NewsThe Register — Security
WeChat worm could pwn a friend before they even answered the call
Teaser from the source
Calif says AI helped turn a VoIP memory bug into cross-platform RCE before Tencent shut it down
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityMore on WeChat
Other advisories
- MediumCVE-2026-18964Das Schwebende Chat-Widget: Kontakt-Chat-Symbole, Telegramm-Chat, Line Messenger, WeChat, E-Mail, SMS, Anrufknopf – Das Chaty-Plugin für Wor...
- Not ratedosv:CVE-2026-68929FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization
- MediumCVE-2026-32467Serverseitige Anforderungsfälschung (SSRF) im Abonnentenserver von Aotuman zum Abrufen von WeChat-Artikeln in Versionen bis einschließlich 2.
- MediumCVE-2026-32467Apoyl [Aotuman] Grab WeChat Articles: Server-Side-Request-Forgery (SSRF)
- Not ratedosv:MAL-2026-13520Malicious code in @aster110/cc2wechat (npm)
- MediumCVE-2026-15628Zhayujie chatgpt-on-wechat CowAgent: Server-Side-Request-Forgery (SSRF)
- Not ratedosv:CVE-2026-15628zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgery
- MediumCVE-2026-15628Ein Sicherheitsproblem wurde in zhayujie chatgpt-on-wechat CowAgent bis Version 2.
Other news entries
- uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat AccountsNewsThe Hacker News
- ⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and RootkitsNewsThe Hacker News
- WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming CallsNewsThe Hacker News
- Stealer Spoofs Google, Microsoft & Apple, Then Backdoors macOSNewsDark Reading
- „WeWorm“: Zero-Click-Wurm hätte alle Konten von WeChat übernehmen könnenNewsheise Security
ID