{"id":4642,"date":"2026-09-29T19:39:13","date_gmt":"2026-09-29T19:39:13","guid":{"rendered":"https:\/\/netguide.io\/news\/2026\/09\/29\/whatsapp-corrige-zero-click-security-flaw-apres-paragon-spyware-attaques\/"},"modified":"2026-09-29T19:39:14","modified_gmt":"2026-09-29T19:39:14","slug":"whatsapp-corrige-zero-click-security-flaw-apres-paragon-spyware-attaques","status":"publish","type":"post","link":"https:\/\/netguide.io\/news\/fr\/2026\/09\/29\/whatsapp-corrige-zero-click-security-flaw-apres-paragon-spyware-attaques\/","title":{"rendered":"WhatsApp corrige Zero-Click Security Flaw apr\u00e8s Paragon Spyware Attaques"},"content":{"rendered":"<div id=\"netgu-2324519996\" class=\"netgu-before-content netgu-entity-placement\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-6258556257245998\" \ndata-ad-slot=\"3494115342\" \ndata-ad-format=\"auto\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<p class=\"wp-block-paragraph\">WhatsApp a r\u00e9cemment corrig\u00e9 une grave vuln\u00e9rabilit\u00e9 s\u00e9curitaire qui a \u00e9t\u00e9 exploit\u00e9e par les cybercriminels pour installer le logiciel espion Graphite de la soci\u00e9t\u00e9 isra\u00e9lienne Paragon sur les appareils des individus cibl\u00e9s. Cette vuln\u00e9rabilit\u00e9 z\u00e9ro clic a \u00e9t\u00e9 utilis\u00e9e dans une attaque visant des journalistes et des membres de la soci\u00e9t\u00e9 civile, et elle a \u00e9t\u00e9 d\u00e9couverte par les chercheurs en s\u00e9curit\u00e9 du Citizen Lab de l&#8217;Universit\u00e9 de Toronto.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">L&#8217;attaque a tir\u00e9 parti d&#8217;une vuln\u00e9rabilit\u00e9 de z\u00e9ro jour qui a permis aux attaquants d&#8217;installer le spyware sur les appareils des victimes sans qu&#8217;ils aient \u00e0 effectuer un seul clic \u2013 d&#8217;o\u00f9 le terme \u00ab z\u00e9ro clic \u00bb. WhatsApp a r\u00e9pondu en fixant le probl\u00e8me \u00e0 la fin de 2024, sans exiger une mise \u00e0 jour des utilisateurs finaux. Il a \u00e9t\u00e9 d\u00e9cid\u00e9 de ne pas attribuer d&#8217;ID CVE (Vuln\u00e9rabilit\u00e9s et expositions communes) \u00e0 ce d\u00e9faut, apr\u00e8s que la soci\u00e9t\u00e9 eut examin\u00e9 les lignes directrices pertinentes du syst\u00e8me MITRE CVE ainsi que ses propres normes internes.<\/p><div id=\"netgu-428340908\" class=\"netgu-content netgu-entity-placement\"><aside class=\"deals-top deals-top--compact\">\n\n\t\t\t<h3 class=\"deals-top__title\">Top-Deals<\/h3>\n\t\n\t\t\t<ul class=\"deals-top__list\">\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/moon-knight-digital-watch-face-fuer-wear-os-4\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/deal-27-150x150.png\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">MOON KNIGHT Digital Watch Face f\u00fcr Wear OS 4+<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<s>0.89 \u20ac<\/s>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-discount\">-100%<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t55\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/train-sim-world-7-starter-pack-kostenlos-fuer-ps4-ps5-xbox-pc\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/capsule_616x353-11-150x150.jpg\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">Train Sim World 7: Starter Pack kostenlos f\u00fcr PS4, PS5, Xbox, PC<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t55\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/ml2u-watchfaces-fuer-wearos-im-google-play-store-2\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/2844734_1-150x150.webp\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">ML2U Watchfaces f\u00fcr WearOS im Google Play Store<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<s>1.39 \u20ac<\/s>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-discount\">-100%<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t54\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/kostenloses-dlc-bundle-fuer-gears-of-war-e-day-liquid-death-bundle\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/2844571_1-150x150.webp\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">Kostenloses DLC-Bundle f\u00fcr Gears of War E-Day \u2013 Liquid Death Bundle<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t54\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/kostenlose-emote-im-clash-royale-store\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/share-image-clashroyale-150x150.jpg\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">Kostenlose Emote im Clash Royale-Store<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t54\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t<\/ul>\n\n\t\t\t\t\t<p class=\"deals-top__more\">\n\t\t\t\t<a href=\"https:\/\/netguide.io\/deals\/\">Alle Deals ansehen \u2192<\/a>\n\t\t\t<\/p>\n\t\t\t<\/aside>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Attaques cibl\u00e9es contre les journalistes et les militants<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">L&#8217;attaque a touch\u00e9 environ 90 utilisateurs Android de plus de deux douzaines de pays, y compris des journalistes et des militants d&#8217;Italie. Les agresseurs ont d&#8217;abord ajout\u00e9 leurs victimes \u00e0 un groupe WhatsApp et ont ensuite envoy\u00e9 un document PDF sp\u00e9cialement con\u00e7u. Le PDF a d\u00e9clench\u00e9 l&#8217;exploitation et a permis d&#8217;installer le logiciel espion Graphite en arri\u00e8re-plan. Ce logiciel espion pourrait alors \u00e9galement compromettre d&#8217;autres applications sur les appareils affect\u00e9s et donner aux attaquants acc\u00e8s aux canaux de communication priv\u00e9s des victimes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WhatsApp a contact\u00e9 directement tous les utilisateurs concern\u00e9s et les a inform\u00e9s du compromis possible de leurs appareils. Le porte-parole de WhatsApp a soulign\u00e9 qu&#8217;il s&#8217;agit l\u00e0 d&#8217;un autre exemple de pourquoi les entreprises qui distribuent des logiciels espions doivent \u00eatre tenues responsables de leurs activit\u00e9s ill\u00e9gales.