Man-in-the-Disk Vulnerability in WhatsApp [CVE-2021-24027] vuln mobile background exploit strategy **tl;dr** WhatsApp stored TLS session resumption files on the sdcard where a malicious application or some social engineering attacker could read.   20 April 2021