EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·Sep 12·5 min read
WeWorm: Zero-Click WeChat Worm
TL;DR
WeWorm is the first zero-click worm that spreads through WeChat calls on both iOS and Android devices, allowing attackers to hijack accounts effortlessly. This vulnerability poses a significant threat, potentially compromising over a billion devices worldwide.
✦ Why It Matters
Review your app permissions and security settings to protect against potential zero-click attacks.
Key Takeaways
- Regularly update your messaging apps to patch vulnerabilities.
- Limit friend lists to trusted contacts only.
- Monitor app permissions for unusual access requests.
- Stay informed about emerging security threats in mobile apps.
How It Works
WeWorm exploits a memory corruption issue in WeChat's VoIP stack, allowing an attacker to gain control of a victim's account simply by calling them. The exploit functions without any interaction from the victim, making it particularly dangerous.