 "Cert-In issues high-severity warning for WhatsApp desktop users")
The Indian Computer Emergency Response Team (Cert-In), on April 9, an agency under the Ministry of Electronics and Information Technology, issued a high-severity alert regarding a security vulnerability, affecting WhatsApp desktop users who are currently using the Windows version earlier than 2.2450.6.
The flaw allows attackers to gain unauthorised access to files by running any commands or code on the user’s computer.
“The vulnerability exists due to misconfiguration between the MIME type and file extension, leading to improper handling of attachment openings," said the agency, according to The Times of India.
The statement from Cert-In further added that a potential attacker could have the capability to exploit this vulnerability by “crafting malicious attachments”. Such attachments could execute arbitrary code in case they are opened manually within WhatsApp desktop application by the user.
How WhatsApp users can arm themselves against this security loophole
WhatsApp is the most popular online messaging application, having around 3.5 billion active users worldwide. If you are a person who uses the WhatsApp desktop application, here are a few precautionary measures flagged by Cert.In
Update WhatsApp desktop
Keeping your WhatsApp desktop application updated is crucial. Updates often include fixes for security vulnerabilities and bugs. Often, they also introduce new security features that could be helpful in protecting your computer system from potential threats from hackers.
Avoid suspicious files
Never open file attachments from unknown or untrusted sources. Moreover, even in the case of files sent from familiar contacts, it is ideal to treat files that appear unusual or unexpected with caution. These could be signs of a compromised account or malware attempt.
Maintain system security
Ensure your Windows operating system is always up to date by installing the latest security patches. Enable firewall protection and use a comprehensive security suite that includes malware detection to strengthen your defense against unauthorised access and cyber threats.
 "Russian drones over Poland: Trump’s tepid reaction a wake-up call for Nato?")
 "As Russia pushes east, Ukraine faces mounting pressure to defend its heartland")
 "Why Mossad was not on board with Israel’s strike on Hamas in Qatar")
 "Turkey: Erdogan's police arrest opposition mayor Hasan Mutlu, dozens officials in corruption probe")
 "Russian drones over Poland: Trump’s tepid reaction a wake-up call for Nato?")
 "As Russia pushes east, Ukraine faces mounting pressure to defend its heartland")
 "Why Mossad was not on board with Israel’s strike on Hamas in Qatar")
 "Turkey: Erdogan's police arrest opposition mayor Hasan Mutlu, dozens officials in corruption probe")
