Using Device Linking to Eavesdrop on WhatsApp and Signal
2026-09-29T19:23:35Z•7ab251a16e5d7766e35a4e554d7d74c2a2844b0015993521ef108af18537a528
AI-assisted-cybercrimeAI-safetyALPRCAPTCHARSASMS-interceptionSignalWhatsAppaccount-takeovercryptographydevice-linkingdigital-signature-forgerymalwaremessaging-securitynpm-supply-chainphishingprivacyself-jailbreakingsurveillance
What happened
Schneier’s September 2026 security roundup discusses device-linking abuse in WhatsApp and Signal, including physical access, phishing or SMS interception of verification codes; a resource-intensive RSA signature-forgery attack affecting unpadded (“pure”) RSA signatures; AI-assisted cybercrime and model self-jailbreaking; sophisticated malicious npm packages that evade install-script defenses; and surveillance-camera software exposing people, vehicles, license plates, bicycles, and other imagery. Most items are research or commentary rather than confirmed exploitable incidents.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- schneier_blog
- Record identifier
- 7ab251a16e5d7766e35a4e554d7d74c2a2844b0015993521ef108af18537a528
- Enrichment time
- 2026-09-29T19:23:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.