The lotusbail NPM package steals WhatsApp credentials, messages, and contacts, and provides persistent access to the victims’ accounts.
Plus: Cisco discloses a zero-day with no available patch, Venezuela accuses the US of a cyberattack, and more.