A Phone Call Can Now Spread a Zero-Click Worm | Threat Wire

What if a phone call could spread a zero-click worm without you answering, tapping a link, or doing anything at all? Security researchers built WeWorm, a proof-of-concept that exploited WeChat calls on iOS and Android, revealing how a zero-click vulnerability could turn a messaging app into a self-spreading attack.

⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️


@endingwithali →
Twitch: https://twitch.tv/endingwithali
Twitter: https://twitter.com/endingwithali
YouTube: https://youtube.com/@endingwithali
Everywhere else: https://links.ali.dev

Want to work with Ali? [email protected]

[❗] Join the Patreon→ https://patreon.com/threatwire

LINKS
🔗 Story 1: WeWorm
https://calif.io/research/weworm
https://x.com/xorninja/status/2097256985964240963?s=46
🔗 Story 2: GitLab
https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released/
https://www.csoonline.com/article/4211140/critical-gitlab-flaw-allows-attackers-to-delete-and-modify-public-repos.html?utm=hybrid_search
https://www.techtimes.com/articles/324820/20260818/github-actions-hit-three-nines-failure-one-august-outage-consumed-years-downtime-budget.htm
🔗 Story 3: DDrop
https://github.com/ddropattack/ddrop
https://www.theregister.com/security/2026/09/14/new-hardware-device-can-ram-into-encrypted-memory-expose-your-data/5296377
https://thehackernews.com/2026/09/new-ddrop-attack-breaks-intel-tdx-and.html
🔗 Story 4: BSides
https://mullvad.net/en/blog/shutting-down-our-public-encrypted-dns-servers-and-sponsoring-quad9-instead
https://thehackernews.com/2026/09/attackers-chain-jfrog-artifactory-flaws.html?utm_source=securityscroll&utm_medium=dashboard&utm_campaign=news_aggregator
https://www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-4201
https://www.apple.com/newsroom/2026/09/introducing-apple-watch-series-12-with-the-all-new-health-sensing-system/
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.org
Shop → http://hakshop.myshopify.com/
Community → https://www.hak5.org/community
Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
Support → https://www.patreon.com/threatwire
Contact Us → http://www.twitter.com/hak5
____________________________________________

Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.