If you use #Telegram or know someone who does – there seems to be a remote code execution vulnerability in Telegram:
https://nitter.catsarch.com/v12sec/status/2120471754166415821
It is apparently being actively exploited.
The vulnerability is *bad*, it can lead to account take over or worse as it apparently provides the attacker with a way to run code directly on the device, outside of the sandbox.
Apparently it has now been patched, so install updates as soon as possible!
It relates to the new "widgets".
"Widgets" is a new functionality that Telegram added a few days ago:
https://nitter.catsarch.com/durov/status/2120148866469376463
I don't have Telegram to test it, but be very careful – apparently the exploit works without any user interaction. Update ASAP.
Or ideally, ditch Telegram already. It has never been safe to use.
#Telegram #InfoSec