WhatsApp Adds Multiple Passkeys and Stronger 2SV in Account Security Update

https://www.securityweek.com/wp-content/uploads/2025/03/WhatsApp-Exploits.jpg

Identity & Access

When Android users get a call from a non-contact, they will see more information about the caller, including their country.

WhatsApp on Tuesday announced several new features designed to enhance account security, including related to passkeys, two-step verification (2SV), and caller context.

The Meta-owned messaging app says more than 1 billion individuals now rely on a passkey to log in to their WhatsApp accounts.

Users can now add more than one passkey, which can be useful for those who use the application on both iOS and Android devices.

As for two-step verification, the one-time passcode that was previously a six-digit PIN is now being upgraded to a full password. The password can be longer and it can include alphanumeric and special characters.

The last new security feature is, for the time being, only for Android users. When they get a call from a non-contact, they will see...

Copyright of this story solely belongs to securityweek.com. To see the full text click HERE

Read more

https://cdn.mos.cms.futurecdn.net/DVffQnnibMWmNpx2Wfb5Se-1920-80.jpg

'AI security controls are only as strong as the wider application environment around them': OpenAI forced to patch after experts bypass ChatGPT 'lockdown mode' to gain access to entire chat history

* Researchers bypassed ChatGPT Lockdown Mode, showing prompt-injection attacks could evade built-in protections * The flaw enabled sandbox escapes that could support data theft, phishing, malware delivery, or malicious popups * OpenAI patched the issue server-side, highlighting risks in AI application layers beyond the model itself OpenAI was recently forced to upgrade ChatGPT&