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">L&#8217;espion graphique et son arri\u00e8re-plan<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Le logiciel espion Graphite a \u00e9t\u00e9 d\u00e9velopp\u00e9 par Paragon Solutions, une entreprise isra\u00e9lienne, et est utilis\u00e9 pour la surveillance cibl\u00e9e des plateformes de communication. Contrairement \u00e0 beaucoup d&#8217;autres soci\u00e9t\u00e9s de logiciels espions, Paragon pr\u00e9tend vendre ses produits exclusivement aux pays d\u00e9mocratiques et \u00e0 leurs organismes de r\u00e9pression. N\u00e9anmoins, Paragon est de plus en plus li\u00e9 aux informations selon lesquelles ses technologies pourraient \u00e9galement \u00eatre d\u00e9ploy\u00e9es dans des contextes autoritaires.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Gr\u00e2ce \u00e0 une analyse de l&#8217;infrastructure serveur de Paragon, Citizen Lab a pu trouver des indices importants sur l&#8217;origine et la port\u00e9e des activit\u00e9s d&#8217;espionnage. On a constat\u00e9, entre autres, que plusieurs empreintes digitales et certificats indiquaient des liens avec divers gouvernements, dont l&#8217;Australie, le Canada, le Danemark, Isra\u00ebl et Singapour.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Paragon et ses liens avec les gouvernements<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Paragon a \u00e9t\u00e9 fond\u00e9 en 2019 par Ehud Barak, ancien premier ministre isra\u00e9lien, et Ehud Schneorson, ancien commandant de l&#8217;Unit\u00e9 d&#8217;Isra\u00ebl 8200. En d\u00e9cembre 2024, la soci\u00e9t\u00e9 a \u00e9t\u00e9 acquise par le groupe d&#8217;investissement AE Industrial Partners bas\u00e9 en Floride pour 900 millions de dollars am\u00e9ricains. Selon des rapports, Paragon s&#8217;\u00e9tait d\u00e9j\u00e0 associ\u00e9 \u00e0 l&#8217;US Drug Enforcement Administration (DEA) en 2022, et en 2024 il est apparu que l&#8217;entreprise avait sign\u00e9 un contrat d&#8217;une valeur de 2 millions de dollars avec l&#8217;agence am\u00e9ricaine d&#8217;immigration et d&#8217;ex\u00e9cution douani\u00e8re (ICE).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">WhatsApp r\u00e9pond \u00e0 une action en justice<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">WhatsApp a d\u00e9clar\u00e9 qu&#8217;elle avait envoy\u00e9 \u00e0 Paragon une lettre \u00abcease-and-desist\u00bb et envisageait d&#8217;engager une action en justice contre l&#8217;entreprise. Il s&#8217;agit d&#8217;une autre \u00e9tape dans la lutte contre les entreprises qui d\u00e9veloppent des technologies qui portent atteinte \u00e0 la protection des donn\u00e9es et aux droits des individus.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">L&#8217;application WhatsApp a mis fin \u00e0 une campagne d&#8217;espionnage paragone ciblant un certain nombre d&#8217;utilisateurs, y compris des journalistes et des membres de la soci\u00e9t\u00e9 civile. Nous avons contact\u00e9 directement les personnes touch\u00e9es, a d\u00e9clar\u00e9 un porte-parole de WhatsApp. C&#8217;est le dernier exemple de pourquoi les entreprises qui produisent des logiciels espions doivent \u00eatre tenues responsables de leurs actions ill\u00e9gales. WhatsApp continuera de prot\u00e9ger la vie priv\u00e9e des gens et leur droit de communiquer en toute s\u00e9curit\u00e9.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cet incident met \u00e0 nouveau en lumi\u00e8re les menaces que posent les logiciels de surveillance commerciale tels que Paragon et la n\u00e9cessit\u00e9 d&#8217;assurer la protection de la vie priv\u00e9e des utilisateurs dans le monde entier. En r\u00e9agissant rapidement pour corriger la vuln\u00e9rabilit\u00e9 et avertir les utilisateurs touch\u00e9s, WhatsApp a pris une mesure importante dans la lutte contre les cyberattaques et la pr\u00e9vention de l&#8217;espionnage de donn\u00e9es. N\u00e9anmoins, il reste \u00e0 mettre fin au commerce illicite de ces technologies et \u00e0 tenir les responsables responsables responsables responsables.<\/p>\n<div id=\"netgu-3937505304\" class=\"netgu-after-content netgu-entity-placement\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-6258556257245998\" \ndata-ad-slot=\"4559785002\" \ndata-ad-format=\"auto\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>WhatsApp a corrig\u00e9 un d\u00e9faut de z\u00e9ro clic exploit\u00e9 pour planter l&#8217;espion Graphite de Paragon sur les t\u00e9l\u00e9phones des journalistes et des militants. Voil\u00e0 ce qui s&#8217;est pass\u00e9.<\/p>\n","protected":false},"author":1,"featured_media":1485,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[],"tags":[],"class_list":["post-4642","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"brizy_media":[],"_links":{"self":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/4642","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/comments?post=4642"}],"version-history":[{"count":1,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/4642\/revisions"}],"predecessor-version":[{"id":4643,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/4642\/revisions\/4643"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/media\/1485"}],"wp:attachment":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/media?parent=4642"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/categories?post=4642"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/tags?post=4642"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}