to-end encrypted contact storage mechanism that binds contact lists to accounts; an NCC Group security audit found a critical flaw enabling Marvell HSM impersonation and possible decryption of secret key material, but WhatsApp patched that and other reported issues prior to release.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.