Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Tencent WeChat security update for zero-click call flaw

Security Patch Release
First reported
Last updated
Happening score
H score 16
2 unique sources, 2 articles

Summary

Hide ▲

WeChat had a zero-click incoming-call flaw that Calif said could be turned into remote command execution and account takeover on iOS and Android. Tencent released WeChat 8.0.77 for Android and 8.0.76 for iOS on 21 August 2026 to mitigate the bug, and Calif later said Tencent also blocked the exploit on its servers. Calif described the exploit chain as working without the target answering or touching the phone, with the attacker needing to be on the victim's contact list. The researchers said they built the exploit for Android first, then demonstrated a worm across three test phones before the mitigations landed.

Related Happenings

UNC3569 Sogou Input Method exploitation campaign

Campaign
H score89 First: 11.09.2026 10:14 Last: 11.09.2026 10:14 Sources 1

About this happening: UNC3569 is using a crafted sgbiz: link to exploit Tencent’s Sogou Input Method for Windows and deploy the GRAYRABBIT backdoor. Gen Digital says the activity involv...

Open Happening

WeWorm zero-click WeChat-call worm on Android and iOS

Malware Activity
H score26 First: 09.09.2026 18:00 Last: 09.09.2026 18:00 Sources 1

How related: It is “the first zero-click worm to spread through WeChat calls across iOS and Android,” Calif researchers claimed in a disclosure report dated September 8.

About this happening: The WeWorm malware was disclosed as a zero-click worm that spreads through WeChat calls on Android and iOS, creating a path to account takeover without user intera...

Open Happening

Apple macOS security update for CVE-2026-65400

Security Patch Release
H score89 First: 14.08.2026 17:59 Last: 14.08.2026 17:59 Sources 1

About this happening: Apple released fixes for CVE-2026-65400 in macOS Tahoe 26.6.1 and related releases, closing a Screen Sharing authentication bypass that could let network attackers...

Open Happening

Timeline

  3. 08.09.2026 14:54 1 articles · 13d ago

    Calif demos a WeChat worm across three test phones

    Technical Analysis Update

    On 11 August, Calif demonstrated a WeChat worm across three test phones: one Android phone called an iPhone, took over its WeChat while the phone was still ringing, and the compromised iPhone then called a second Android phone.

    Show sources
    Open in new tab
  4. 08.09.2026 14:54 3 articles · 13d ago

    Tencent releases WeChat 8.0.77 for Android and 8.0.76 for iOS

    Mitigation Patch Update

    Tencent released WeChat 8.0.77 for Android and 8.0.76 for iOS on 21 August, and Calif said those releases mitigated the bug.

    Show sources
    Open in new tab