User avatar
Michał "rysiek" Woźniak · 🇺🇦 @rysiek@mstdn.social
31m
If you use or know someone who does – there seems to be a remote code execution vulnerability in Telegram:
nitter.catsarch.com/v12sec/status/2120471754166415821

It is apparently being actively exploited.

The vulnerability is bad, it can lead to account take over or worse as it apparently provides the attacker with a way to run code directly on the device, outside of the sandbox.

Apparently it has now been patched, so install updates as soon as possible!

It relates to the new "widgets".
2
0
0
0
User avatar
nicole 🔜 XVI P.I.W.O. @mkljczk@twojstary.gay
13m
@rysiek a good moment to remind that there is literally no reason to have telegram installed as a desktop app. its webapp has pretty much full feature parity and much lower attack surface (it's one of the few good things about telegram)
1
0
1
0
User avatar
Michał "rysiek" Woźniak · 🇺🇦 @rysiek@mstdn.social
11m
@mkljczk I'd argue there is no reason to use Telegram at all. And plenty, in fact, to not use it.
0
0
1
0