Photo: Carsten Rehder/picture alliance via Getty Images

WhatsApp has identified an "advanced security flaw" in its messaging service that allowed hackers to install spyware onto phones, the Facebook-owned company confirmed Monday, as it urged its 1.5 billion users to update the latest app version.

Why matters: The Financial Times first reported the vulnerability was developed by NSO Group. The Israeli security firm has been accused of supplying tools for spying on rights groups and journalists, including the slain Washington Post columnist Jamal Khashoggi. Amnesty International is launching legal action to get NSO Group's export license withdrawn in Israel. NSO Group denies any wrongdoing.

Details: WhatsApp told the BBC its security team first identified the flaw and shared details with rights groups, the Department of Justice and others this month. Phones became infected with sophisticated spyware via a missed in-app call.

The big picture: The company said the issue affected a "select number of users" and the fix was rolled out Friday, per the BBC.

"The attack has all the hallmarks of a private company reportedly that works with governments to deliver spyware that takes over the functions of mobile phone operating systems."
— WhatsApp briefing note to journalists.

The other side: NSO Group said in a statement to media outlets the company was investigating the issue. "Under no circumstances would NSO be involved in the operating or identifying of targets of its technology, which is solely operated by intelligence and law enforcement agencies," it said.

Go deeper

Updated 1 hour ago - Health

Atlanta Mayor Keisha Lance Bottoms tests positive for coronavirus

Atlanta Mayor Keisha Lance Bottoms said on Monday that she has tested positive for the coronavirus after displaying no symptoms.

Why it matters: Bottoms, one of several Black women on the shortlist to be Joe Biden's running mate, has risen to national prominence in recent months as part of mass protests over racism and police brutality — driven in part by the killing of Rayshard Brooks by Atlanta police.

Updated 1 hour ago - Politics & Policy

Coronavirus dashboard

Illustration: Eniola Odetunde/Axios

  1. Global: Total confirmed cases as of 6 p.m. ET: 11,520,461 — Total deaths: 535,499 — Total recoveries — 6,231,052Map.
  2. U.S.: Total confirmed cases as of 6 p.m. ET: 2,911,888 — Total deaths: 130,101 — Total recoveries: 906,763 — Total tested: 35,515,075Map.
  3. Public health: Case growth outpacing testing in hotspots.
  4. States: West Virginia becomes latest state to mandate facial coverings in public.
  5. Politics: Atlanta Mayor Keisha Lance Bottoms tests positiveCuomo accuses Trump of "enabling" the coronavirus surge — Sen. Chuck Grassley opts out of attending GOP convention over coronavirus concerns.

Trump ramps up culture war attacks

Photo: Tasos Katopodis/Getty Images

President Trump's attacks are spreading to sports that are cornerstones of rural, conservative white American life.

Why it matters: The culture war that engulfed the NBA and NFL is reaching other major leagues, with teams that stonewalled activists for years suddenly showing a willingness to listen.